quantizer[.]exe[.]vir

Sharing

Copy URL Twitter E-mail

General

Target

quantizer.exe.vir
Size

212KB
MD5

a8e53b2b22342daf99fa3764c0a81132
SHA1

efc8ae7efa6a8f3a03a1bcddeea1802be89ad3b9
SHA256

188f807be0c0e8c79ed2e95e9c7e1cca0c5976199dc1a983fab65f6ae762ecae
SHA512

1eb1bad0ccac14c474243dba5d5d60c4057420f2a74d3e3e3da271707d89c00b5b921d97df12e23b7d7e03f6799050f065fef512c7656980b455038949a4bc97
SSDEEP

1536:kaPDHQ/Pef+eUTaB8neWP4xqunYlFjTZgjq9qlQJcvefS2+Dg4uW:keDHQ3MKa2n5BYYfjTZgjq9BW2K2+DG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
quantizer.exe.vir

Files

quantizer.exe.vir
.exe windows:5 windows x86 arch:x86

c8a20509092d71f3959c1834f1f91ca0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Visual Studio Projects\quantizer\Release\quantizer.pdb

Imports

msimg32

AlphaBlend

winmm

waveOutWrite
waveOutUnprepareHeader
waveOutClose
waveOutOpen
waveOutPrepareHeader

kernel32

SetFileAttributesW
DeleteFileW
CloseHandle
LoadLibraryW
GetProcAddress
CreateProcessW
FreeLibrary
CopyFileW
TerminateThread
GetTempPathW
GetTickCount
GetModuleHandleW
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleFileNameW
IsDebuggerPresent
WriteFile
ReadFile
CreateFileW
GetProcessHeap
HeapAlloc
Sleep
HeapFree
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
CreateThread

user32

DefWindowProcW
MessageBoxW
CreateWindowExW
RegisterClassExW
ShowWindow
PeekMessageW
LoadIconW
LoadCursorW
EnumDisplayMonitors
UnionRect
GetMessageW
DispatchMessageW
SetTimer
TranslateMessage
UpdateLayeredWindow
EnumChildWindows
SetWindowTextW
RedrawWindow
MoveWindow
ReleaseDC
GetDC
SetWindowPos
EnumWindows
ExitWindowsEx

gdi32

CreatePen
DeleteDC
StretchBlt
Polygon
SelectObject
CreateCompatibleBitmap
BitBlt
CreateDIBSection
SetStretchBltMode
DeleteObject
CreateCompatibleDC
CreateSolidBrush

advapi32

RegCreateKeyExW
RegSetValueExW
RegCloseKey

vcruntime140

__current_exception_context
__current_exception
wcsrchr
_except_handler4_common
memset
memcpy

api-ms-win-crt-string-l1-1-0

wcsncmp
wcscat_s

api-ms-win-crt-math-l1-1-0

__setusermatherr
_CIfmod
_CIatan2
_libm_sse2_sin_precise
cbrt
_libm_sse2_sqrt_precise
_libm_sse2_tan_precise
floor

api-ms-win-crt-runtime-l1-1-0

terminate
_controlfp_s
_crt_atexit
_c_exit
_cexit
_register_onexit_function
_exit
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_initialize_onexit_table
_set_app_type
_seh_filter_exe
_register_thread_local_exe_atexit_callback

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

vcomp140

_vcomp_for_static_end
_vcomp_for_static_simple_init
_vcomp_fork
_vcomp_set_num_threads

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 145KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c8a20509092d71f3959c1834f1f91ca0

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msimg32

winmm

kernel32

user32

gdi32

advapi32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

vcomp140

Sections

.text Size: 25KB - Virtual size: 25KB

.rdata Size: 38KB - Virtual size: 37KB

.data Size: 512B - Virtual size: 32KB

.rsrc Size: 145KB - Virtual size: 145KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 25KB - Virtual size: 25KB

.rdata
Size: 38KB - Virtual size: 37KB

.data
Size: 512B - Virtual size: 32KB

.rsrc
Size: 145KB - Virtual size: 145KB

.reloc
Size: 2KB - Virtual size: 1KB