a8f534c61c168072a8cc63df97b86cf418e9bcc48db23d82efa4b95b7b6adeeb

Sharing

Copy URL Twitter E-mail

General

Target

a8f534c61c168072a8cc63df97b86cf418e9bcc48db23d82efa4b95b7b6adeeb
Size

260KB
MD5

d045ab47332d08e0e877cd35793a4df3
SHA1

4ed37bca6671553d9e37a3917ea1445512ca0184
SHA256

a8f534c61c168072a8cc63df97b86cf418e9bcc48db23d82efa4b95b7b6adeeb
SHA512

6ad392f082fd72e496072657deaf74494b2798c2479c4518c66a88d77052bed7bae9aa8fc22bdaecf76b1f2ae234215301078ec5d963d68f94351167bba1c2c3
SSDEEP

3072:vpw1f+NfrJd3NrLrz1uqv4xUzY4Z956MoE3tirlW0hRnNrnYWCzCR:vpwYNjJznreaGMgT8q

Score

N/A

Malware Config

Signatures

Files

a8f534c61c168072a8cc63df97b86cf418e9bcc48db23d82efa4b95b7b6adeeb
.exe windows x86

b78decfe742c2a10da3ec31df0b0df08

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleHandleW
SearchPathA
GetModuleHandleA
LoadLibraryA
lstrcmpA
lstrlenA
lstrcmpiA
EnterCriticalSection
LeaveCriticalSection
lstrcpynA
DeleteCriticalSection
GetProcAddress
LoadLibraryW
ExitProcess
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetProcessHeap
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoA
HeapSize
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
CreateFileA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
InitializeCriticalSectionAndSpinCount
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
Sleep
WriteFile
GetStdHandle
GetModuleFileNameA
CloseHandle
MultiByteToWideChar
ReadFile
SetHandleCount
GetFileType
SetFilePointer
RtlUnwind
FreeEnvironmentStringsA

activeds

ord4
ord20
ord8
ord29
ord9
ord16
ord30
ord13
ord17

crypt32

CertCreateCRLContext
CertCompareCertificate
CertEnumCRLContextProperties
PFXVerifyPassword
CertAddEncodedCTLToStore
CertRegisterPhysicalStore
CryptFindOIDInfo
CryptSetOIDFunctionValue
CertEnumPhysicalStore
CryptVerifyDetachedMessageSignature
CertDeleteCRLFromStore
CertCreateCertificateContext
CertAddSerializedElementToStore
CertGetIntendedKeyUsage
CertFindCRLInStore
CryptHashCertificate
CertVerifyCTLUsage

msi

ord246
ord212
ord260
ord217
ord67
ord93
ord213
ord10
ord226
ord271
ord228
ord94
ord154
ord267
ord130
ord202
ord229
ord111
ord243
ord272
ord277
ord216
ord95
ord40
ord168
ord258
ord192
ord16
ord209
ord42
ord9
ord177
ord231
ord85
ord270
ord255
ord71
ord259
ord179
ord104
ord172
ord126
ord87
ord156
ord264
ord256
ord81
ord155
ord84
ord36

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 190KB - Virtual size: 196KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b78decfe742c2a10da3ec31df0b0df08

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

activeds

crypt32

msi

Sections

.text Size: 55KB - Virtual size: 54KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 190KB - Virtual size: 196KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 55KB - Virtual size: 54KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 190KB - Virtual size: 196KB

.reloc
Size: 5KB - Virtual size: 4KB