04095383b66f27593ec5222a234b8a99a970500af0ee8e94f51a8d5e09c5855a

Sharing

Copy URL Twitter E-mail

General

Target

04095383b66f27593ec5222a234b8a99a970500af0ee8e94f51a8d5e09c5855a
Size

1.3MB
MD5

d766f93d4ae965c831cd3b8dbfba7395
SHA1

90c4c34ec9d9865664de484303d92b73d0f68623
SHA256

04095383b66f27593ec5222a234b8a99a970500af0ee8e94f51a8d5e09c5855a
SHA512

c29fc3da284e135eea35d95ecb87a1c4eeddad59d435cfd2cb2c5e3e0769a152b078a211c3313e0e97827f74b09bf8c5346cb0c758619ca33a7adc0ab707165f
SSDEEP

12288:jpvtZCZApwHMYJIyMSOaQzRwYZMmjlchzs+4oouO99/i3:1vuZmyMY4amjlclsbnuOz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
04095383b66f27593ec5222a234b8a99a970500af0ee8e94f51a8d5e09c5855a

Files

04095383b66f27593ec5222a234b8a99a970500af0ee8e94f51a8d5e09c5855a
.exe windows:6 windows x64

78d72f6e6ae03260b64ac80ad9a431bc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

algorithmcreate

?CreateCVAlgorithm@CVAlgorithmCreater@MagicCV@@QEAAPEAVICVAlgorithm@2@PEBD0@Z
?CreateAlgorithmFactory@MagicCV@@YAPEAVCVAlgorithmCreater@1@XZ
?DestoryAlgorithmFactory@MagicCV@@YAXPEAVCVAlgorithmCreater@1@@Z
??0XTuple@MagicCV@@QEAA@AEBV01@@Z

magiccvutils

?SetKeyValue@XDictionary@MagicCV@@QEAAHHVXTuple@2@@Z
??0XTuple@MagicCV@@QEAA@PEBX@Z
??1XTuple@MagicCV@@UEAA@XZ

opencv_core412

?deallocate@Mat@cv@@QEAAXXZ
?fastFree@cv@@YAXPEAX@Z
?create@Mat@cv@@QEAAXHPEBHH@Z

kernel32

GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
GetLastError
InitializeCriticalSectionEx
DeleteCriticalSection
GetProcAddress
FreeLibrary
LoadLibraryA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
InitializeCriticalSectionAndSpinCount
CloseHandle
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringW
IsDebuggerPresent
InitializeSListHead

msvcp140

_Mtx_unlock
?_Throw_C_error@std@@YAXH@Z
?_XGetLastError@std@@YAXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@I@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@M@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Xinvalid_argument@std@@YAXPEBD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Execute_once@std@@YAHAEAUonce_flag@1@P6AHPEAX1PEAPEAX@Z1@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
?__ExceptionPtrRethrow@@YAXPEBX@Z
?__ExceptionPtrCurrentException@@YAXPEAX@Z
_Mtx_init_in_situ
?__ExceptionPtrToBool@@YA_NPEBX@Z
?__ExceptionPtrAssign@@YAXPEAXPEBX@Z
?__ExceptionPtrCopy@@YAXPEAXPEBX@Z
?__ExceptionPtrDestroy@@YAXPEAX@Z
_Mtx_destroy_in_situ
?__ExceptionPtrCreate@@YAXPEAX@Z
?uncaught_exception@std@@YA_NXZ
_Mtx_lock

vcruntime140

memset
__C_specific_handler
memmove
__RTDynamicCast
__CxxFrameHandler3
_CxxThrowException
__std_terminate
__std_exception_copy
_purecall
__std_exception_destroy
memcpy

api-ms-win-crt-runtime-l1-1-0

_c_exit
_invalid_parameter_noinfo_noreturn
_initterm
__p___argv
_get_initial_narrow_environment
__p___argc
_initterm_e
_register_thread_local_exe_atexit_callback
_exit
_crt_atexit
_register_onexit_function
_initialize_narrow_environment
_configure_narrow_argv
_set_app_type
_seh_filter_exe
terminate
_cexit
exit
_errno
_initialize_onexit_table

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode
malloc
_callnewh

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode
__acrt_iob_func
__stdio_common_vfprintf

api-ms-win-crt-convert-l1-1-0

strtol

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1.2MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

78d72f6e6ae03260b64ac80ad9a431bc

Headers

DLL Characteristics

File Characteristics

Imports

algorithmcreate

magiccvutils

opencv_core412

kernel32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 21KB - Virtual size: 21KB

.rdata Size: 18KB - Virtual size: 18KB

.data Size: 3KB - Virtual size: 4KB

.pdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1.2MB - Virtual size: 1.9MB

.text
Size: 21KB - Virtual size: 21KB

.rdata
Size: 18KB - Virtual size: 18KB

.data
Size: 3KB - Virtual size: 4KB

.pdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1.2MB - Virtual size: 1.9MB