9f66aee6217f6ed3af57c9ece4bc3cd322f2a287fbf874e456ef9679e4997160

Sharing

Copy URL

Twitter E-mail

General

Target

9f66aee6217f6ed3af57c9ece4bc3cd322f2a287fbf874e456ef9679e4997160
Size

99KB
MD5

0e73a28ac29593cd3b0085af6282cfa9
SHA1

62c62e20c3d115f0a685b37e5f0ade49e85b824f
SHA256

9f66aee6217f6ed3af57c9ece4bc3cd322f2a287fbf874e456ef9679e4997160
SHA512

0d9ab89fd2777f88b0e4b965cd668a9e7174b6c274a7d330ce97609d031c7b4700d1f9cff70fb6fc689503604848950dfb6100c133454603473d2690791d33f6
SSDEEP

3072:h9yRanot7rcXB/SiSXi7JHmDR7IktENxgFV:jyRano1AEiSXiI7/ENO

Score

N/A

Malware Config

Signatures

Files

9f66aee6217f6ed3af57c9ece4bc3cd322f2a287fbf874e456ef9679e4997160
.exe windows x86

c62b760910674d9d31cc9867cfc04821

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

certcli

CAEnumCertTypes
CARemoveCACertificateType
CAUpdateCertType
CAFindCertTypeByName
CAFreeCertTypeProperty
CAGetCertTypeProperty
CASetCertTypeKeySpec
CAGetCertTypeFlags
CAAddCACertificateType
CAUpdateCA
CASetCertTypeFlags
CAGetCertTypeExtensions
CACertTypeGetSecurity
CAFreeCertTypeExtensions
CASetCertTypeExtension
CAFindByName
CACertTypeSetSecurity
CAGetCAProperty
CAFreeCAProperty
CAGetCertTypeKeySpec
CACloseCA
CAEnumNextCertType
CACloseCertType
CAGetCertTypePropertyEx
CASetCertTypeProperty
CACreateCertType
CAEnumCertTypesForCA

kernel32

CloseHandle
GetComputerNameW
GetCurrentProcess
GetDateFormatW
InterlockedDecrement
GetCurrentThread
WideCharToMultiByte
InitializeCriticalSection
OutputDebugStringA
GetTickCount
LocalFree
LocalReAlloc
GetEnvironmentStringsW
lstrlenW
GlobalAlloc
FileTimeToSystemTime
CreateFileW
QueryPerformanceCounter
lstrcpyW
GetModuleFileNameW
lstrcmpiW
GetModuleHandleA
GetLastError
SetLastError
LoadLibraryW
GlobalUnlock
IsBadReadPtr
DeleteCriticalSection
GlobalLock
FormatMessageW
GetSystemDefaultLangID
GetProcAddress
SetUnhandledExceptionFilter
FileTimeToLocalFileTime
GetCPInfo
GetStartupInfoA
GetSystemTimeAsFileTime
GetSystemWindowsDirectoryW
InterlockedIncrement
OutputDebugStringW
GlobalFree

user32

SetDlgItemTextW
LoadImageW
InsertMenuItemW
ReleaseDC
MessageBoxW
LoadStringW
LoadBitmapW
LoadIconW
SendMessageW
SetWindowTextW
DialogBoxParamW
PostMessageW
wsprintfW
SetFocus
LoadCursorW
SetCursor
GetDlgItemTextA
EnableWindow
GetParent
WinHelpW
GetDlgItem
GetWindowLongW
GetDC
SendDlgItemMessageW
RegisterClipboardFormatW
SetWindowLongW
SystemParametersInfoW
EndDialog

msvcrt

__dllonexit
mbstowcs
wcscpy
free
malloc
_wcsicmp
_onexit
vswprintf
??2@YAPAXI@Z
?terminate@@YAXXZ
wcstoul
wcscmp
wcscat
_wcsupr
__RTDynamicCast
??1type_info@@UAE@XZ
??3@YAXPAX@Z
memmove
_except_handler3
wcsrchr
wcsstr
wcslen
_initterm
_adjust_fdiv
wcschr

advapi32

RegOpenKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegCloseKey
RegCreateKeyExW
RegQueryValueExW
RegEnumKeyExW

comctl32

CreatePropertySheetPageW
PropertySheetW

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c62b760910674d9d31cc9867cfc04821

Headers

File Characteristics

Imports

certcli

kernel32

user32

msvcrt

advapi32

comctl32

Sections

.text Size: 45KB - Virtual size: 44KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 16KB - Virtual size: 111KB

.rsrc Size: 23KB - Virtual size: 23KB

.text
Size: 45KB - Virtual size: 44KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 16KB - Virtual size: 111KB

.rsrc
Size: 23KB - Virtual size: 23KB