b4f57a2979f0ca531f089e743ab600d58056fd4b6cff89cc921793b05046a575

General

Target

b4f57a2979f0ca531f089e743ab600d58056fd4b6cff89cc921793b05046a575
Size

749KB
MD5

5cbb04793ac08d34b293ec3229991491
SHA1

1875a47fc657083917f1f1500586e79f791c37c4
SHA256

b4f57a2979f0ca531f089e743ab600d58056fd4b6cff89cc921793b05046a575
SHA512

6368ac5969001fb3c20e2278cbda43d276bb2b4170496dcee12302c12eeffbbe97afcb8cd91ff5c5a72aeea8f6e8bb45f3604e3afced8d91f84858484912ea69
SSDEEP

12288:NX9u6Bappik7VPG93o8xU3HhCdNFYF4K32NRvDXdFS3O9sjqq:NNu6upiu+94+U3HhCWXmDrdFmW

Score

N/A

Malware Config

Signatures

Files

b4f57a2979f0ca531f089e743ab600d58056fd4b6cff89cc921793b05046a575
.exe windows x86

a1f4a8e47b6a6769a86132cb8bbc807c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteFileA
GetLastError
HeapFree
RemoveDirectoryA
WriteFile
GetCommandLineA
CreateDirectoryW
FindClose
FindClose
OpenEventA
ResetEvent
CreateFileA
ReleaseSemaphore
CreateFileMappingW
CancelIo
GetModuleHandleA
VirtualProtectEx
GetFileType
RemoveDirectoryA
lstrlenA
ReleaseMutex
CreateEventW
WriteConsoleW
SetStdHandle
Sleep

cryptui

CryptUIWizBuildCTL
CryptUIWizDigitalSign
CryptUIDlgViewContext
CryptUIWizExport
CryptUIDlgFreeCAContext
CryptUIStartCertMgr
DllUnregisterServer
LocalEnrollNoDS
DllRegisterServer
LocalEnroll
WizardFree
CryptUIWizImport
WizardFree

dbnmpntw

ConnectionClose
ConnectionClose
ConnectionClose
ConnectionClose

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 741KB - Virtual size: 740KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: - Virtual size: 4KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a1f4a8e47b6a6769a86132cb8bbc807c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

cryptui

dbnmpntw

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 1024B - Virtual size: 1.3MB

.rsrc Size: 741KB - Virtual size: 740KB

.reloc Size: - Virtual size: 4KB

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 1024B - Virtual size: 1.3MB

.rsrc
Size: 741KB - Virtual size: 740KB

.reloc
Size: - Virtual size: 4KB