0320b00def98d733bfd5d8b4420164d9e6ad6c6648c36e31844d9c6bad5f9805

Sharing

Copy URL

Twitter E-mail

General

Target

0320b00def98d733bfd5d8b4420164d9e6ad6c6648c36e31844d9c6bad5f9805
Size

529KB
MD5

164d972ea746802ef9ac8ce19f0021b8
SHA1

c0b87cf2f3c53944fd75a5f933e320ecafe7a2a3
SHA256

0320b00def98d733bfd5d8b4420164d9e6ad6c6648c36e31844d9c6bad5f9805
SHA512

798050287107d3c2f993f84c0ede67f5c3c8107cda93b3eba3da7045f9a04f7f1aeb37e7e1dc88a7ebf5a2a31b11a038e70eab615a9593f2b6fb15af036c8b73
SSDEEP

6144:aeGd5nqyw2Fy1aCcR7RI43TL1P+Nra1Zcfgx0YkpLa7IXmW0nKOw5lvjSoASxSp:kqcn1K43TL1P+NraOg+La7IXjBEp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0320b00def98d733bfd5d8b4420164d9e6ad6c6648c36e31844d9c6bad5f9805

Files

0320b00def98d733bfd5d8b4420164d9e6ad6c6648c36e31844d9c6bad5f9805
.exe windows:6 windows x86 arch:x86

3e5a5dbd5abaf3692f06f5835936a889

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\Project\Cammanger Project\h22\build\Release\CamManager.pdb

Imports

mfc140u

ord4152
ord9398
ord14595
ord7922
ord14589
ord12542
ord12541
ord2486
ord5357
ord8324
ord12865
ord10284
ord8470
ord4885
ord8464
ord8817
ord890
ord1391
ord11038
ord14234
ord6533
ord10288
ord5652
ord11725
ord11726
ord9139
ord12089
ord3838
ord11936
ord14588
ord8965
ord12173
ord6978
ord11002
ord9235
ord3266
ord13878
ord12262
ord12258
ord1722
ord1744
ord1770
ord1756
ord1777
ord4936
ord5003
ord4090
ord4966
ord4960
ord4954
ord5013
ord4997
ord9040
ord5019
ord4974
ord7941
ord4927
ord4988
ord4502
ord11982
ord4494
ord3055
ord14590
ord7923
ord14596
ord6877
ord11717
ord13703
ord5935
ord2682
ord12124
ord3941
ord3372
ord3371
ord3265
ord12168
ord5249
ord5549
ord5760
ord9350
ord5525
ord5790
ord5252
ord5411
ord5228
ord7722
ord7723
ord7712
ord5409
ord8219
ord10255
ord9210
ord3833
ord8754
ord5422
ord10472
ord4948
ord12947
ord7495
ord1113
ord11015
ord11396
ord4092
ord3404
ord6489
ord6566
ord3882
ord296
ord1045
ord4815
ord2304
ord1111
ord462
ord7109
ord3403
ord4912
ord11983
ord14466
ord12531
ord8000
ord14667
ord3164
ord6218
ord6348
ord14669
ord13752
ord6350
ord14668
ord6349
ord3852
ord5918
ord3305
ord12239
ord12247
ord4589
ord3302
ord8217
ord10433
ord12251
ord12219
ord12928
ord5763
ord10250
ord9209
ord6860
ord13911
ord952
ord8210
ord2760
ord2205
ord7997
ord1472
ord995
ord7653
ord10379
ord265
ord266
ord14137
ord2246
ord2215
ord13471
ord5425
ord14785
ord2034
ord1511
ord4485
ord9693
ord12131
ord10285
ord10287
ord4942
ord10286
ord8386
ord2409
ord1513

kernel32

InitializeCriticalSectionEx
GetLastError
DeleteCriticalSection
MultiByteToWideChar
WideCharToMultiByte
OutputDebugStringW
GetDiskFreeSpaceExW
GetModuleFileNameW
LoadLibraryExW
FreeLibrary
GetProcAddress
GlobalAlloc
GlobalFree
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
CloseHandle
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
GetFullPathNameW

user32

ShowWindow
LoadIconW
GetClientRect
MoveWindow
GetWindowTextW
SetWindowLongW
SetWindowTextW
MessageBoxW
GetWindowLongW
GetSystemMenu
AppendMenuW
IsIconic
SendMessageW
DrawIcon
GetWindowTextA
SetWindowTextA
PostQuitMessage
EnableWindow
GetSystemMetrics

comctl32

InitCommonControlsEx

msvcp140

?_Xlength_error@std@@YAXPBD@Z

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

vcruntime140

__std_exception_copy
__std_exception_destroy
strchr
__CxxFrameHandler3
__current_exception
__current_exception_context
_except_handler4_common
memmove
memset
_CxxThrowException
memcpy

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-runtime-l1-1-0

exit
_seh_filter_exe
_set_app_type
_controlfp_s
terminate
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_configure_wide_argv
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
_initialize_wide_environment
_exit
_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
_get_wide_winmain_command_line

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode
__stdio_common_vsprintf
__stdio_common_vswprintf
_wfopen
fwrite
fread
fclose

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-string-l1-1-0

_wcsdup
strtok
strncpy
strtok_s

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-heap-l1-1-0

free
malloc
_set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 54KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 433KB - Virtual size: 433KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3e5a5dbd5abaf3692f06f5835936a889

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mfc140u

kernel32

user32

comctl32

msvcp140

version

vcruntime140

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 54KB - Virtual size: 53KB

.rdata Size: 29KB - Virtual size: 28KB

.data Size: 3KB - Virtual size: 5KB

.rsrc Size: 433KB - Virtual size: 433KB

.reloc Size: 8KB - Virtual size: 8KB

.text
Size: 54KB - Virtual size: 53KB

.rdata
Size: 29KB - Virtual size: 28KB

.data
Size: 3KB - Virtual size: 5KB

.rsrc
Size: 433KB - Virtual size: 433KB

.reloc
Size: 8KB - Virtual size: 8KB