823610a27d3f8dac4af89e18fe3000b96a8da08630c56fabc6f51fe896844d06

Sharing

Copy URL Twitter E-mail

General

Target

823610a27d3f8dac4af89e18fe3000b96a8da08630c56fabc6f51fe896844d06
Size

235KB
MD5

55594f5399f9328417d7bec372830102
SHA1

1c02c609700803737b0f6b9b9f3acbe23a9d768f
SHA256

823610a27d3f8dac4af89e18fe3000b96a8da08630c56fabc6f51fe896844d06
SHA512

ab1345de3f27dea0d08f634cd258f6497d4285cf014248752b581abd17be4bd3e014a789045e1a32cae1429bc7d7a49ced14ef9dbe10d78ac4cad7229092ac36
SSDEEP

6144:i1OZhLZ025oZNU52zl0q9P2nuIcuG4NBS7rMIhRvyf:xB0w4UAz4M94Nurpraf

Score

N/A

Malware Config

Signatures

Files

823610a27d3f8dac4af89e18fe3000b96a8da08630c56fabc6f51fe896844d06
.exe windows x86

2c5cadeb696a7b83b0138564f4bbc165

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

imagehlp

FindFileInPath
SymMatchString
UpdateDebugInfoFileEx
SymFromName
FindExecutableImage
ReBaseImage64
ImageAddCertificate
UpdateDebugInfoFile
SymEnumTypes
SymRegisterFunctionEntryCallback64
SymEnumerateSymbolsW
SymFunctionTableAccess
ImageGetCertificateData
ImageRemoveCertificate
SymRegisterFunctionEntryCallback
ImageGetDigestStream
SymGetSymFromAddr
FindDebugInfoFileEx
SymGetSymPrev64
SymGetLineFromAddr64
SymGetLineNext
SymGetSymFromName
SymUnDName64
SymEnumerateSymbolsW64
SymGetModuleBase
ImageNtHeader

dbghelp

SymGetTypeFromName
SearchTreeForFile
SymLoadModule
ImageRvaToSection
SymRegisterFunctionEntryCallback
SymGetTypeInfo
StackWalk
SymMatchString
dh
SymMatchFileName
SymSetContext
SymEnumSymbols
SymRegisterCallback64
SymSetSearchPath
SymLoadModule64
omap
SymGetModuleBase64
SymEnumerateSymbols64
SymFindFileInPath
SymGetLineFromAddr
ImageRvaToVa
SymSetOptions
SymLoadModuleEx
SymEnumerateSymbolsW
srcfiles

crypt32

CryptUnregisterOIDFunction
CertVerifyTimeValidity
CertSetStoreProperty
I_CryptFlushLruCache
CertEnumPhysicalStore
I_CryptGetDefaultCryptProvForEncrypt
CryptBinaryToStringA
CertVerifyCTLUsage
RegOpenKeyExU
CertDuplicateCRLContext
CertGetEnhancedKeyUsage
CryptImportPKCS8
CryptEnumOIDInfo
I_CryptCreateLruEntry
CryptSignAndEncodeCertificate
CertRemoveStoreFromCollection
CryptSIPRetrieveSubjectGuidForCatalogFile
CertCompareCertificate
CertRegisterSystemStore
PFXExportCertStoreEx
CryptSetProviderU
CryptRegisterDefaultOIDFunction
CertDeleteCTLFromStore
I_CryptGetLruEntryData
CertAddCRLContextToStore
CryptImportPublicKeyInfoEx
I_CryptEnableLruOfEntries
CertDuplicateStore
CryptGetKeyIdentifierProperty
I_CryptGetAsn1Encoder
CryptDecryptMessage
CryptHashToBeSigned
CertEnumCertificateContextProperties
CertEnumSystemStoreLocation
CertGetCTLContextProperty
RegCreateHKCUKeyExU
CryptEncryptMessage
I_CryptInsertLruEntry
CryptEncodeObject
CryptEnumProvidersU
CertSaveStore
I_CryptReleaseLruEntry
CertFindCertificateInStore
I_CryptGetLruEntryIdentifier
CertAddSerializedElementToStore
CertEnumCTLsInStore
CryptProtectData
CertRemoveEnhancedKeyUsageIdentifier
CertAddCTLContextToStore
I_CryptUnregisterSmartCardStore
CertEnumCTLContextProperties
CertFindChainInStore
RegSetValueExU
CertVerifyCRLTimeValidity
CertFreeCertificateContext
CertStrToNameW
CryptBinaryToStringW
CertEnumCertificatesInStore
I_CertSrvProtectFunction

hid

HidP_GetData
HidP_SetScaledUsageValue
HidD_GetIndexedString
HidP_GetCaps
HidD_GetProductString
HidP_GetUsages
HidD_GetPhysicalDescriptor
HidP_GetSpecificButtonCaps
HidD_GetHidGuid
HidP_GetButtonCaps
HidP_GetValueCaps
HidD_SetNumInputBuffers
HidD_GetPreparsedData
HidD_FreePreparsedData
HidD_GetInputReport
HidP_GetScaledUsageValue
HidP_SetUsages
HidD_SetFeature
HidP_MaxUsageListLength
HidD_GetNumInputBuffers

crtdll

atoi
_ismbcsymbol
feof
_msize
_fputchar
_mbbtype
fclose
_CIcosh
toupper
_ismbclegal
_ismbstrail
_ltoa
_memccpy
__argc_dll
_mbsnicmp
_swab
_tempnam
iswalpha
_yn
_strspnp
fgetc
_j1
_setmode
wcscoll
iswascii
wcstol
wcsncmp

kernel32

GetLocaleInfoA
CreateEventW
LoadLibraryW
SetConsoleScreenBufferSize
CompareFileTime
GetConsoleCommandHistoryLengthA
GetFirmwareEnvironmentVariableW
FormatMessageA
CopyLZFile
PeekConsoleInputA
GetLargestConsoleWindowSize
GetEnvironmentStringsA
HeapLock
VerLanguageNameA
GetProcessId
PeekConsoleInputW

Sections

.text
Size: 118KB - Virtual size: 117KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2c5cadeb696a7b83b0138564f4bbc165

Headers

File Characteristics

Imports

imagehlp

dbghelp

crypt32

hid

crtdll

kernel32

Sections

.text Size: 118KB - Virtual size: 117KB

.rdata Size: 35KB - Virtual size: 34KB

.data Size: 74KB - Virtual size: 74KB

.rsrc Size: 5KB - Virtual size: 5KB

.text
Size: 118KB - Virtual size: 117KB

.rdata
Size: 35KB - Virtual size: 34KB

.data
Size: 74KB - Virtual size: 74KB

.rsrc
Size: 5KB - Virtual size: 5KB