847350d19a2aff63910b41755ab2efc6b503a79f49939535de78fd9e2b987844

Sharing

Copy URL

Twitter E-mail

General

Target

847350d19a2aff63910b41755ab2efc6b503a79f49939535de78fd9e2b987844
Size

878KB
MD5

6eb796dff32db9ecc27de7d11e2a0b9b
SHA1

382bd667254ea0f388492df58b5c09746aa48adc
SHA256

847350d19a2aff63910b41755ab2efc6b503a79f49939535de78fd9e2b987844
SHA512

563bb538f73de9d46d162960b4e74dc4735708f7e977f68d11fa65f2a4fbec6e76b3d52def5a9c02de5e47096aad9e11aa0f39e48693b3024062b2e2585df036
SSDEEP

12288:545lsk3cppypFgcBcF6gUmbMrWEBD24uX0gAb+yKI09ZgP5qEsPtRac5Mbk2hEV+:5454ppE7MICQMX0gskCvWzac8lhEV

Score

N/A

Malware Config

Signatures

Files

847350d19a2aff63910b41755ab2efc6b503a79f49939535de78fd9e2b987844
.exe windows x86

a47ceb1dc55025419997e647e0a68b7b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_BYTES_REVERSED_LO
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_BYTES_REVERSED_HI

Imports

cfgmgr32

CM_Get_Depth_Ex

mssign32

GetCryptProvFromCert
FreeCryptProvFromCert
PvkFreeCryptProv
PvkPrivateKeySave
SignError
PvkGetCryptProv
PvkPrivateKeyAcquireContextFromMemory

kernel32

GetUserDefaultUILanguage
GetModuleHandleW
TerminateProcess
SetUnhandledExceptionFilter
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetProcAddress
CompareFileTime
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
LocalFree
CloseHandle
UnmapViewOfFile
FindResourceA
LoadResource
SizeofResource
LockResource
FreeResource
SetLastError
SystemTimeToFileTime
LocalFileTimeToFileTime
GetLastError
MapViewOfFile
CreateFileMappingA
GetFileSize
WriteFile
WideCharToMultiByte
LocalAlloc
GetVersionExA
MultiByteToWideChar
CreateFileA
CreateFileW
DeleteFileA
DeleteFileW

user32

LoadStringA
LoadStringW

ole32

CoInitialize
CoUninitialize
CoCreateGuid

rpcrt4

UuidToStringA
RpcStringFreeA
UuidCreate

shlwapi

SHDeleteKeyA

msvcrt

exit
_cexit
__winitenv
_exit
_c_exit
strtok
??2@YAPAXI@Z
??3@YAXPAX@Z
wcslen
_wtol
_wcsnicmp
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
free
_wcsicmp
vwprintf
wprintf
malloc
swprintf
_XcptFilter
wcscpy
__wgetmainargs

advapi32

CryptGetUserKey
CryptSetKeyParam
CryptGenKey
CryptDestroyKey
CryptAcquireContextA
CryptGetProvParam
CryptReleaseContext

crypt32

CertFreeCertificateContext
CertSetCertificateContextProperty
CertAddEncodedCertificateToStore
CertOpenStore
CertCreateCertificateContext
CryptDecodeObject
CertComparePublicKeyInfo
CryptExportPublicKeyInfo
CryptEncodeObject
CryptQueryObject
CertStrToNameW
CryptHashPublicKeyInfo
CryptHashCertificate
CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertEnumCertificatesInStore
CertFindCertificateInStore
CertCompareIntegerBlob
CryptSignAndEncodeCertificate
CertCloseStore

Sections

.text
Size: 604KB - Virtual size: 603KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 238KB - Virtual size: 3.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a47ceb1dc55025419997e647e0a68b7b

Headers

File Characteristics

Imports

cfgmgr32

mssign32

kernel32

user32

ole32

rpcrt4

shlwapi

msvcrt

advapi32

crypt32

Sections

.text Size: 604KB - Virtual size: 603KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 238KB - Virtual size: 3.6MB

.rsrc Size: 32KB - Virtual size: 31KB

.text
Size: 604KB - Virtual size: 603KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 238KB - Virtual size: 3.6MB

.rsrc
Size: 32KB - Virtual size: 31KB