iwi_dds_fast_converter[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

iwi_dds_fast_converter.exe
Size

352KB
MD5

88a00ddbf61fe8f37ce00e7b112f693a
SHA1

4d559fc471bd192bdd5b87f2893988220e236887
SHA256

feea7ede3df9059475dfa1964a6a5c93c0520663566dcda3cef31c018f6311b7
SHA512

2511816fde816e05c355bf8487ab0fa384d543eba29614ecea993de46d424c4873679c85ff76f4ea32cb7b95fffe33e0ee830e9d11ec7d8acd8097fdb122c46c
SSDEEP

1536:Nk1RomytXFVtV/GBlS3EZmCrXVsgHO7MzB:y1R85GHYEEsVsgHO7MzB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
iwi_dds_fast_converter.exe

Files

iwi_dds_fast_converter.exe
.exe windows x86

27afe6ba48760e002cd1c4639d7c8123

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcr80

_configthreadlocale
__p__commode
__p__fmode
__wgetmainargs
__CxxFrameHandler3
_unlock
_encode_pointer
_lock
_XcptFilter
__set_app_type
_amsg_exit
__dllonexit
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
memcpy
??_V@YAXPAX@Z
memset
_decode_pointer
_onexit
__FrameUnwindFilter
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
?terminate@@YAXXZ
??3@YAXPAX@Z
_cexit
?what@exception@std@@UBEPBDXZ

msvcp80

??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAH@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$allocator@D@std@@QAE@ABV01@@Z
??0?$allocator@_W@std@@QAE@ABV01@@Z
?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?cin@std@@3V?$basic_istream@DU?$char_traits@D@std@@@1@A
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBDH@Z

kernel32

CreateFileA
MapViewOfFile
CreateFileMappingA
GetFileAttributesA
VirtualFree
VirtualAlloc
CloseHandle
GetFileSize
VirtualProtect
GetModuleHandleA
Sleep
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentProcessId
GetSystemTimeAsFileTime
UnmapViewOfFile

msvcm80

?DoDllLanguageSupportValidation@<CrtImplementationDetails>@@YAXXZ
__setusermatherr_m
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@@Z
?ThrowNestedModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVException@System@@0@Z
?DoCallBackInDefaultDomain@<CrtImplementationDetails>@@YAXP6GJPAX@Z0@Z
?RegisterModuleUninitializer@<CrtImplementationDetails>@@YAXP$AAVEventHandler@System@@@Z
?ThrowModuleLoadException@<CrtImplementationDetails>@@YAXP$AAVString@System@@P$AAVException@3@@Z

psapi

GetModuleInformation

mscoree

_CorExeMain

Sections

.text
Size: 20KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 268KB - Virtual size: 265KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

27afe6ba48760e002cd1c4639d7c8123

Headers

File Characteristics

Imports

msvcr80

msvcp80

kernel32

msvcm80

psapi

mscoree

Sections

.text Size: 20KB - Virtual size: 17KB

.rdata Size: 56KB - Virtual size: 55KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 268KB - Virtual size: 265KB

.text
Size: 20KB - Virtual size: 17KB

.rdata
Size: 56KB - Virtual size: 55KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 268KB - Virtual size: 265KB