a18b804e3830afbe5d704579401188ad66c839b509e6552e16fdead2bf654d48

Sharing

Copy URL Twitter E-mail

General

Target

a18b804e3830afbe5d704579401188ad66c839b509e6552e16fdead2bf654d48
Size

46KB
MD5

7c68843c41dd4a5c12dbf3ad6e06cb98
SHA1

4c58dc94ed2b9a4ba17e2daed4dccd08724e9fa3
SHA256

a18b804e3830afbe5d704579401188ad66c839b509e6552e16fdead2bf654d48
SHA512

b08341507e1daf74d32e436ed95ead70c13626a835e853976ad84b323c1ef7378b915c6645d69b4dc7e14ca750d4d765a965aa4ea9e07ecde33e3f412861d159
SSDEEP

768:R40ootbVucQqrk6nCowvcH8CG4LK32pCluBmUYN+rqj+pqkNY:R40oopDL6ccCP22xBmUsmpd

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a18b804e3830afbe5d704579401188ad66c839b509e6552e16fdead2bf654d48

Files

a18b804e3830afbe5d704579401188ad66c839b509e6552e16fdead2bf654d48
.exe windows:6 windows x86

d1b07047bb0120486e3c206e866ab753

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualProtect
GetCurrentProcess
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
GetProcAddress
VirtualAllocEx
ExitProcess
VirtualQueryEx
GetCurrentProcessId
TerminateProcess
IsProcessorFeaturePresent
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
QueryPerformanceCounter

user32

MessageBoxW
MessageBoxA

msvcp140

?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEPAV12@PA_W_J@Z
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
?gbump@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXH@Z

shlwapi

PathFindFileNameW

vcruntime140

memset
_except_handler4_common
__std_exception_destroy
memmove
memcpy
__std_exception_copy
_CxxThrowException
__std_type_info_destroy_list
__CxxFrameHandler3

api-ms-win-crt-string-l1-1-0

wcslen

api-ms-win-crt-runtime-l1-1-0

_invalid_parameter_noinfo_noreturn
_cexit
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_onexit_table
_execute_onexit_table

api-ms-win-crt-heap-l1-1-0

malloc
_callnewh
free

Sections

.text
Size: - Virtual size: 15KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.byj
Size: 42KB - Virtual size: 41KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d1b07047bb0120486e3c206e866ab753

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

msvcp140

shlwapi

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: - Virtual size: 15KB

.rdata Size: - Virtual size: 10KB

.data Size: - Virtual size: 1KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: - Virtual size: 5KB

.byj Size: 42KB - Virtual size: 41KB

.text
Size: - Virtual size: 15KB

.rdata
Size: - Virtual size: 10KB

.data
Size: - Virtual size: 1KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: - Virtual size: 5KB

.byj
Size: 42KB - Virtual size: 41KB