986b74a171ed772c5d7498e6fb7e29c5

General

Target

986b74a171ed772c5d7498e6fb7e29c5
Size

153KB
MD5

986b74a171ed772c5d7498e6fb7e29c5
SHA1

436402fa138d11513f636d0cc83c818c1d264f0a
SHA256

ebdae92db88ccb4fa34ab50a254c3d5f84599f266db948eb55f43cac4afaf168
SHA512

fd89ff785aefbda2416a4213c312d32c5d74dad32df913d304f17967841af383f68b360c0e98b6796f08761a3f8555320a814c28d36181dde9ef0403bd50df42
SSDEEP

1536:c0dQ6eaa44gGzMpd/pzXgME6bHmkBZ4E/PunLV7nUkhajHDedGMdG2MTQTQFfS3x:cv6e6pXg36bHmYtyUPNMdGcTAu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
986b74a171ed772c5d7498e6fb7e29c5

Files

986b74a171ed772c5d7498e6fb7e29c5
.exe windows:5 windows x86 arch:x86

8831af0a88c0024ffc631be058dcdbc9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Documents and Settings\Johny\My Documents\Visual Studio 2005\Projects\branch3\text_ed\Release\text_ed.pdb

Imports

kernel32

LocalAlloc
GetFileSizeEx
CreateFileW
GetModuleFileNameW
UnhandledExceptionFilter
GetModuleHandleW
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetLastError
DisconnectNamedPipe
ReadFile
GetCurrentProcess
ExitProcess
DecodePointer
SetUnhandledExceptionFilter
EncodePointer
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
IsDebuggerPresent

user32

UpdateWindow
ShowWindow
GetForegroundWindow
LoadIconW
LoadCursorW
RegisterClassW
CreateWindowExW

gdi32

CreateDCW
AbortPath
AbortDoc
CreateCompatibleDC

winhttp

WinHttpGetDefaultProxyConfiguration
WinHttpCreateUrl

msvcr100

_XcptFilter
exit
_exit
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
_cexit
__wgetmainargs
_amsg_exit
malloc
free
_wcmdln

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8831af0a88c0024ffc631be058dcdbc9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

winhttp

msvcr100

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 76KB - Virtual size: 79KB

.rsrc Size: 71KB - Virtual size: 70KB

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 76KB - Virtual size: 79KB

.rsrc
Size: 71KB - Virtual size: 70KB