dc3aa2163286626f1260c9522275c46594be582f9ba8719f24231a486bb0c819

Sharing

Copy URL Twitter E-mail

General

Target

dc3aa2163286626f1260c9522275c46594be582f9ba8719f24231a486bb0c819
Size

265KB
MD5

260c7c3dde8789e77647c0caec0480a7
SHA1

c1ebc3e9045cea6b664ecd7cd0ebb3932597d292
SHA256

dc3aa2163286626f1260c9522275c46594be582f9ba8719f24231a486bb0c819
SHA512

d1e31a64fe2ddf4ae7c036af544d7c7d2979faf453f9db9ad112a6a50d5ca517601d2b843dfd1d5420c94b497cb384edd07bd7a271796afdadbbb14bf65372f8
SSDEEP

6144:aR645kkdvmUgNsKM1Zb58/9ceKFKYy5V6MpMk:aBkkdvgCKgo/GeKFCl3

Score

N/A

Malware Config

Signatures

Files

dc3aa2163286626f1260c9522275c46594be582f9ba8719f24231a486bb0c819
.exe windows x86

381b317d8d275f50c29bc0f3d09c91e4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForSingleObject
CreateMutexA
GetACP
GetLocaleInfoA
GetVersionExA
RaiseException
InitializeCriticalSection
FreeLibrary
GetModuleFileNameA
WaitForMultipleObjects
GetComputerNameA
GetModuleHandleA
LoadResource
FileTimeToSystemTime
GetLocalTime
GetCurrentProcessId
MultiByteToWideChar
GetExitCodeThread
GetCurrentProcess
ExitProcess
GetCurrentThreadId
QueryPerformanceCounter
GetTickCount
TlsAlloc
GetLastError
SetUnhandledExceptionFilter
GetOEMCP
GetCPInfo
HeapCreate
IsBadWritePtr
GetStartupInfoA
GetEnvironmentStringsW
LoadLibraryA
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
GetStringTypeW
GetSystemInfo
CreateMutexW
GetProcAddress

query

CIState
CIGetGlobalPropertyList
?CoTaskAllocator@@3VCCoTaskAllocator@@A
LoadTextFilter
LoadIFilter

mscat32

CryptCATEnumerateAttr
CryptCATAdminAddCatalog
CryptCATOpen
CryptCATCDFEnumAttributes
CatalogCompactHashDatabase
CryptCATGetAttrInfo

Sections

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.edata
Size: 5KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 2KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 102KB - Virtual size: 150KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 116KB - Virtual size: 190KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 2KB - Virtual size: 458KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

381b317d8d275f50c29bc0f3d09c91e4

Headers

File Characteristics

Imports

kernel32

query

mscat32

Sections

.rdata Size: 9KB - Virtual size: 8KB

.text Size: 11KB - Virtual size: 12KB

.edata Size: 5KB - Virtual size: 39KB

.rdata Size: 2KB - Virtual size: 23KB

.edata Size: 102KB - Virtual size: 150KB

.data Size: 5KB - Virtual size: 292KB

.edata Size: 116KB - Virtual size: 190KB

.edata Size: 2KB - Virtual size: 458KB

.rsrc Size: 10KB - Virtual size: 10KB

.rdata
Size: 9KB - Virtual size: 8KB

.text
Size: 11KB - Virtual size: 12KB

.edata
Size: 5KB - Virtual size: 39KB

.rdata
Size: 2KB - Virtual size: 23KB

.edata
Size: 102KB - Virtual size: 150KB

.data
Size: 5KB - Virtual size: 292KB

.edata
Size: 116KB - Virtual size: 190KB

.edata
Size: 2KB - Virtual size: 458KB

.rsrc
Size: 10KB - Virtual size: 10KB