c40d971909ed6dcd9ab40b951b85552a5304a2b7dfb830469d98c884cb64d1c4

Sharing

Copy URL Twitter E-mail

General

Target

c40d971909ed6dcd9ab40b951b85552a5304a2b7dfb830469d98c884cb64d1c4
Size

23KB
MD5

d797b97024dcc6628eb54374276f29e1
SHA1

17a7624b56870f935e7a72bada3afff45774c745
SHA256

c40d971909ed6dcd9ab40b951b85552a5304a2b7dfb830469d98c884cb64d1c4
SHA512

2be3c6e3ba0e61ce72c68310f24727d5b2eeecddf0718a27d17e52e8320c56960b53950724b9dfb913ab5fb2d108719619bdd18e5052f485d683040513c2f7bb
SSDEEP

384:f+pLwsAKMIWZV7yY7akOfv7stL8NHl+rPjkqKd8tAVWLGAbYWCpi9g:OtMIyWVYtL8NF+rQqKMAwGxWv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c40d971909ed6dcd9ab40b951b85552a5304a2b7dfb830469d98c884cb64d1c4

Files

c40d971909ed6dcd9ab40b951b85552a5304a2b7dfb830469d98c884cb64d1c4
.exe windows:6 windows x86

3e7b3ff62d12af72237b7363065b1076

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WaitForMultipleObjects
SetEvent
OpenEventW
CreateEventW
CloseHandle
MultiByteToWideChar
GetTickCount
SwitchToThread
UnmapViewOfFile
OpenFileMappingW
CreateFileMappingW
MapViewOfFile
FlushViewOfFile
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
GetSystemTimeAsFileTime
IsDebuggerPresent
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
UnhandledExceptionFilter

ws2_32

WSAStartup
WSACleanup

msvcp140

?_Xlength_error@std@@YAXPBD@Z

libavshow

AVSHOW_InitializeEx
AVSHOW_UnInitialize

libnetmedia

NETMEDIA_SetStreamMode
NETMEDIA_SetVolume
NETMEDIA_SetColorParams
NETMEDIA_GetColorParams
NETMEDIA_ShowOSDText
NETMEDIA_Initialize
NETMEDIA_FlashWnd
NETMEDIA_GetFlowRate
NETMEDIA_SetRealDataCallBack
NETMEDIA_SetRealMsgCallBack
NETMEDIA_CloseRealPlay
NETMEDIA_StopRealPlay
NETMEDIA_StartRealPlay
NETMEDIA_OpenRealPlay
NETMEDIA_SetDelayTime
NETMEDIA_PlaySound
NETMEDIA_AdjustedWndRect
NETMEDIA_SetDirSvr
NETMEDIA_SetSession
NETMEDIA_UnInitialize

vcruntime140

memcpy
_except_handler4_common
memset
__current_exception_context
__current_exception
_CxxThrowException
__std_exception_destroy
__std_exception_copy
__std_terminate
_purecall
__CxxFrameHandler3
memmove

api-ms-win-crt-runtime-l1-1-0

_c_exit
__p___argv
_invalid_parameter_noinfo_noreturn
_exit
exit
terminate
_controlfp_s
_register_thread_local_exe_atexit_callback
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_cexit
_seh_filter_exe
_set_app_type
__p___argc
_get_initial_narrow_environment
_initterm
_initterm_e

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
_set_fmode
__acrt_iob_func
__p__commode
getchar

api-ms-win-crt-string-l1-1-0

wcscat_s

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free
_set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e7b3ff62d12af72237b7363065b1076

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ws2_32

msvcp140

libavshow

libnetmedia

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 12KB - Virtual size: 11KB

.rdata Size: 7KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 11KB

.rdata
Size: 7KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1KB - Virtual size: 1KB