fcc1937242d48ac301980448f2268d9b345c34b4d0dfd158eb39e1af47ed0c1b[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

fcc1937242d48ac301980448f2268d9b345c34b4d0dfd158eb39e1af47ed0c1b.exe
Size

117KB
MD5

464334735cb66b97fcaa22fbde9df6d2
SHA1

8a3dc0ab86fbe0e23a2abdccf21372ecf945c9a1
SHA256

fcc1937242d48ac301980448f2268d9b345c34b4d0dfd158eb39e1af47ed0c1b
SHA512

726c068ee98eb1e0b14090e30f37c64d69c4a2555b6ca1f69318a99526be349003e188a44e23f5e9a9d90d5e27ef00a0b34bc99fa02f7feaaa5a40995091c3cc
SSDEEP

1536:HZPFuxU77974E2vXOOiatgHQYQBMQ0IRXQdhN/jqss2loHuU:hFuxm4TvXODtIRgd7HoHv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fcc1937242d48ac301980448f2268d9b345c34b4d0dfd158eb39e1af47ed0c1b.exe

Files

fcc1937242d48ac301980448f2268d9b345c34b4d0dfd158eb39e1af47ed0c1b.exe
.dll windows:6 windows x64 arch:x64

45268fa37ada66eb796ae9d2556410f6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\Users\ioana\Desktop\1234\SDK\x64\Release\pulse.pdb

Imports

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_type_info_destroy_list
_CxxThrowException
__C_specific_handler
__std_exception_copy
__std_exception_destroy
memcpy
memset

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_seh_filter_dll
_execute_onexit_table
_initterm_e
_initialize_narrow_environment
_cexit
_initialize_onexit_table
system
_initterm

api-ms-win-crt-math-l1-1-0

round

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

kernel32

GetSystemTimeAsFileTime
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
ReleaseSRWLockExclusive
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter

Sections

.text
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

45268fa37ada66eb796ae9d2556410f6

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

Sections

.text Size: 93KB - Virtual size: 93KB

.rdata Size: 18KB - Virtual size: 18KB

.data Size: 512B - Virtual size: 4KB

.pdata Size: 2KB - Virtual size: 2KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 100B

.text
Size: 93KB - Virtual size: 93KB

.rdata
Size: 18KB - Virtual size: 18KB

.data
Size: 512B - Virtual size: 4KB

.pdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 100B