1a85680e3a810facea741c345fc1f8958f0600aa305ad1376c8dfea72be2d062

Sharing

Copy URL Twitter E-mail

General

Target

1a85680e3a810facea741c345fc1f8958f0600aa305ad1376c8dfea72be2d062
Size

101KB
MD5

b8b2949b840a5d1de1eff8f71f4aaa6b
SHA1

e0c751d5e959190702226f127ae37c1cd67f206a
SHA256

1a85680e3a810facea741c345fc1f8958f0600aa305ad1376c8dfea72be2d062
SHA512

fb19bc9ac2b82775fc4739b1e86e96aa81fec0e79d6907a26baf7b5337899a9b34fc7832d7924b6eb13c5a4908c4bf6e1af727b2aa7ed4fcf66c0830e3f8f0bc
SSDEEP

1536:yOqKiSMfiw49ZqbvpqjQoNpsIMTjd5qzon/ukG6rJLxvGXBjVvTogeyAd:yfSlwbvCQoNpsIMPdUa/P9Lx6vTogr

Score

N/A

Malware Config

Signatures

Files

1a85680e3a810facea741c345fc1f8958f0600aa305ad1376c8dfea72be2d062
.exe windows x86

8fe5593483f5c3d8304f6f2b9733f298

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

certcli

CAGetCertTypeKeySpec
CASetCertTypeExtension
CAUpdateCA
CAUpdateCertType
CAGetCAProperty
CAEnumCertTypes
CAGetCertTypeExtensions
CACreateCertType
CAFreeCAProperty
CAFreeCertTypeExtensions
CAGetCertTypeFlags
CAAddCACertificateType
CACloseCA
CASetCertTypeFlags
CAFreeCertTypeProperty
CACertTypeSetSecurity
CACloseCertType
CAGetCertTypePropertyEx
CASetCertTypeKeySpec
CAFindByName
CAGetCertTypeProperty
CASetCertTypeProperty
CAEnumCertTypesForCA
CACertTypeGetSecurity
CAEnumNextCertType
CARemoveCACertificateType
CAFindCertTypeByName

advapi32

RegDeleteValueW
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegQueryValueExW
RegCloseKey

msvcrt

memmove
??3@YAXPAX@Z
wcstoul
_adjust_fdiv
vswprintf
wcschr
??1type_info@@UAE@XZ
_initterm
_wcsicmp
mbstowcs
wcscat
__dllonexit
_except_handler3
_wcsupr
__RTDynamicCast
??2@YAPAXI@Z
?terminate@@YAXXZ
malloc
wcscmp
free
wcsstr
wcslen
_purecall
wcsrchr
_onexit
wcscpy

user32

GetWindowLongW
PostMessageW
LoadCursorW
EnableWindow
GetDlgItem
SetFocus
EndDialog
WinHelpW
MessageBoxW
DialogBoxParamW
LoadImageW
SendMessageW
InsertMenuItemW
GetParent
SetDlgItemTextW
SendDlgItemMessageW
GetDlgItemTextA
RegisterClipboardFormatW
SetWindowTextW
ReleaseDC
SystemParametersInfoW
LoadIconW
SetWindowLongW
GetDC
LoadStringW
wsprintfW
LoadBitmapW
SetCursor

kernel32

IsBadReadPtr
FormatMessageW
lstrcpyW
GetACP
GetCurrentProcess
GetLastError
lstrlenW
DeleteCriticalSection
CreateFileW
InterlockedIncrement
GetTickCount
GetStartupInfoA
GlobalFree
GetSystemWindowsDirectoryW
InterlockedDecrement
SetLastError
RemoveDirectoryA
GetDateFormatW
LocalReAlloc
GetModuleHandleA
GetSystemDefaultLangID
lstrcmpiW
LocalFree
WideCharToMultiByte
QueryPerformanceCounter
GetEnvironmentStringsW
SetUnhandledExceptionFilter
InitializeCriticalSection
CloseHandle
OutputDebugStringW
GetModuleFileNameW
GlobalAlloc
GlobalUnlock
LoadLibraryW
GlobalLock
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
GetComputerNameW
OutputDebugStringA

comctl32

PropertySheetW
CreatePropertySheetPageW

Sections

.text
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8fe5593483f5c3d8304f6f2b9733f298

Headers

File Characteristics

Imports

certcli

advapi32

msvcrt

user32

kernel32

comctl32

Sections

.text Size: 47KB - Virtual size: 47KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 16KB - Virtual size: 113KB

.rsrc Size: 23KB - Virtual size: 22KB

.text
Size: 47KB - Virtual size: 47KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 16KB - Virtual size: 113KB

.rsrc
Size: 23KB - Virtual size: 22KB