cda1f1921f8214c2bfe77fb5577b5130546f8c4e5dd63bd3c1be63d3faabccab

Sharing

Copy URL Twitter E-mail

General

Target

cda1f1921f8214c2bfe77fb5577b5130546f8c4e5dd63bd3c1be63d3faabccab
Size

199KB
MD5

3b03310fc1762d3f58e28f445a017853
SHA1

e858de888c262f277887d5573c0cf8c4050801c2
SHA256

cda1f1921f8214c2bfe77fb5577b5130546f8c4e5dd63bd3c1be63d3faabccab
SHA512

4952ee7444430e57e973f18113204846b1d5f73de3015933fd2c243f22f06a963eec9824a004f3005892f783deec8a7f6315661e3572323551a98b4ab13d2b55
SSDEEP

3072:YpKl96h/fYxZRLh9QwvmnRNUxfaltF7Nvwk5Pr/koWXsMFjWSVm3khGEKPkU:5l96hngDReRNufMtFhwkdIo2FRVm8VU

Score

N/A

Malware Config

Signatures

Files

cda1f1921f8214c2bfe77fb5577b5130546f8c4e5dd63bd3c1be63d3faabccab
.exe windows x86

310917a275399b3fc904289dc61e331e

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileW
lstrlenW
GetCurrentThread
GlobalLock
OutputDebugStringW
GetComputerNameW
LocalFree
GetModuleHandleA
InitializeCriticalSection
GetEnvironmentStringsW
LoadLibraryW
CloseHandle
LocalReAlloc
GlobalUnlock
GetSystemWindowsDirectoryW
lstrcmpiW
GetSystemDefaultLangID
OutputDebugStringA
GetProcAddress
GetCurrentProcess
InterlockedIncrement
GlobalAlloc
DeleteCriticalSection
GetTickCount
GetModuleFileNameW
WideCharToMultiByte
GetLastError
GlobalFree
IsBadReadPtr
InterlockedDecrement
FileTimeToSystemTime
FormatMessageW
GetDateFormatW
FileTimeToLocalFileTime
GetSystemTimeAsFileTime
GetStartupInfoA
SetUnhandledExceptionFilter
SetLastError
QueryPerformanceCounter
GetCPInfo
lstrcpyW

certcli

CAFindCertTypeByName
CAEnumCertTypes
CASetCertTypeProperty
CAGetCertTypeProperty
CASetCertTypeKeySpec
CACertTypeGetSecurity
CAFreeCertTypeExtensions
CACloseCertType
CACreateCertType
CAFindByName
CAFreeCertTypeProperty
CAEnumCertTypesForCA
CACloseCA
CASetCertTypeExtension
CAGetCertTypePropertyEx
CACertTypeSetSecurity
CAGetCertTypeKeySpec
CAEnumNextCertType
CAFreeCAProperty
CAUpdateCA
CAGetCertTypeFlags
CARemoveCACertificateType
CAGetCAProperty
CAUpdateCertType
CASetCertTypeFlags
CAGetCertTypeExtensions
CAAddCACertificateType

user32

RegisterClipboardFormatW
SystemParametersInfoW
SendDlgItemMessageW
WinHelpW
PostMessageW
LoadIconW
SetDlgItemTextW
SetCursor
SetFocus
DialogBoxParamW
EndDialog
GetDC
SetWindowLongW
GetParent
LoadBitmapW
wsprintfW
LoadStringW
SetWindowTextW
EnableWindow
MessageBoxW
InsertMenuItemW
LoadImageW
GetDlgItemTextA
GetDlgItem
SendMessageW
GetWindowLongW
LoadCursorW
ReleaseDC

msvcrt

wcsrchr
vswprintf
_onexit
_except_handler3
??2@YAPAXI@Z
??1type_info@@UAE@XZ
wcscpy
memmove
__dllonexit
wcstoul
wcscmp
wcsstr
_initterm
__RTDynamicCast
mbstowcs
_wcsicmp
wcscat
?terminate@@YAXXZ
malloc
??3@YAXPAX@Z
_adjust_fdiv
wcschr
wcslen
_wcsupr
free

comctl32

PropertySheetW
CreatePropertySheetPageW

advapi32

RegQueryValueExW
RegOpenKeyExW
RegDeleteKeyW
RegSetValueExW
RegDeleteValueW
RegCloseKey
RegEnumKeyExW
RegCreateKeyExW

Sections

.text
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 46KB - Virtual size: 6.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

310917a275399b3fc904289dc61e331e

Headers

File Characteristics

Imports

kernel32

certcli

user32

msvcrt

comctl32

advapi32

Sections

.text Size: 79KB - Virtual size: 78KB

.data Size: 70KB - Virtual size: 70KB

.data Size: 46KB - Virtual size: 6.2MB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 79KB - Virtual size: 78KB

.data
Size: 70KB - Virtual size: 70KB

.data
Size: 46KB - Virtual size: 6.2MB

.rsrc
Size: 2KB - Virtual size: 1KB