ded53855e9993eb299c87628443c720372626272cacedf04c5bf1a8c11a60f7d

Sharing

Copy URL

Twitter E-mail

General

Target

ded53855e9993eb299c87628443c720372626272cacedf04c5bf1a8c11a60f7d
Size

12KB
MD5

5cc3848c1733a382a5460fd8cc278700
SHA1

2ef85668e3daee784707cebcbc8802c6515b897d
SHA256

ded53855e9993eb299c87628443c720372626272cacedf04c5bf1a8c11a60f7d
SHA512

d4daf2a0f946391b992ac7030a095c465166a2f0c4ed3c43637a58b81e391b298494f4abc002a1e1607fcd8aed22df636382ad10e3b115f8fd927c5a5e94241e
SSDEEP

192:f6HUbNx+QfRtNc2UMryCosuc3AJodFt8zhg7aly90frAG91MtT0Lfm:5b+QBnrt9ucQ2WQ90frN4Uu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ded53855e9993eb299c87628443c720372626272cacedf04c5bf1a8c11a60f7d

Files

ded53855e9993eb299c87628443c720372626272cacedf04c5bf1a8c11a60f7d
.exe windows:6 windows x86 arch:x86

d113e1e13aca2f6d5caf154fae08228e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

bcl2

??1Cwin_exception_handler@@UAE@XZ
?c_str@Cbcl_tmp_str@@QBEPBDXZ
??0Cbcl_tmp_str_proxy@@QAE@PADI@Z
?append@Cbcl_tmp_str_proxy@@QAA?AW4EerrNo@@PBDZZ
?BclGetDateTimeStr@@YAX_JAAVCbcl_tmp_str@@@Z
?Print@Cbcl_obj@@UAEXXZ
?Run@Cbcl_task_mgr@@QAE?AW4EerrNo@@XZ
?waitExit@Cbcl_thread@@QAEXXZ
?setDumpFilesDir@Cwin_exception_handler@@QAEXPBD@Z
??0Cbcl_tmp_str@@QAE@XZ
??0Cwin_exception_handler@@QAE@XZ
??0Cbcl_obj@@QAE@IPAV0@@Z
?BclGetGlobalObjID@@YAIXZ
?BclSubEvent@@YA?AW4EerrNo@@IPAXP6AX000@Z@Z
?BclGetCurrTimestamp@@YA_JXZ

callserver

??0Capp@@QAE@XZ
??1Capp@@UAE@XZ
?miniSIPServerIsRunning@@YA?AW4Ebool@@XZ
?DbGetLogDir@@YAXAAVCbcl_tmp_str@@@Z

msvcp120

?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
??0id@locale@std@@QAE@I@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ

msvcr120

_except_handler4_common
_commode
_fmode
__initenv
_crt_debugger_hook
__crtTerminateProcess
?terminate@@YAXXZ
__crtSetUnhandledExceptionFilter
_invoke_watson
_controlfp_s
__crtUnhandledException
printf
__CxxFrameHandler3
memset
_purecall
??2@YAPAXI@Z
??3@YAXPAX@Z
memmove
_CxxThrowException
memcpy
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
_XcptFilter
_amsg_exit
__getmainargs
__set_app_type
exit
_exit
_cexit
_configthreadlocale
__setusermatherr
_initterm_e
_initterm

kernel32

GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer

Sections

.text
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 736B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 748B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d113e1e13aca2f6d5caf154fae08228e

Headers

DLL Characteristics

File Characteristics

Imports

bcl2

callserver

msvcp120

msvcr120

kernel32

Sections

.text Size: 5KB - Virtual size: 4KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1024B - Virtual size: 736B

.reloc Size: 1024B - Virtual size: 748B

.text
Size: 5KB - Virtual size: 4KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1024B - Virtual size: 736B

.reloc
Size: 1024B - Virtual size: 748B