960ec54c078c98702408da7ff4edb48c

General

Target

960ec54c078c98702408da7ff4edb48c
Size

212KB
MD5

960ec54c078c98702408da7ff4edb48c
SHA1

1d1c1179fcf166aa6a12eb09681764355ecf940e
SHA256

3a1b5d49edbead8385fd46f36ccef1b2ec2a0c6a1b218eee66c0ca1a5ea2afc9
SHA512

370d50714f40cfb77fcedb17bcaded8643d7cd42e3a298ab6c776d7d2774c44b773b8d42522c0837937810a511bdeaa1b680880bbf9664fc75b8317891123caf
SSDEEP

3072:zhhIKDp7ogjZUktcDvJDNITxhwV1G2DbI571qg3FKf1fW:VuFM6tDvJiwK2Ds571qgkNO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
960ec54c078c98702408da7ff4edb48c

Files

960ec54c078c98702408da7ff4edb48c
.exe windows:4 windows x86 arch:x86

d16edc257bc4c27e07b6dc8f682954b5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\!dev\MyCryptor\Test\Release\TEST.pdb

Imports

kernel32

GlobalFree
CloseHandle
Sleep
VirtualFree
VirtualAlloc
LoadLibraryA
VirtualProtect
GetProcAddress
GetModuleHandleA
IsBadCodePtr
CreateFileA
GetLastError
FlushFileBuffers
GetLocaleInfoA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
HeapSize
LCMapStringW
LCMapStringA
GetStringTypeW
MultiByteToWideChar
GetStringTypeA
RaiseException
VirtualQuery
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
TerminateProcess
GetCurrentProcess
WriteFile
GetStdHandle
GetModuleFileNameA
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapDestroy
HeapCreate
HeapFree
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
RtlUnwind
InterlockedExchange
GetSystemInfo

user32

GetClientRect
LoadStringA
SendDlgItemMessageA
LoadIconA

psapi

EmptyWorkingSet

winmm

waveInStart
waveInPrepareHeader

msvfw32

DrawDibStop
DrawDibSetPalette
DrawDibEnd

Sections

.text
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 168KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 60KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d16edc257bc4c27e07b6dc8f682954b5

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

psapi

winmm

msvfw32

Sections

.text Size: 28KB - Virtual size: 25KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 168KB - Virtual size: 169KB

.rsrc Size: 4KB - Virtual size: 60KB

.text
Size: 28KB - Virtual size: 25KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 168KB - Virtual size: 169KB

.rsrc
Size: 4KB - Virtual size: 60KB