7f7f9027f6c5f4b18458fd393e296211

Sharing

Copy URL Twitter E-mail

General

Target

7f7f9027f6c5f4b18458fd393e296211
Size

103KB
MD5

7f7f9027f6c5f4b18458fd393e296211
SHA1

68e639c99448722c739c93cb3baa27f1d679f974
SHA256

268a5c82970a94d849ee83c93536ded80adcf60ea5ef7c399605e5e61beddfd6
SHA512

17561ac269dcb50047e0567c1c512bdfeb524ec4c321c005b4639d69f4689b62becbd6516d5b7dd9ac015b6c13f818c47164fcc5e5ec8fcbe3d3bd220c30e0d1
SSDEEP

3072:ml+bs//wfHIpriKx9xOJiZL8P3AoYwd5Hsr:ml+bs/oAQKwJCLQ3AoYwd5U

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f7f9027f6c5f4b18458fd393e296211

Files

7f7f9027f6c5f4b18458fd393e296211
.dll windows:4 windows x86 arch:x86

f35319410bf47f03ce56ec2b7c3eec7c

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

InitializeCriticalSection
DeleteCriticalSection
VirtualFree
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
CreateEventA
GetProcAddress
LoadLibraryA
ResetEvent
lstrcpyA
SetEvent
CancelIo
lstrcatA
GetVersionExA
FreeLibrary
DeleteFileA
GetLastError
CreateDirectoryA
GetDriveTypeA
GetLogicalDriveStringsA
FindClose
LocalFree
FindNextFileA
LocalReAlloc
FindFirstFileA
RemoveDirectoryA
GetFileSize
CreateFileA
ReadFile
WriteFile
MoveFileA
GetModuleFileNameA
SetLastError
GetFileAttributesA
GetSystemDirectoryA
WinExec
GetCurrentProcess
OpenProcess
WaitForSingleObject
CreateThread
GetTickCount
TerminateThread
CloseHandle
lstrlenA
SetFilePointer
GetLocalTime
MapViewOfFile
CreateFileMappingA
HeapFree
GetProcessHeap
HeapAlloc
UnmapViewOfFile
LocalAlloc
GlobalFree
GlobalLock
GlobalAlloc
GlobalUnlock
GlobalSize
GetStartupInfoA
CreatePipe
DisconnectNamedPipe
TerminateProcess
PeekNamedPipe
WaitForMultipleObjects
GetSystemInfo
ReleaseMutex
OpenEventA
SetErrorMode
CreateMutexA
SetUnhandledExceptionFilter
FreeConsole
GetCurrentThreadId
RaiseException
InterlockedExchange

msvcrt

_CxxThrowException
??2@YAPAXI@Z
memcmp
strchr
malloc
strcpy
strcmp
free
_except_handler3
strrchr
strcat
strncpy
strncmp
sprintf
atoi
memset
_snprintf
rand
srand
time
strncat
realloc
wcstombs
_beginthreadex
calloc
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
__CxxFrameHandler
strstr
strlen
_ftol
ceil
_errno
memmove
_strupr
_strnicmp
_strrev
_strnset
??3@YAXPAX@Z
memcpy

msvcp60

?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB

msvfw32

ICCompressorFree
ICClose
ICOpen
ICSendMessage
ICSeqCompressFrameStart
ICSeqCompressFrame
ICSeqCompressFrameEnd

Exports

Exports

FuckMain
aaaa
bbbb
fuck
main

Sections

.text
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f35319410bf47f03ce56ec2b7c3eec7c

Headers

File Characteristics

Imports

kernel32

msvcrt

msvcp60

msvfw32

Exports

Exports

Sections

.text Size: 71KB - Virtual size: 70KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 9KB - Virtual size: 15KB

.rsrc Size: 512B - Virtual size: 16B

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 71KB - Virtual size: 70KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 9KB - Virtual size: 15KB

.rsrc
Size: 512B - Virtual size: 16B

.reloc
Size: 7KB - Virtual size: 7KB