d2f256e6fa235bb34fb7e1889b139b6d42ed68b5b201f4fd4506e99067c807d2

Sharing

Copy URL Twitter E-mail

General

Target

d2f256e6fa235bb34fb7e1889b139b6d42ed68b5b201f4fd4506e99067c807d2
Size

168KB
MD5

ce3f6bfc296ecab50f4ff3b808d8c000
SHA1

5bc375a8b566468ddef65b5eab5d3a64f1e94f6e
SHA256

d2f256e6fa235bb34fb7e1889b139b6d42ed68b5b201f4fd4506e99067c807d2
SHA512

a6f17b10badf688e0349a66e1a7affe55e3486d9372416cbf84ceb60086b25d70a041c43e4a17f0a020cb6f97edee5d34ea706bb40b64806f886b44e459c6e61
SSDEEP

3072:7JQL5F14yXFikzxiFJwtwjnrgWpwnIapRdkuAfEh/aGWSl4oWlVeR:7JQL57GmgnccOkuAssGWSCs

Score

N/A

Malware Config

Signatures

Files

d2f256e6fa235bb34fb7e1889b139b6d42ed68b5b201f4fd4506e99067c807d2
.exe windows x86

57c4b1513c02c2979637b0acbf0cb561

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ntdll

NtQuerySystemTime
RtlIdentifierAuthoritySid
RtlNtStatusToDosError
RtlSubAuthorityCountSid
RtlInitUnicodeString
RtlSubAuthoritySid

kernel32

VirtualAlloc

shlwapi

PathIsUNCServerShareW
PathAppendW

cryptui

CryptUIDlgSelectCertificateW
CryptUIDlgViewCertificateW

ole32

CoGetClassVersion

shell32

ILFindLastID

dsprop

ADsPropSetHwnd
ADsPropCreateNotifyObj
ADsPropShowErrorDialog
ADsPropGetInitInfo
FindSheet
ADsPropSendErrorMessage
ADsPropSetHwndWithTitle

credui

CredUIInitControls
CredUIParseUserNameW

gdi32

CreateHatchBrush

Sections

.text
Size: 512B - Virtual size: 396B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 96KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 28B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.data
Size: 29KB - Virtual size: 848KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

57c4b1513c02c2979637b0acbf0cb561

Headers

DLL Characteristics

File Characteristics

Imports

ntdll

kernel32

shlwapi

cryptui

ole32

shell32

dsprop

credui

gdi32

Sections

.text Size: 512B - Virtual size: 396B

.rdata Size: 96KB - Virtual size: 96KB

.rsrc Size: 39KB - Virtual size: 38KB

.reloc Size: 512B - Virtual size: 28B

.data Size: 29KB - Virtual size: 848KB

.idata Size: 1KB - Virtual size: 1KB

.text
Size: 512B - Virtual size: 396B

.rdata
Size: 96KB - Virtual size: 96KB

.rsrc
Size: 39KB - Virtual size: 38KB

.reloc
Size: 512B - Virtual size: 28B

.data
Size: 29KB - Virtual size: 848KB

.idata
Size: 1KB - Virtual size: 1KB