b7806dd1632fcb01307bb57041db6ab4a03b8b5dfc762359992254cec78b709f

General

Target

b7806dd1632fcb01307bb57041db6ab4a03b8b5dfc762359992254cec78b709f
Size

54KB
MD5

897cbcc48a7a861240844d30aca12741
SHA1

ca583da8c7a54fb391cd0cd76234355222d1b06e
SHA256

b7806dd1632fcb01307bb57041db6ab4a03b8b5dfc762359992254cec78b709f
SHA512

791d2a54e96ff228b3fc95b7ae01d96ef0949865813c345a27e0364c9b951fba54cc41b95df59addf44d9eabd14e47da299d0e77598716cc1d3dad07a18d4787
SSDEEP

768:ZrxaS3WnM+TOtdEvCSb4MajQ1Y3DUAhQ48nXt455DcOxcP9Pls6/APQooSk0XGVX:5w2Wn/ToEvCe4MKQ289ghcgiAPQm37e

Score

N/A

Malware Config

Signatures

Files

b7806dd1632fcb01307bb57041db6ab4a03b8b5dfc762359992254cec78b709f
.exe windows x86

d2e56a3f60bbc468327ae9843071c817

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetFileAttributesA
DeleteAtom
WaitForSingleObject
GetModuleHandleA
SuspendThread
GetFileSize
GetVersion
GetCommandLineA
GetCurrentDirectoryA
IsBadReadPtr
GetEnvironmentVariableA
ExitProcess
SetLastError
FindAtomW
CloseHandle
DeleteFileA
SetEndOfFile
CreateFileA
ReadFile
VirtualAlloc
SetFileAttributesW
EnterCriticalSection
HeapSize
SetLastError

cryptui

CryptUIWizExport
WizardFree
LocalEnrollNoDS
WizardFree
CryptUIWizImport
DllRegisterServer
CryptUIDlgFreeCAContext
CryptUIWizBuildCTL
DllUnregisterServer
CryptUIDlgViewContext
LocalEnroll
CryptUIStartCertMgr
CryptUIWizDigitalSign

winrnr

NSPStartup
NSPStartup
NSPStartup
NSPStartup

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

vmvtbdy
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d2e56a3f60bbc468327ae9843071c817

Headers

File Characteristics

Imports

kernel32

cryptui

winrnr

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 47KB - Virtual size: 75KB

vmvtbdy Size: - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 47KB - Virtual size: 75KB

vmvtbdy
Size: - Virtual size: 4KB