cbdfd4f64623137dcce2ad09470457048fc1fffce53378fd07defe9fb0123969

Sharing

Copy URL Twitter E-mail

General

Target

cbdfd4f64623137dcce2ad09470457048fc1fffce53378fd07defe9fb0123969
Size

121KB
MD5

e54eafc48efbcedf3a337d55c0ecf736
SHA1

85193a67745c198c9314147805ae4746f157a162
SHA256

cbdfd4f64623137dcce2ad09470457048fc1fffce53378fd07defe9fb0123969
SHA512

d69acb5d51bb4f30aaf88800a2473510a6c0dc253620e84a39cb606a255eee51884d6e524288e195ed8c92bd6418cef3c7b9a33ee909c3e821a7b3e9b1bec14b
SSDEEP

1536:Ndekyb1tO/EFPo7XfRqvszFYQ7I9uG7BSwLt/snqwKjhfmUnH7KwaXy4:N4b2937I9uG7BSDqDhfmM8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbdfd4f64623137dcce2ad09470457048fc1fffce53378fd07defe9fb0123969

Files

cbdfd4f64623137dcce2ad09470457048fc1fffce53378fd07defe9fb0123969
.exe windows:6 windows x86 arch:x86

9d532928c679b4c92a82845efab1eff4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\14488\source\repos\乱玩\Debug\乱玩.pdb

Imports

vcruntime140d

memset
__std_terminate
memcpy
wcsrchr
wcsstr
_CxxThrowException
__std_type_info_destroy_list
__current_exception
__current_exception_context
_except_handler4_common
__std_exception_copy
__std_exception_destroy
__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__vcrt_LoadLibraryExW
__CxxFrameHandler3

ucrtbased

terminate
_controlfp_s
__stdio_common_vsprintf_s
strcat_s
strcpy_s
_crt_at_quick_exit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_seh_filter_dll
_callnewh
__p__commode
_set_new_mode
_configthreadlocale
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argv
__p___argc
_set_fmode
_free_dbg
_initterm_e
_initterm
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
__setusermatherr
_set_app_type
_seh_filter_exe
_CrtDbgReportW
_CrtDbgReport
fclose
_wfreopen_s
__acrt_iob_func
exit
floor
_CIsin
_CIcos
malloc
free
_wcsupr_s
__stdio_common_vswprintf_s
system
_wmakepath_s
_wsplitpath_s
wcscpy_s
_exit

kernel32

WideCharToMultiByte
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
MultiByteToWideChar
InitializeSListHead
GetStartupInfoW
GetLastError
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
FreeLibrary
GetSystemTimeAsFileTime
lstrcpynW
GetConsoleWindow
GlobalUnlock
GlobalLock
lstrcatW
lstrlenW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CloseHandle
SetEvent
ResetEvent
WaitForSingleObject
CreateEventW
Sleep
CreateThread
GetTickCount
GetModuleFileNameW
GetModuleHandleW
AllocConsole
FreeConsole
SetConsoleCtrlHandler
CreateFileW
GetFileSize
ReadFile
LoadResource
LockResource
SizeofResource
FindResourceW
GlobalAlloc
GlobalFree
GetProcAddress
LoadLibraryW
GlobalReAlloc
GetCurrentThreadId
IsDebuggerPresent
RaiseException
SetUnhandledExceptionFilter

user32

SystemParametersInfoW
GetClientRect
GetWindowTextLengthW
GetWindowTextW
SetForegroundWindow
UpdateWindow
DrawTextW
EnableWindow
GetKeyState
GetFocus
SetFocus
GetClassInfoExW
GetMessageW
DestroyIcon
LoadCursorW
TranslateMessage
DispatchMessageW
PeekMessageW
SendMessageW
PostMessageW
DefWindowProcW
PostQuitMessage
UnregisterClassW
RegisterClassExW
DestroyWindow
CreateWindowExW
ShowWindow
SetWindowPos
IsWindowVisible
GetDC
ReleaseDC
ValidateRect
GetWindowRect
AdjustWindowRectEx
ScreenToClient

gdi32

BitBlt
CreateFontIndirectW
CreatePen
CreateSolidBrush
DeleteDC
DeleteObject
GetStockObject
SelectClipRgn
SelectObject
SetBkColor
SetBkMode
SetGraphicsMode
SetTextColor
SetWorldTransform
CreateDIBSection
GdiSetBatchLimit
Arc
CreateBitmap
CreateBrushIndirect
PolyBezier
Polyline
Polygon
TextOutW
MoveToEx
GetObjectW
ExtCreatePen
SetROP2
SetPolyFillMode
SetPixelV
SelectPalette
RoundRect
RealizePalette
Rectangle
Pie
LineTo
GetTextExtentPoint32W
GetPolyFillMode
GetPixel
GetDIBits
GetCurrentObject
GetClipRgn
GetBkMode
GetROP2
FillRgn
ExtFloodFill
Ellipse
CreateRectRgn
CreateCompatibleDC

shell32

ExtractIconW

ole32

CreateStreamOnHGlobal
CoUninitialize
CoInitialize

Sections

.textbss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.msvcjmc
Size: 512B - Virtual size: 329B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 265B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9d532928c679b4c92a82845efab1eff4

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

vcruntime140d

ucrtbased

kernel32

user32

gdi32

shell32

ole32

Sections

.textbss Size: - Virtual size: 64KB

.text Size: 88KB - Virtual size: 87KB

.rdata Size: 14KB - Virtual size: 14KB

.data Size: 2KB - Virtual size: 3KB

.idata Size: 7KB - Virtual size: 6KB

.msvcjmc Size: 512B - Virtual size: 329B

.00cfg Size: 512B - Virtual size: 265B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 5KB - Virtual size: 5KB

.textbss
Size: - Virtual size: 64KB

.text
Size: 88KB - Virtual size: 87KB

.rdata
Size: 14KB - Virtual size: 14KB

.data
Size: 2KB - Virtual size: 3KB

.idata
Size: 7KB - Virtual size: 6KB

.msvcjmc
Size: 512B - Virtual size: 329B

.00cfg
Size: 512B - Virtual size: 265B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 5KB - Virtual size: 5KB