a368272c99eb16a6ed654d8f01e654ae

General

Target

a368272c99eb16a6ed654d8f01e654ae
Size

449KB
MD5

a368272c99eb16a6ed654d8f01e654ae
SHA1

de3d45d6051e3c062173674339eee5ba402b3c86
SHA256

e143de69f6e33b6ac373f10dfc75f5d3862fe53c335822da2d887bbe9d466080
SHA512

0d74f8c3327b55e9e6b41ba240506b49b19da688136362f19242ffb5b928c214913f4749f77e0a1aa0fed2d443f078e9581737b3b8209d071cbe31578d091dd6
SSDEEP

768:lrRt7zyfu6squB8X2nHfNR6g4T+X87Sn+LfJ7N:lrRt7e8HiT+X5M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a368272c99eb16a6ed654d8f01e654ae

Files

a368272c99eb16a6ed654d8f01e654ae
.exe windows:4 windows x86 arch:x86

593a879d7c7a9055196d46fd66a88fbb

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

f:\Programmieren\old\Absinth_Crypter_stub_6kb\Release\Absinth_Crypter_stub.pdb

Imports

msvcr71

_onexit
_amsg_exit
__dllonexit
__security_error_handler
_except_handler3
malloc
fopen
__set_app_type
__p__fmode
__p__commode
_controlfp
__setusermatherr
_initterm
__getmainargs
__p___initenv
exit
_cexit
_XcptFilter
_exit
_c_exit
wcslen
wcscat
_adjust_fdiv
fclose
fread
fseek
_callnewh

kernel32

GetCurrentThreadId
GetModuleFileNameA
CreateFileA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
CloseHandle
CreateProcessA
GetThreadContext
ReadProcessMemory
VirtualAllocEx
WriteProcessMemory
VirtualProtectEx
SetThreadContext
ResumeThread
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
ExitProcess
OutputDebugStringA
GetProcAddress
GetModuleHandleA

mscoree

_CorExeMain

msvcp71

?_Nomemory@std@@YAXXZ

Sections

.text
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

593a879d7c7a9055196d46fd66a88fbb

Headers

File Characteristics

PDB Paths

Imports

msvcr71

kernel32

mscoree

msvcp71

Sections

.text Size: 2KB - Virtual size: 2KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 512B - Virtual size: 7KB

.reloc Size: 512B - Virtual size: 324B

.text
Size: 2KB - Virtual size: 2KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 512B - Virtual size: 7KB

.reloc
Size: 512B - Virtual size: 324B