973a27f7182f95b60e56778222a9175e76dc7b30df9de82d20af3d8515add405

General

Target

973a27f7182f95b60e56778222a9175e76dc7b30df9de82d20af3d8515add405
Size

85KB
MD5

95825315b2e90d712b612efe0ba70414
SHA1

6da6fa070d281a06e51fe77ed26613a92f976373
SHA256

973a27f7182f95b60e56778222a9175e76dc7b30df9de82d20af3d8515add405
SHA512

f458930d9ec3e06b010ab9038ca90c532ba1e0bd34f1b0d780655412777af505cea887a3693263f7ea42f42f9918a650b554de3921dd1eb9947f3a59adc17170
SSDEEP

1536:Gw2W5/ToEvCe4MKQ289ghcgiAPQm37eDVpGRlTCBMjJpj3MhccM:4AvC82eLAPV37W8Fj3AM

Score

N/A

Malware Config

Signatures

Files

973a27f7182f95b60e56778222a9175e76dc7b30df9de82d20af3d8515add405
.exe windows x86

d2e56a3f60bbc468327ae9843071c817

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetFileAttributesA
DeleteAtom
WaitForSingleObject
GetModuleHandleA
SuspendThread
GetFileSize
GetVersion
GetCommandLineA
GetCurrentDirectoryA
IsBadReadPtr
GetEnvironmentVariableA
ExitProcess
SetLastError
FindAtomW
CloseHandle
DeleteFileA
SetEndOfFile
CreateFileA
ReadFile
VirtualAlloc
SetFileAttributesW
EnterCriticalSection
HeapSize
SetLastError

cryptui

CryptUIWizExport
WizardFree
LocalEnrollNoDS
WizardFree
CryptUIWizImport
DllRegisterServer
CryptUIDlgFreeCAContext
CryptUIWizBuildCTL
DllUnregisterServer
CryptUIDlgViewContext
LocalEnroll
CryptUIStartCertMgr
CryptUIWizDigitalSign

winrnr

NSPStartup
NSPStartup
NSPStartup
NSPStartup

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 74KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

hvylolq
Size: 4KB - Virtual size: 72KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d2e56a3f60bbc468327ae9843071c817

Headers

File Characteristics

Imports

kernel32

cryptui

winrnr

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 74KB - Virtual size: 75KB

hvylolq Size: 4KB - Virtual size: 72KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 74KB - Virtual size: 75KB

hvylolq
Size: 4KB - Virtual size: 72KB