pcperso[.]exe | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

pcperso.exe
Size

107KB
MD5

5b039a192df2f4829c247e92e669dfce
SHA1

20482b17d3620fcf843d1d50f87a968e1f25bd57
SHA256

4ff0eab95002fbd8b8437732ec84ba76c0b2ec43be71a2624978503874d5676a
SHA512

8c1fe8af549c009835499b3b2e435af90bae02a94d9f179526bf355401673ae22db8504d931218078f3dcec4bea922efec9713bd5b7fcd28a4c61510db07e4e7
SSDEEP

1536:2cYLPeIaPrzpHIr5v0AY+24WUcZG/jyKCKII+TSSrAzsXimB3Xb3SGNHnRSZJaqq:uPja2Qp4WBqeTTSSxFb3SGdRS160Y+S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
pcperso.exe

Files

pcperso.exe
.exe windows:5 windows x86 arch:x86

9d1f9d5601e98c57a906aa5df20ad63e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateFileA
WriteFile
ReadFile
FindFirstFileA
GetLastError
FindClose
FindNextFileA
CloseHandle
DeleteFileA
FreeLibrary
GetProcAddress
LoadLibraryA
SetConsoleTextAttribute
HeapFree
GetProcessHeap
WideCharToMultiByte
Sleep
WriteConsoleW
lstrlenW
GetStdHandle
GetSystemTime
HeapAlloc
GetModuleFileNameW
SetLastError
FlushFileBuffers
SetStdHandle
LoadLibraryW
GetConsoleCP
GetStringTypeW
SetFilePointer
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetStartupInfoW
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapReAlloc
ExitProcess
HeapSize
RtlUnwind
GetSystemTimeAsFileTime
ReadConsoleInputW
SetConsoleMode
GetConsoleMode
EncodePointer
DecodePointer
GetCommandLineW
HeapSetInformation
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsProcessorFeaturePresent
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
GetCurrentThreadId
LCMapStringW
MultiByteToWideChar
CreateFileW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapCreate

user32

GetWindow
GetDlgItemTextA
GetDlgCtrlID
IsWindowVisible
GetDesktopWindow
EndDialog
IsIconic
GetTopWindow
DialogBoxIndirectParamW
SetFocus
LoadKeyboardLayoutW
GetWindowLongW
GetDlgItem

winscard

SCardTransmit
SCardEstablishContext
SCardFreeMemory
SCardConnectW
SCardListReadersW
SCardStatusW
SCardDisconnect
SCardReleaseContext

Sections

.text
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

_TEXT
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_DATA
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9d1f9d5601e98c57a906aa5df20ad63e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

winscard

Sections

.text Size: 75KB - Virtual size: 74KB

_TEXT Size: 1KB - Virtual size: 1KB

.rdata Size: 16KB - Virtual size: 16KB

.data Size: 5KB - Virtual size: 14KB

_DATA Size: 512B - Virtual size: 32B

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 75KB - Virtual size: 74KB

_TEXT
Size: 1KB - Virtual size: 1KB

.rdata
Size: 16KB - Virtual size: 16KB

.data
Size: 5KB - Virtual size: 14KB

_DATA
Size: 512B - Virtual size: 32B

.reloc
Size: 7KB - Virtual size: 7KB