makecert[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

makecert.exe
Size

39KB
MD5

ed1c00557cde869caa963bbf9c820f05
SHA1

53bbd8b86fcbee9316e02af399634522b12539b0
SHA256

4d50ce341be70511e9a871dd347b3f5793ea97787cdfc92045c0bcc8aae6e298
SHA512

509afc51b647a6904a3a4abf04b43dfaee5fa0878c3a822fce84dd58ce2ab1c15a38610487c520ca6f7c42ed37d754df55a82b0a81a28d31493f2535d9568405
SSDEEP

768:fqKIjHhW0CfW0FKT7vZKP1xG69D1/gEehcaLnTJ/2acSd:3RnfW0eoPPXpCnTJ/2acSd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
makecert.exe

Files

makecert.exe
.exe windows x86

34bca1a8725a684420029505cfe3aa97

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetProcAddress
CompareFileTime
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
LocalFree
CloseHandle
UnmapViewOfFile
FindResourceA
LoadResource
SizeofResource
LockResource
FreeResource
SetLastError
SystemTimeToFileTime
LocalFileTimeToFileTime
GetLastError
GetModuleHandleA
MapViewOfFile
CreateFileMappingA
GetFileSize
WriteFile
WideCharToMultiByte
LocalAlloc
GetVersionExA
MultiByteToWideChar
CreateFileA
CreateFileW
DeleteFileA
DeleteFileW

msvcrt

exit
_cexit
__winitenv
_exit
_c_exit
strtok
??2@YAPAXI@Z
??3@YAXPAX@Z
wcslen
_wtol
_wcsnicmp
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
free
_wcsicmp
vwprintf
wprintf
malloc
swprintf
_XcptFilter
wcscpy
__wgetmainargs

advapi32

CryptGetUserKey
CryptSetKeyParam
CryptGenKey
CryptDestroyKey
CryptAcquireContextA
CryptGetProvParam
CryptReleaseContext

user32

LoadStringA
LoadStringW

ole32

CoInitialize
CoUninitialize
CoCreateGuid

oleaut32

VarDateFromStr

rpcrt4

UuidToStringA
RpcStringFreeA
UuidCreate

mssign32

GetCryptProvFromCert
FreeCryptProvFromCert
PvkFreeCryptProv
PvkPrivateKeySave
SignError
PvkGetCryptProv
PvkPrivateKeyAcquireContextFromMemory

crypt32

CertFreeCertificateContext
CertSetCertificateContextProperty
CertAddEncodedCertificateToStore
CertOpenStore
CertCreateCertificateContext
CryptDecodeObject
CertComparePublicKeyInfo
CryptExportPublicKeyInfo
CryptEncodeObject
CryptQueryObject
CertStrToNameW
CryptHashPublicKeyInfo
CryptHashCertificate
CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertEnumCertificatesInStore
CertFindCertificateInStore
CertCompareIntegerBlob
CryptSignAndEncodeCertificate
CertCloseStore

Sections

.text
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

34bca1a8725a684420029505cfe3aa97

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

advapi32

user32

ole32

oleaut32

rpcrt4

mssign32

crypt32

Sections

.text Size: 24KB - Virtual size: 23KB

.data Size: 512B - Virtual size: 3KB

.rsrc Size: 13KB - Virtual size: 13KB

.text
Size: 24KB - Virtual size: 23KB

.data
Size: 512B - Virtual size: 3KB

.rsrc
Size: 13KB - Virtual size: 13KB