15da26e3ec5cc74de836e1aebe6eff20

Sharing

Copy URL Twitter E-mail

General

Target

15da26e3ec5cc74de836e1aebe6eff20
Size

818KB
MD5

15da26e3ec5cc74de836e1aebe6eff20
SHA1

a0407679b5baa96acaf035f651878f1f4e1b6961
SHA256

7c47127c428bb8ee16e083793358f8e5d7ae842905f2700f1b2de29fa75d7730
SHA512

57ced34894feab947080b090d42e4855fd89e7711bf106ae199d027126bdfd8ea00d75281b4c080f0e38f22bf31ef3430c4250ad2e793c57a55232eaebd6ec4f
SSDEEP

24576:Hj3V6+Gj/bYa3hrtA1CGZ3Q4/7Hzlg1oW0U7a4:D3i0ajSQ27xgmbU7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
15da26e3ec5cc74de836e1aebe6eff20

Files

15da26e3ec5cc74de836e1aebe6eff20
.exe windows:5 windows x86 arch:x86

63182c0535f01aacaf39486533bc27b7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcirt

??0iostream@@IAE@XZ
??4iostream@@IAEAAV0@AAV0@@Z
?bitalloc@ios@@SAJXZ
?rdbuf@fstream@@QBEPAVfilebuf@@XZ
??_Gstdiobuf@@UAEPAXI@Z
??_Efilebuf@@UAEPAXI@Z
?openprot@filebuf@@2HB
??_7logic_error@@6B@
??4istream@@IAEAAV0@ABV0@@Z
??0streambuf@@QAE@ABV0@@Z
??4istream_withassign@@QAEAAVistream@@ABV1@@Z
?attach@filebuf@@QAEPAV1@H@Z
?hex@@YAAAVios@@AAV1@@Z
?rdbuf@ostrstream@@QBEPAVstrstreambuf@@XZ
??1ostrstream@@UAE@XZ
?putback@istream@@QAEAAV1@D@Z
?rdbuf@ofstream@@QBEPAVfilebuf@@XZ
?tellg@istream@@QAEJXZ
??_Difstream@@QAEXXZ
?write@ostream@@QAEAAV1@PBEH@Z
?flags@ios@@QBEJXZ
?unsetf@ios@@QAEJJ@Z
??_7fstream@@6B@
??6ostream@@QAEAAV0@G@Z
??_Gostream_withassign@@UAEPAXI@Z

occache

FindControlClose
FindNextControl
RemoveControlByHandle
GetControlInfo
ReleaseControlHandle
RemoveControlByName
IsModuleRemovable
FindFirstControl
GetControlDependentFile
RemoveExpiredControls
SweepControlsByLastAccessDate

kernel32

GetTempPathA
IsDBCSLeadByte
HeapQueryInformation
ResetWriteWatch
LoadLibraryA
GetModuleHandleA
CreateConsoleScreenBuffer
GetBinaryType
GetConsoleAliasesW
Beep
ConvertDefaultLocale
VirtualQueryEx
FreeResource
GlobalGetAtomNameA
GetSystemWow64DirectoryW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetNamedPipeHandleStateA
AddLocalAlternateComputerNameW
VirtualAlloc
OpenProcess
GetThreadPriorityBoost
ExitProcess
GetFileAttributesA
GetNumaAvailableMemoryNode
RemoveDirectoryW
SetWaitableTimer
SleepEx
FlushInstructionCache
SetConsolePalette
SetUnhandledExceptionFilter
GetConsoleCursorMode
GetVersionExW
RtlUnwind
GetConsoleInputExeNameA
WriteTapemark
SetNamedPipeHandleState
OpenSemaphoreW

crtdll

_cgets
wcslen
_mbsspnp
_strcmpi
_CIsin
wprintf
_commit
_fmode_dll
_ctype
_CIatan
_mkdir
strlen
_fgetwchar
setlocale
_mbsdup
fseek
vwprintf
_mbsdec
fabs
_osmajor_dll
iscntrl
_cputs
fputs
_wcsupr
fscanf
_itow

Sections

.text
Size: 404KB - Virtual size: 403KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 172KB - Virtual size: 1.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 111KB - Virtual size: 111KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63182c0535f01aacaf39486533bc27b7

Headers

DLL Characteristics

File Characteristics

Imports

msvcirt

occache

kernel32

crtdll

Sections

.text Size: 404KB - Virtual size: 403KB

.rdata Size: 128KB - Virtual size: 128KB

.data Size: 172KB - Virtual size: 1.6MB

.rsrc Size: 111KB - Virtual size: 111KB

.reloc Size: 1024B - Virtual size: 944B

.text
Size: 404KB - Virtual size: 403KB

.rdata
Size: 128KB - Virtual size: 128KB

.data
Size: 172KB - Virtual size: 1.6MB

.rsrc
Size: 111KB - Virtual size: 111KB

.reloc
Size: 1024B - Virtual size: 944B