1b955f1a52939ccccb75ac04d05d67d0bd93429b5ee69d1f405ca44319fa406f

Sharing

Copy URL Twitter E-mail

General

Target

1b955f1a52939ccccb75ac04d05d67d0bd93429b5ee69d1f405ca44319fa406f
Size

82KB
MD5

8783b80085defe89cefedc4a2ddc2e7e
SHA1

8db7766da12f4c990244852293c447a4999e8913
SHA256

1b955f1a52939ccccb75ac04d05d67d0bd93429b5ee69d1f405ca44319fa406f
SHA512

377de4dd56e41403cabac9f7cdc8b8d8dc8806249fc305a8c636b4a7a20e4ccc23f9c6acc923b8c5b067a467df09b73dc3c1571d2d32dc0cfbe89576e7cb0904
SSDEEP

1536:/LXZVng2JO38Tio8r1qs1tmnBTX+B3e7NIoZz/w4jvbZm:/1yn38TiouIBCeJRD5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1b955f1a52939ccccb75ac04d05d67d0bd93429b5ee69d1f405ca44319fa406f

Files

1b955f1a52939ccccb75ac04d05d67d0bd93429b5ee69d1f405ca44319fa406f
.exe windows x64

aa4fccd8db098be8655d9ec2ea907ff8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcp140d

?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?uncaught_exceptions@std@@YAHXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z

vcruntime140d

__C_specific_handler
__std_type_info_destroy_list
__current_exception
memcpy
__current_exception_context
__std_terminate

vcruntime140_1d

__CxxFrameHandler4

ucrtbased

__p__commode
_seh_filter_dll
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
terminate
_set_new_mode
_c_exit
_configthreadlocale
__p___argc
_set_fmode
_exit
exit
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
__setusermatherr
_set_app_type
_seh_filter_exe
__p___argv
_register_thread_local_exe_atexit_callback
_cexit

kernel32

TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
GetCurrentProcess
QueryPerformanceCounter

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aa4fccd8db098be8655d9ec2ea907ff8

Headers

DLL Characteristics

File Characteristics

Imports

msvcp140d

vcruntime140d

vcruntime140_1d

ucrtbased

kernel32

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1024B - Virtual size: 936B

.rsrc Size: 63KB - Virtual size: 63KB

.reloc Size: 512B - Virtual size: 48B

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 936B

.rsrc
Size: 63KB - Virtual size: 63KB

.reloc
Size: 512B - Virtual size: 48B