4db0c33744bdc72fdf35ecc5f0297010

Sharing

Copy URL Twitter E-mail

General

Target

4db0c33744bdc72fdf35ecc5f0297010
Size

312KB
MD5

4db0c33744bdc72fdf35ecc5f0297010
SHA1

6a3b664eaf9ad476467b04ed3a04f10226df1e54
SHA256

84dd02debbf2b0c5ed7eebf813305543265e34ec98635139787bf8b882e7c7b4
SHA512

19b09020d259715e803a31dded82c202e54b584a1434fa2a71dd6d5841465c46eac9bd15e54d8279b419e7b90b062b0f91ab97ee946a984552472a6398f8e0bc
SSDEEP

6144:z8PpfHrY0y/uuIJBiRdlJ/ERpBvBd6mmwesimoiWJgAV:MHFhiDvEBL6mm4imoiWJgA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4db0c33744bdc72fdf35ecc5f0297010

Files

4db0c33744bdc72fdf35ecc5f0297010
.exe windows:6 windows x64 arch:x64

d92107aac696cec8c3688d75a6f497ec

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

winmm

timeGetTime

cudart64_80

cudaConfigureCall
cudaSetupArgument
cudaLaunch
cudaMemcpy
cudaGetSymbolAddress
__cudaRegisterFatBinary
__cudaUnregisterFatBinary
__cudaRegisterVar
__cudaRegisterFunction
cudaDeviceGetPCIBusId
cudaGetDeviceCount
cudaGetDeviceProperties
cudaEventElapsedTime
cudaEventSynchronize
cudaEventCreate
cudaSetDeviceFlags
cudaSetDevice
cudaDeviceReset
cudaEventDestroy
cudaEventRecord
cudaGetErrorString

kernel32

ReleaseMutex
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
IsDebuggerPresent
DecodePointer
EncodePointer
CreateMutexA
GetExitCodeThread
GetConsoleScreenBufferInfo
LoadLibraryA
GetLocalTime
GetProcAddress
GetStdHandle
ExpandEnvironmentStringsA
WaitForSingleObject
CreateThread
SetConsoleTextAttribute
Sleep

msvcr120

__set_app_type
exit
_exit
_cexit
__setusermatherr
_initterm_e
_initterm
__initenv
_fmode
_commode
?terminate@@YAXXZ
__crtSetUnhandledExceptionFilter
ceil
_configthreadlocale
_time64
free
malloc
printf
sprintf
strcmp
memcmp
memcpy
memset
sscanf
tolower
vprintf
vsprintf
strstr
__iob_func
_access
fflush
atoi
system
fgets
fopen
rand
srand
fwrite
strtoul
atof
fclose
isspace
strtoll
_errno
isalpha
isdigit
strcspn
realloc
_lock
_unlock
_calloc_crt
__dllonexit
__C_specific_handler
_onexit
__crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
__crtCaptureCurrentContext
__crtCapturePreviousContext
_XcptFilter
_amsg_exit
__getmainargs

ws2_32

connect
WSAStartup
setsockopt
gethostbyname
htons
shutdown
recv
bind
socket
closesocket
inet_pton
accept
listen
send

Sections

.text
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 505.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nv_fatb
Size: 225KB - Virtual size: 224KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.nvFatBi
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 48B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d92107aac696cec8c3688d75a6f497ec

Headers

DLL Characteristics

File Characteristics

Imports

winmm

cudart64_80

kernel32

msvcr120

ws2_32

Sections

.text Size: 60KB - Virtual size: 59KB

.rdata Size: 22KB - Virtual size: 22KB

.data Size: 512B - Virtual size: 505.1MB

.pdata Size: 2KB - Virtual size: 1KB

.nv_fatb Size: 225KB - Virtual size: 224KB

.nvFatBi Size: 512B - Virtual size: 24B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 48B

.text
Size: 60KB - Virtual size: 59KB

.rdata
Size: 22KB - Virtual size: 22KB

.data
Size: 512B - Virtual size: 505.1MB

.pdata
Size: 2KB - Virtual size: 1KB

.nv_fatb
Size: 225KB - Virtual size: 224KB

.nvFatBi
Size: 512B - Virtual size: 24B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 48B