5849ab18ff50a5434d0d367929074745fdd7f94cbd8d3558d4ab2e16bb8a15da

General

Target

5849ab18ff50a5434d0d367929074745fdd7f94cbd8d3558d4ab2e16bb8a15da
Size

54KB
MD5

f3b86bdaa0e33d9d6057c73399b78fa4
SHA1

f9c8779d79fd936aeeef0bfa75720d7048e6301f
SHA256

5849ab18ff50a5434d0d367929074745fdd7f94cbd8d3558d4ab2e16bb8a15da
SHA512

7df2263fe04f63cffd757025092734954eff96d287708447d1d15d08bec9a7764bbbe8e72dc865103376b8962a46dcdf2145c80a3d9210c6731d58e2b7057963
SSDEEP

1536:u2WfKTLQEvCe4MKQ289vckXbjtZn2q5O:hPbC82VojH2q

Score

N/A

Malware Config

Signatures

Files

5849ab18ff50a5434d0d367929074745fdd7f94cbd8d3558d4ab2e16bb8a15da
.exe windows x86

e8239de15182596f74b24241094afaec

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsBadReadPtr
SuspendThread
GetFileAttributesA
HeapSize
DeleteFileA
GetStdHandle
GetModuleHandleA
SetEndOfFile
CreateFileA
SetFileAttributesW
GetCommandLineA
GetVersion
EnterCriticalSection
VirtualAlloc
ExitProcess
WaitForSingleObject
CloseHandle
SetLastError
GetCurrentDirectoryA
GetFileSize
FindAtomW
GetEnvironmentVariableA
SetLastError
DeleteAtom
ReadFile

cryptui

WizardFree
CryptUIDlgViewContext
WizardFree
CryptUIWizImport
CryptUIWizExport
LocalEnroll
DllRegisterServer
CryptUIDlgFreeCAContext
CryptUIWizDigitalSign
CryptUIWizBuildCTL
LocalEnrollNoDS
DllUnregisterServer
CryptUIStartCertMgr

winrnr

NSPStartup
NSPStartup
NSPStartup
NSPStartup

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 10B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 47KB - Virtual size: 75KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

btwstwm
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e8239de15182596f74b24241094afaec

Headers

File Characteristics

Imports

kernel32

cryptui

winrnr

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 512B - Virtual size: 10B

.rsrc Size: 47KB - Virtual size: 75KB

btwstwm Size: - Virtual size: 4KB

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 512B - Virtual size: 10B

.rsrc
Size: 47KB - Virtual size: 75KB

btwstwm
Size: - Virtual size: 4KB