9ff279f22af0610de7cad3a5ba07d534999f584a347189b63492308be08fb14e

General

Target

9ff279f22af0610de7cad3a5ba07d534999f584a347189b63492308be08fb14e
Size

61KB
MD5

ed9a71d88e29afc2cb5c6c32946ad89a
SHA1

5b6f2527cd9b877db543eb8130a9c2b904572ecd
SHA256

9ff279f22af0610de7cad3a5ba07d534999f584a347189b63492308be08fb14e
SHA512

71a89b98e2cffbb9783b2bc1be87f41e6e5fc6e96ae1d218e54e531158c6a37553905f21e8a3586b6912f7576bde53e072c911a3a329ec694ee075f133026f6f
SSDEEP

1536:F2WniOfaXYGIVTgVgeG3MCLrYQVbeuGI8Wz2d/Q:ccSKvFrDVSFWz4/Q

Score

N/A

Malware Config

Signatures

Files

9ff279f22af0610de7cad3a5ba07d534999f584a347189b63492308be08fb14e
.exe windows x86

6e49a60ef6733f624a35047a18f1c0fe

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileAttributesA
SuspendThread
VirtualAlloc
GetCommandLineA
SetFileAttributesW
SetEndOfFile
SetLastError
GetCurrentDirectoryA
GetVersion
FindAtomW
GetModuleHandleA
SetLastError
ReadFile
WaitForSingleObject
DeleteAtom
DeleteFileA
EnterCriticalSection
IsBadReadPtr
GetStdHandle
HeapSize
ExitProcess
CloseHandle
GetEnvironmentVariableA
CreateFileA
GetFileSize

cryptui

CryptUIWizDigitalSign
LocalEnrollNoDS
LocalEnroll
DllRegisterServer
CryptUIDlgViewContext
CryptUIWizBuildCTL
CryptUIStartCertMgr
WizardFree
DllUnregisterServer
CryptUIWizExport
CryptUIWizImport
WizardFree
CryptUIDlgFreeCAContext

winrnr

NSPStartup
NSPStartup
NSPStartup
NSPStartup

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 54KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

oxnhrcx
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

6e49a60ef6733f624a35047a18f1c0fe

Headers

File Characteristics

Imports

kernel32

cryptui

winrnr

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 54KB - Virtual size: 82KB

oxnhrcx Size: - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 54KB - Virtual size: 82KB

oxnhrcx
Size: - Virtual size: 4KB