7152770e07b86b6df4618bda75c97f836b9483005a30a6f423b39f029acca1c6

General

Target

7152770e07b86b6df4618bda75c97f836b9483005a30a6f423b39f029acca1c6
Size

96KB
MD5

950ed9f159a708e7f30d55c921ccf210
SHA1

260b91bd3e626475263becb59b6abeaa6e8066b2
SHA256

7152770e07b86b6df4618bda75c97f836b9483005a30a6f423b39f029acca1c6
SHA512

934d64f5f0466c5ee9bedfb81edb4e9ff40471550601b9ba8651cd7ae7ee99b646be0d7289db421251777e4fbe4c30bba005a989964e4bcd94a3bf28d639d86a
SSDEEP

3072:tPt3ATbfZbakyilXWnj/+6QpJOnTyaCGvvIA:bAPUQWnRQpDDGvvIA

Score

N/A

Malware Config

Signatures

Files

7152770e07b86b6df4618bda75c97f836b9483005a30a6f423b39f029acca1c6
.exe windows x86

0f48bf166d4eac57608ccc5b9bb1d970

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

WriteConsoleW
WriteConsoleW
VirtualQueryEx
GetCommandLineA
GetStdHandle
ResumeThread
WriteConsoleW
CopyFileA
GetModuleHandleA
SetEvent
HeapDestroy
GetProcessHeap
DeleteFileA
VirtualProtect
GetPrivateProfileSectionW
GetDriveTypeW
GetStartupInfoA
Sleep
lstrlenW
GetFileAttributesW
lstrcpyA

mmcndmgr

DllRegisterServer
DllGetClassObject
DllRegisterServer
DllCanUnloadNow

cryptui

DllRegisterServer
CryptUIWizDigitalSign
CryptUIDlgViewContext
LocalEnrollNoDS
LocalEnroll
CryptUIWizBuildCTL
DllUnregisterServer
CryptUIWizExport
WizardFree
CryptUIStartCertMgr
LocalEnroll
CryptUIWizImport
WizardFree

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 296B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 257B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.expimp
Size: 512B - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f48bf166d4eac57608ccc5b9bb1d970

Headers

File Characteristics

Imports

kernel32

mmcndmgr

cryptui

Sections

.text Size: 2KB - Virtual size: 2KB

.data Size: 3KB - Virtual size: 2KB

.rdata Size: 512B - Virtual size: 296B

.rsrc Size: 110KB - Virtual size: 110KB

.rdata Size: 512B - Virtual size: 257B

.expimp Size: 512B - Virtual size: 80B

.text
Size: 2KB - Virtual size: 2KB

.data
Size: 3KB - Virtual size: 2KB

.rdata
Size: 512B - Virtual size: 296B

.rsrc
Size: 110KB - Virtual size: 110KB

.rdata
Size: 512B - Virtual size: 257B

.expimp
Size: 512B - Virtual size: 80B