4d9ee4febf7d8927e99812b6160573e295f8ffce3dbf35c9248c5d2d3eaefd14

Sharing

Copy URL Twitter E-mail

General

Target

4d9ee4febf7d8927e99812b6160573e295f8ffce3dbf35c9248c5d2d3eaefd14
Size

200KB
MD5

301c7c43c5b977ea39b91eb32d3743e0
SHA1

942c8bf795926d7d2e2345ce75513b9d778bcfdd
SHA256

4d9ee4febf7d8927e99812b6160573e295f8ffce3dbf35c9248c5d2d3eaefd14
SHA512

7eb79f157c1f48109d04dd13bc913d0affb8d0a02797f3dd267610095cb6574e1cf6feb6a2fa18367718e29bd19ec9fdb656440e243138218a330e6f91a963d3
SSDEEP

3072:To/GyHh5rHZEeyMW+7zMfbkyO6jUAORgxVImJXVVX73s7jeVQulf9lHu:kOgh+T+HMj3jUAOROVIIF9c7qVNlltu

Score

N/A

Malware Config

Signatures

Files

4d9ee4febf7d8927e99812b6160573e295f8ffce3dbf35c9248c5d2d3eaefd14
.exe windows x86

03f9489196f20d4a01c98d79d0e86793

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

crypt32

CryptDecodeObject
CertCloseStore
CertFreeCRLContext
CertDuplicateStore
CertAddCertificateContextToStore
CertFreeCertificateContext
CryptEncodeObject
CertEnumCertificatesInStore
CryptFindOIDInfo
CertOpenStore
CertDuplicateCertificateContext
CryptQueryObject
CertEnumSystemStore
CertDeleteCertificateFromStore
CryptEnumOIDInfo
CertFindCRLInStore
CertGetEnhancedKeyUsage
CertSaveStore
CertGetCertificateContextProperty
CertGetNameStringW
CertControlStore

kernel32

LoadLibraryW
GlobalUnlock
GetCurrentProcess
GetSystemWindowsDirectoryW
GetSystemTimeAsFileTime
GlobalAlloc
FileTimeToLocalFileTime
OutputDebugStringW
GetLocaleInfoW
GetCPInfo
GetModuleHandleW
SetUnhandledExceptionFilter
GetDateFormatW
GetProcAddress
InterlockedIncrement
InterlockedDecrement
IsBadReadPtr
FormatMessageW
WriteFile
GetModuleHandleA
lstrlenW
GetComputerNameW
GetStartupInfoA
DeleteCriticalSection
CloseHandle
GetLastError
InitializeCriticalSection
IsValidCodePage
MultiByteToWideChar
lstrcpyW
lstrcmpiW
LocalAlloc
LocalReAlloc
SetLastError
GetSystemDefaultLCID
GetEnvironmentStringsA
DeleteFileA
WideCharToMultiByte
GlobalFree
LocalFree
GetModuleFileNameW
FileTimeToSystemTime
OutputDebugStringA
CreateFileW
GlobalLock
QueryPerformanceCounter

msvcrt

wcscpy
wcscat
wcschr
mbstowcs
??2@YAPAXI@Z
vswprintf
wcstoul
_onexit
_initterm
_adjust_fdiv
_wcsupr
__RTDynamicCast
??3@YAXPAX@Z
__dllonexit
?terminate@@YAXXZ
wcscmp
memmove
free
malloc
_wcsicmp
??1type_info@@UAE@XZ
wcslen
wcsstr
wcsrchr
_except_handler3
_purecall

ole32

StringFromCLSID
CreateStreamOnHGlobal
GetHGlobalFromStream
CoSetProxyBlanket
StringFromGUID2
CoTaskMemAlloc
CoTaskMemFree
ReleaseStgMedium
CoCreateInstanceEx

user32

SetWindowTextW
GetDlgItem
SetWindowLongW
SendMessageW
GetDlgItemTextA
DialogBoxParamW
ReleaseDC
SetFocus
PostMessageW
LoadStringW
GetDC
WinHelpW
LoadBitmapW
EnableWindow
GetParent
InsertMenuItemW
wsprintfW
RegisterClipboardFormatW
LoadCursorW
GetWindowLongW
SendDlgItemMessageW
LoadIconW
SetDlgItemTextW
MessageBoxW
SetCursor
LoadImageW
SystemParametersInfoW
EndDialog

gdi32

GetDeviceCaps
CreateFontIndirectW
DeleteObject

certcli

CAFindCertTypeByName
CAEnumNextCertType
CASetCertTypeKeySpec
CAGetCertTypeProperty
CAEnumCertTypes
CAFreeCAProperty
CACreateCertType
CAFreeCertTypeProperty
CACloseCA
CAUpdateCA
CASetCertTypeExtension
CASetCertTypeFlags
CAUpdateCertType
CACertTypeGetSecurity
CAAddCACertificateType
CACertTypeSetSecurity
CAFreeCertTypeExtensions
CAGetCertTypePropertyEx
CAFindByName
CASetCertTypeProperty
CAGetCAProperty
CAGetCertTypeExtensions
CAEnumCertTypesForCA
CARemoveCACertificateType
CACloseCertType
CAGetCertTypeFlags
CAGetCertTypeKeySpec

advapi32

RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegEnumKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW

comctl32

CreatePropertySheetPageW
PropertySheetW

cryptui

CryptUIDlgViewCRLW
CryptUIDlgSelectCertificateW
CryptUIWizExport
CryptUIDlgViewCertificateW

shell32

ShellExecuteW
ShellExecuteExW

rpcrt4

UuidCreate

Sections

.text
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mdata
Size: 60KB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

03f9489196f20d4a01c98d79d0e86793

Headers

File Characteristics

Imports

crypt32

kernel32

msvcrt

ole32

user32

gdi32

certcli

advapi32

comctl32

cryptui

shell32

rpcrt4

Sections

.text Size: 84KB - Virtual size: 84KB

.rdata Size: 48KB - Virtual size: 47KB

.mdata Size: 60KB - Virtual size: 1.1MB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 84KB - Virtual size: 84KB

.rdata
Size: 48KB - Virtual size: 47KB

.mdata
Size: 60KB - Virtual size: 1.1MB

.rsrc
Size: 6KB - Virtual size: 5KB