a0a638e201de57b517b172de1fff047328a390b8e2e68b2404eeef4001455ef6

Sharing

Copy URL

Twitter E-mail

General

Target

a0a638e201de57b517b172de1fff047328a390b8e2e68b2404eeef4001455ef6
Size

20KB
MD5

20ff449057eed620e434d824e513b886
SHA1

ae791fdca71a72cead5305f40e6afb0487b699fc
SHA256

a0a638e201de57b517b172de1fff047328a390b8e2e68b2404eeef4001455ef6
SHA512

1adb5f9e10ea8b2a2c73c7c92ddc34d26b184841bab10bd5d9955e16b6df961fd7d82dd7896aa28240a2d475acec85234f415ddf2cd79d4d30d38cd4c5724883
SSDEEP

192:dnQlO41j0sWKqzYfStbrQJV8ZY01yQJn0NfItj2XrChl/Btp+mzfIztHYT5H4H5C:dnyN1ycfGcE7yQV0ZopXr2KHdbU6j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a0a638e201de57b517b172de1fff047328a390b8e2e68b2404eeef4001455ef6

Files

a0a638e201de57b517b172de1fff047328a390b8e2e68b2404eeef4001455ef6
.exe windows:6 windows x64

f04efa95cbd958686f93355764811745

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

vivevr_api

HVR_GetGenericInterface
HVR_ShutDown
HVR_Init

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__C_specific_handler
_CxxThrowException
__current_exception
__std_exception_destroy
__std_exception_copy
__current_exception_context
memcmp
memset
memcpy
memmove

api-ms-win-crt-runtime-l1-1-0

__p___argc
exit
_initterm_e
_register_thread_local_exe_atexit_callback
_c_exit
_exit
_invalid_parameter_noinfo_noreturn
__p___argv
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
terminate
_get_initial_narrow_environment
_initterm

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__p__commode
_set_fmode
__stdio_common_vfprintf

api-ms-win-crt-heap-l1-1-0

free
malloc
_callnewh
_set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

kernel32

RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcess
SetUnhandledExceptionFilter
TerminateProcess

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 84B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f04efa95cbd958686f93355764811745

Headers

DLL Characteristics

File Characteristics

Imports

vivevr_api

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

kernel32

Sections

.text Size: 9KB - Virtual size: 8KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1024B - Virtual size: 780B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 84B

.text
Size: 9KB - Virtual size: 8KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 780B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 84B