a6a3b3d38d01303ed1b733cf58bdcf2597c1717acebd740e459d1e04af4d247f

General

Target

a6a3b3d38d01303ed1b733cf58bdcf2597c1717acebd740e459d1e04af4d247f
Size

61KB
MD5

876c630a4e80e54d4b6597c9cf856de1
SHA1

9fe76c6599b9ac91240f366e6c74811363bb2d0c
SHA256

a6a3b3d38d01303ed1b733cf58bdcf2597c1717acebd740e459d1e04af4d247f
SHA512

21d1ad1089bdbb99b5d43b88ea186191229b4bea28155a0792fb4b979fccf86ffd839e4a02aa7ec593eac352809c050312c10d9a20102017694f7d6c0408fcab
SSDEEP

1536:I2WUz/aXYGIVTgVgeG3MCLrIME5AkC2vV/:rCKvFrlCt

Score

N/A

Malware Config

Signatures

Files

a6a3b3d38d01303ed1b733cf58bdcf2597c1717acebd740e459d1e04af4d247f
.exe windows x86

2085802caec7cb504d6e0256bc5db064

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SuspendThread
ReadFile
SetLastError
HeapSize
SetEndOfFile
FindAtomW
GetModuleHandleA
WaitForSingleObject
IsBadReadPtr
DeleteAtom
GetVersion
CloseHandle
GetEnvironmentVariableA
CreateFileA
EnterCriticalSection
SetFileAttributesW
SetLastError
GetCommandLineA
GetCurrentDirectoryA
GetStdHandle
VirtualAlloc
DeleteFileA
GetFileAttributesA
ExitProcess
GetFileSize

cryptui

CryptUIWizExport
WizardFree
DllUnregisterServer
CryptUIWizBuildCTL
DllRegisterServer
CryptUIDlgViewContext
LocalEnrollNoDS
CryptUIDlgFreeCAContext
WizardFree
LocalEnroll
CryptUIWizImport
CryptUIStartCertMgr
CryptUIWizDigitalSign

winrnr

NSPStartup
NSPStartup
NSPStartup
NSPStartup

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

rbrhrnh
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2085802caec7cb504d6e0256bc5db064

Headers

File Characteristics

Imports

kernel32

cryptui

winrnr

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 54KB - Virtual size: 82KB

rbrhrnh Size: - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 54KB - Virtual size: 82KB

rbrhrnh
Size: - Virtual size: 4KB