b6a1474fdb06bc8b52cb7fe6869a111eeeb3ba95a0cedcd72f7df0bbaf14a1fe

General

Target

b6a1474fdb06bc8b52cb7fe6869a111eeeb3ba95a0cedcd72f7df0bbaf14a1fe
Size

62KB
MD5

efb4c72df5663f30026704078108dd51
SHA1

5a312295fc2c9dfd83606a813badac894a9bd2dd
SHA256

b6a1474fdb06bc8b52cb7fe6869a111eeeb3ba95a0cedcd72f7df0bbaf14a1fe
SHA512

dc2e38243391e052340f147efcd71db20272b0d3fceddbba9b45e772efd1c8bd512494f5c02b46b765179b4c970f39b4d72b85f376a2e3d51c58aeb6d4b255ad
SSDEEP

1536:Y2W6z/aXYGIVTgVgeG3MCLrIME5AkC2vV/n:bsKvFrlCt/

Score

N/A

Malware Config

Signatures

Files

b6a1474fdb06bc8b52cb7fe6869a111eeeb3ba95a0cedcd72f7df0bbaf14a1fe
.exe windows x86

2085802caec7cb504d6e0256bc5db064

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SuspendThread
ReadFile
SetLastError
HeapSize
SetEndOfFile
FindAtomW
GetModuleHandleA
WaitForSingleObject
IsBadReadPtr
DeleteAtom
GetVersion
CloseHandle
GetEnvironmentVariableA
CreateFileA
EnterCriticalSection
SetFileAttributesW
SetLastError
GetCommandLineA
GetCurrentDirectoryA
GetStdHandle
VirtualAlloc
DeleteFileA
GetFileAttributesA
ExitProcess
GetFileSize

cryptui

CryptUIWizExport
WizardFree
DllUnregisterServer
CryptUIWizBuildCTL
DllRegisterServer
CryptUIDlgViewContext
LocalEnrollNoDS
CryptUIDlgFreeCAContext
WizardFree
LocalEnroll
CryptUIWizImport
CryptUIStartCertMgr
CryptUIWizDigitalSign

winrnr

NSPStartup
NSPStartup
NSPStartup
NSPStartup

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 55KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

himfmav
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

2085802caec7cb504d6e0256bc5db064

Headers

File Characteristics

Imports

kernel32

cryptui

winrnr

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 55KB - Virtual size: 82KB

himfmav Size: - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 55KB - Virtual size: 82KB

himfmav
Size: - Virtual size: 4KB