1a8b254d6e4f92b46c9f3e5598c159049db0ba8ecc345998f3f48522a0be3731

General

Target

1a8b254d6e4f92b46c9f3e5598c159049db0ba8ecc345998f3f48522a0be3731
Size

54KB
MD5

f6d9b6c4f216d791963e26c4d69c3d9e
SHA1

4d628964c7fb476b445fe68c38b093be1da2d6ca
SHA256

1a8b254d6e4f92b46c9f3e5598c159049db0ba8ecc345998f3f48522a0be3731
SHA512

4153bca48eddca47d06c66c00989c31a4f5a63387db1ec63523962ea2c2d9a090729f9fed8f31dc0b2c25db1331a6267ce81052325070747d0e3b3a84c741f6b
SSDEEP

768:EixaS3WnM+TOtdEvCSb4MajQ1Y3DUAhQ48nXt455DcOxcP9Pls6/APQooSk0XGVX:Zw2Wn/ToEvCe4MKQ289ghcgiAPQm37e

Score

N/A

Malware Config

Signatures

Files

1a8b254d6e4f92b46c9f3e5598c159049db0ba8ecc345998f3f48522a0be3731
.exe windows x86

d2e56a3f60bbc468327ae9843071c817

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
GetFileAttributesA
DeleteAtom
WaitForSingleObject
GetModuleHandleA
SuspendThread
GetFileSize
GetVersion
GetCommandLineA
GetCurrentDirectoryA
IsBadReadPtr
GetEnvironmentVariableA
ExitProcess
SetLastError
FindAtomW
CloseHandle
DeleteFileA
SetEndOfFile
CreateFileA
ReadFile
VirtualAlloc
SetFileAttributesW
EnterCriticalSection
HeapSize
SetLastError

cryptui

CryptUIWizExport
WizardFree
LocalEnrollNoDS
WizardFree
CryptUIWizImport
DllRegisterServer
CryptUIDlgFreeCAContext
CryptUIWizBuildCTL
DllUnregisterServer
CryptUIDlgViewContext
LocalEnroll
CryptUIStartCertMgr
CryptUIWizDigitalSign

winrnr

NSPStartup
NSPStartup
NSPStartup
NSPStartup

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

msgomwc
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d2e56a3f60bbc468327ae9843071c817

Headers

File Characteristics

Imports

kernel32

cryptui

winrnr

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 47KB - Virtual size: 75KB

msgomwc Size: - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 47KB - Virtual size: 75KB

msgomwc
Size: - Virtual size: 4KB