ReCreateSO2[.]exe

General

Target

ReCreateSO2.exe
Size

174KB
MD5

9b6fc6d8be158eb2adf2f9bfa553e87e
SHA1

792d11ed97960ea90737aa3966a422ba7ab80616
SHA256

f36188f8c57366dff28febda8290b8b3d621da3be06dae77ebcebc70864a837d
SHA512

b24fb423f652e0f489ec72f790f2e60abca5c16c8ed9f912ff5812dcd9b8cc6c060cd4ccab3e98b8496609deb0090f233f8ae6e1890ec7adfe4c0d2296bef075
SSDEEP

3072:5oIYAVeG5TscKgBjueUvJLxG1o6cS6wpr0p2Q+5sz:XY0x5YZi+w2vz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ReCreateSO2.exe

Files

ReCreateSO2.exe
.exe windows x86

19dd7121b6836c08ff3f84178754c0bb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
GetLocalTime
HeapFree
HeapAlloc
GetProcessHeap
GetTickCount
GetLastError
RtlUnwind
GetModuleHandleW
Sleep
GetProcAddress
ExitProcess
EnterCriticalSection
LeaveCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LockFile
UnlockFile
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
RaiseException
SetFilePointer
SetEndOfFile
GetCommandLineA
GetStartupInfoA
HeapCreate
VirtualFree
DeleteCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
GetStdHandle
CloseHandle
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
MultiByteToWideChar
ReadFile
SetStdHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
FlushFileBuffers
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
CreateFileA
GetLocaleInfoA
HeapSize
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
DeleteFileA

Sections

.text
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

19dd7121b6836c08ff3f84178754c0bb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 140KB - Virtual size: 139KB

.rdata Size: 23KB - Virtual size: 23KB

.data Size: 9KB - Virtual size: 22KB

.rsrc Size: 512B - Virtual size: 436B

.text
Size: 140KB - Virtual size: 139KB

.rdata
Size: 23KB - Virtual size: 23KB

.data
Size: 9KB - Virtual size: 22KB

.rsrc
Size: 512B - Virtual size: 436B