4d7585ce1a3630a32c91ff4cfccab5dc5f85c476ebc5abb73d788ac015835d40

General

Target

4d7585ce1a3630a32c91ff4cfccab5dc5f85c476ebc5abb73d788ac015835d40
Size

291KB
MD5

0c170a298f0641e3d25a80e375f88080
SHA1

7406b354fc56bb7b23ed22aab65d83c9f518ced9
SHA256

4d7585ce1a3630a32c91ff4cfccab5dc5f85c476ebc5abb73d788ac015835d40
SHA512

ff9addc102bf120aaa2f3494cb3c819434c3968baffcb58678b56a622d0f7ca1fc3e48e0f4636fcb9319ed6e64388771f516be02dba25387c09eb542332780bb
SSDEEP

6144:wp3oO1yylDMK6B6hD4SelDwHzZrxskl4rI6+G/CePoS4PrYC:wdzRoO8mVrakII1DeoDPkC

Score

N/A

Malware Config

Signatures

Files

4d7585ce1a3630a32c91ff4cfccab5dc5f85c476ebc5abb73d788ac015835d40
.exe windows x86

7a9528fa8c8cc531f08b76e0d0b83656

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetStdHandle
GetStartupInfoA
Sleep
HeapDestroy
GetFileAttributesA
GetPrivateProfileSectionW
GetDriveTypeW
CancelIo
CopyFileA
GetProcessHeap
VirtualQueryEx
DeleteFileA
GetModuleHandleA
lstrcpyA
SetEvent
GetCommandLineA
lstrlenW
WriteConsoleW
VirtualProtect
WriteConsoleW
WriteConsoleW

mmcndmgr

DllRegisterServer
DllGetClassObject
DllRegisterServer
DllCanUnloadNow

cryptui

CryptUIWizImport
WizardFree
DllRegisterServer
LocalEnrollNoDS
WizardFree
LocalEnroll
CryptUIWizExport
CryptUIDlgViewContext
CryptUIWizBuildCTL
CryptUIStartCertMgr
DllUnregisterServer
LocalEnroll
CryptUIWizDigitalSign

Sections

.text
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 284KB - Virtual size: 284KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 257B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.impexp
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7a9528fa8c8cc531f08b76e0d0b83656

Headers

File Characteristics

Imports

kernel32

mmcndmgr

cryptui

Sections

.text Size: 1KB - Virtual size: 1KB

.data Size: 3KB - Virtual size: 16KB

.rdata Size: 512B - Virtual size: 296B

.rsrc Size: 284KB - Virtual size: 284KB

.rdata Size: 512B - Virtual size: 257B

.impexp Size: 512B - Virtual size: 80B

.text
Size: 1KB - Virtual size: 1KB

.data
Size: 3KB - Virtual size: 16KB

.rdata
Size: 512B - Virtual size: 296B

.rsrc
Size: 284KB - Virtual size: 284KB

.rdata
Size: 512B - Virtual size: 257B

.impexp
Size: 512B - Virtual size: 80B