561863c950b9044ed53b3525624b64688b47492251462da5e5fa250cbb02e7f5

General

Target

561863c950b9044ed53b3525624b64688b47492251462da5e5fa250cbb02e7f5
Size

61KB
MD5

fe594130d1956e1da0746280ef604923
SHA1

ffb0f78d5d4181c65577973dd9386adf45b60cae
SHA256

561863c950b9044ed53b3525624b64688b47492251462da5e5fa250cbb02e7f5
SHA512

e4b00cbf4c38316298c292fe965a574a608042a68fd72f17032f9bb049442cfeae0eb09eb9d54bff452f2e9ca513a10377ddd93940bb7081ddc12202ba913c50
SSDEEP

1536:S2WniOfaXYGIVTgVgeG3MCLrYQVbeuGI8Wz2d/Q:FcSKvFrDVSFWz4/Q

Score

N/A

Malware Config

Signatures

Files

561863c950b9044ed53b3525624b64688b47492251462da5e5fa250cbb02e7f5
.exe windows x86

6e49a60ef6733f624a35047a18f1c0fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
SuspendThread
VirtualAlloc
GetCommandLineA
SetFileAttributesW
SetEndOfFile
SetLastError
GetCurrentDirectoryA
GetVersion
FindAtomW
GetModuleHandleA
SetLastError
ReadFile
WaitForSingleObject
DeleteAtom
DeleteFileA
EnterCriticalSection
IsBadReadPtr
GetStdHandle
HeapSize
ExitProcess
CloseHandle
GetEnvironmentVariableA
CreateFileA
GetFileSize

cryptui

CryptUIWizDigitalSign
LocalEnrollNoDS
LocalEnroll
DllRegisterServer
CryptUIDlgViewContext
CryptUIWizBuildCTL
CryptUIStartCertMgr
WizardFree
DllUnregisterServer
CryptUIWizExport
CryptUIWizImport
WizardFree
CryptUIDlgFreeCAContext

winrnr

NSPStartup
NSPStartup
NSPStartup
NSPStartup

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ezvlhqy
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6e49a60ef6733f624a35047a18f1c0fe

Headers

File Characteristics

Imports

kernel32

cryptui

winrnr

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 54KB - Virtual size: 82KB

ezvlhqy Size: - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 54KB - Virtual size: 82KB

ezvlhqy
Size: - Virtual size: 4KB