dbda01170e0d7e4e2eb6678194b50734f01d29e31439310dc8dd86aac9f84034

Sharing

Copy URL Twitter E-mail

General

Target

dbda01170e0d7e4e2eb6678194b50734f01d29e31439310dc8dd86aac9f84034
Size

124KB
MD5

b48bb41c944e3fc67267215326eff950
SHA1

c13a994ab289364f47d32a2d063450399b2c7b3f
SHA256

dbda01170e0d7e4e2eb6678194b50734f01d29e31439310dc8dd86aac9f84034
SHA512

2a5ed99e91dca09574fbcd005cafb9fe32a0a8d2f0de0cadfc5569bc48f2fb868a54e7a0ada199e5176fae9b5a423413e968eab5acc49f242110f49945fbdc2e
SSDEEP

3072:vEdwfKiARjAoz+dPz3HI4ASdZoG+eUFhuu:vSwfKiYAoz+dPTIHUoxlFhuu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbda01170e0d7e4e2eb6678194b50734f01d29e31439310dc8dd86aac9f84034

Files

dbda01170e0d7e4e2eb6678194b50734f01d29e31439310dc8dd86aac9f84034
.exe windows:4 windows x64

835f8c1676e77cf3e08db671c1647251

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__C_specific_handler
__getmainargs
__initenv
__iob_func
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_onexit
abort
atoi
calloc
exit
fprintf
free
fwrite
malloc
memcpy
memset
printf
puts
signal
strlen
strncmp
vfprintf

user32

BeginPaint
CreateWindowExA
DefWindowProcA
DestroyWindow
DispatchMessageA
DrawTextA
EndPaint
GetClientRect
GetDesktopWindow
GetMessageA
GetParent
GetWindowRect
LoadCursorA
LoadIconA
MessageBoxA
PostQuitMessage
RegisterClassA
SetWindowPos
TranslateMessage

Exports

Exports

HelloWorld

Sections

.text
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 240B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 1024B - Virtual size: 696B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 1024B - Virtual size: 584B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 79B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 128B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/4
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/19
Size: 65KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/31
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/45
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/57
Size: 512B - Virtual size: 456B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

/70
Size: 512B - Virtual size: 494B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

835f8c1676e77cf3e08db671c1647251

Headers

File Characteristics

Imports

kernel32

msvcrt

user32

Exports

Exports

Sections

.text Size: 9KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 240B

.rdata Size: 1KB - Virtual size: 1KB

.pdata Size: 1024B - Virtual size: 696B

.xdata Size: 1024B - Virtual size: 584B

.bss Size: - Virtual size: 2KB

.edata Size: 512B - Virtual size: 79B

.idata Size: 3KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 104B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 512B - Virtual size: 128B

/4 Size: 512B - Virtual size: 272B

/19 Size: 65KB - Virtual size: 64KB

/31 Size: 2KB - Virtual size: 1KB

/45 Size: 3KB - Virtual size: 2KB

/57 Size: 512B - Virtual size: 456B

/70 Size: 512B - Virtual size: 494B

.text
Size: 9KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 240B

.rdata
Size: 1KB - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 696B

.xdata
Size: 1024B - Virtual size: 584B

.bss
Size: - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 79B

.idata
Size: 3KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 104B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 128B

/4
Size: 512B - Virtual size: 272B

/19
Size: 65KB - Virtual size: 64KB

/31
Size: 2KB - Virtual size: 1KB

/45
Size: 3KB - Virtual size: 2KB

/57
Size: 512B - Virtual size: 456B

/70
Size: 512B - Virtual size: 494B