b45850e945c800046c837743ccd989900ff0e0b2e69c50dc860a08bbef348993

Sharing

Copy URL Twitter E-mail

General

Target

b45850e945c800046c837743ccd989900ff0e0b2e69c50dc860a08bbef348993
Size

795KB
MD5

20195b84917cc5f58e58ea7e1fda37b8
SHA1

6c0281248079b5ea2a8be85aa6afac81830793d5
SHA256

b45850e945c800046c837743ccd989900ff0e0b2e69c50dc860a08bbef348993
SHA512

44b460cf2affda1afbe1dbed97736496c70c5932e0574ba81300a6115dbbacde35cdf10ceb216719b53dc2d6d16092f0cfe2a7ddf0b8256c0c62f9689ff367bb
SSDEEP

12288:pjh1guM/5/1RuGHn7fhhI50AYOBn4NF9bPXB8otfNadMrSnl5ZbOpJsJ5Kd1vUJ6:31MvRv75G50AYmoN8o3rYpZWB948

Score

N/A

Malware Config

Signatures

Files

b45850e945c800046c837743ccd989900ff0e0b2e69c50dc860a08bbef348993
.exe windows x86

e616ceb5d53b1bed716982cddcfedfae

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpi
SleepEx
SetVolumeLabelA
DebugActiveProcess
IsValidLocale
GetSystemDirectoryA
GetPrivateProfileSectionA
GlobalFix
GetCurrentThread
AddConsoleAliasW
GetCompressedFileSizeA
OutputDebugStringA
LoadLibraryExA
GetDriveTypeW
CreateMailslotW
OpenMutexA
UTUnRegister
_hread
GetTapePosition
GetDriveTypeA
GetGeoInfoW
LZCopy
OpenSemaphoreW
LoadLibraryA
EndUpdateResourceW
FormatMessageW
MapViewOfFile
GetUserDefaultLCID
HeapSetInformation
SetLocalPrimaryComputerNameW
SetUserGeoID
SetProcessAffinityMask
FindResourceA
SetWaitableTimer
ReadFile
VirtualAlloc
LoadModule
GetTapeStatus
RequestWakeupLatency
QueryMemoryResourceNotification
SetCommBreak
DuplicateConsoleHandle
SwitchToThread
GetCommTimeouts
GetStartupInfoA
CreateMutexA
SetConsoleCursorInfo
SetLocaleInfoW
SetFileAttributesW
GetConsoleHardwareState
BaseCheckAppcompatCache

rtm

RtmBlockConvertRoutesToStatic
RtmIsRoute
RtmReleaseRoutes
RtmInvokeMethod
RtmGetEnumDests
RtmWriteAddressFamilyConfig
RtmGetOpaqueInformationPointer
RtmLookupIPDestination
MgmInitialize
RtmGetEnumRoutes
RtmGetRouteInfo
RtmReleaseEntityInfo
RtmIsBestRoute
EnumOverTable
RtmUpdateAndUnlockRoute

mssign32

SignerAddTimeStampResponseEx
PvkPrivateKeyReleaseContextA
PvkPrivateKeyReleaseContext
SignerTimeStamp
FreeCryptProvFromCert
PvkPrivateKeyAcquireContextFromMemoryA
SignerCreateTimeStampRequest
PvkPrivateKeySave
PvkPrivateKeyAcquireContextFromMemory
PvkPrivateKeySaveToMemoryA
PvkPrivateKeySaveToMemory
SignerAddTimeStampResponse
PvkFreeCryptProv
SpcGetCertFromKey
SignerFreeSignerContext
PvkPrivateKeyLoadFromMemoryA
SignerTimeStampEx
PvkGetCryptProv
PvkPrivateKeyLoadA
PvkPrivateKeyAcquireContextA
PvkPrivateKeyAcquireContext

certcli

CAEnumCertTypesForCA
CAFindByName
CASetCertTypeExtension
CAUpdateCA
CACertTypeQuery
CACloseCertType
CADeleteLocalAutoEnrollmentObject
CARemoveCACertificateType
CAGetCertTypeExtensionsEx
CASetCertTypeExpiration
CACertTypeAccessCheckEx
CAEnumCertTypesForCAEx
CAAccessCheck
CACreateCertType
CASetCACertificate
CAOIDSetProperty
CAGetCACertificate
CAEnumCertTypesEx
CASetCertTypeFlags
CAGetCertTypeFlags
CAOIDDelete
CASetCAFlags
CAGetCertTypeExpiration
CAGetCASecurity

Sections

.text
Size: 342KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 117KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 158KB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e616ceb5d53b1bed716982cddcfedfae

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

rtm

mssign32

certcli

Sections

.text Size: 342KB - Virtual size: 342KB

.rdata Size: 117KB - Virtual size: 116KB

.data Size: 158KB - Virtual size: 1.5MB

.rsrc Size: 175KB - Virtual size: 174KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 342KB - Virtual size: 342KB

.rdata
Size: 117KB - Virtual size: 116KB

.data
Size: 158KB - Virtual size: 1.5MB

.rsrc
Size: 175KB - Virtual size: 174KB

.reloc
Size: 1KB - Virtual size: 1KB