cad181c83cc6b8f1017df41c14e557c0

Sharing

Copy URL Twitter E-mail

General

Target

cad181c83cc6b8f1017df41c14e557c0
Size

322KB
MD5

cad181c83cc6b8f1017df41c14e557c0
SHA1

6b2f81007a0b91fcb9c4f4fb47c5c496494eafb9
SHA256

5d26482971bfed6199a4cf57ae4ea2e340f19883f2d9f6432ef28da54835468f
SHA512

e243a551de20096679464a6fec4ac702b099dfd283ad1c11812df1b595933b0bf3a272ee56890e25462ae6db4c03b2782dde37fa42e67e8646cd0db5df94be6f
SSDEEP

6144:HkkO8YXBp7vXPMG++AaiPp74dRJjQcWwusHcXKvPatSJabzCS:HkkO8YXBpj9AlPp70RJkcWwuccXK3mz9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cad181c83cc6b8f1017df41c14e557c0

Files

cad181c83cc6b8f1017df41c14e557c0
.exe windows:4 windows x86 arch:x86

c943872f1a85c23fdf2de2ac63b7d3c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\AutoLink_CS\Temp\virustools\viruskiller\ravmagistr\Release\VikingKiller.pdb

Imports

comctl32

InitCommonControlsEx

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

ws2_32

inet_ntoa
WSACleanup
gethostbyname
gethostname
WSAStartup

kernel32

GetFileTime
UnmapViewOfFile
GetFileSize
SetFilePointer
ReadFile
DeleteFileA
GetShortPathNameA
GetEnvironmentVariableA
LocalFree
LocalAlloc
Sleep
GetLastError
MapViewOfFile
CreateFileMappingA
WriteFile
SetEndOfFile
GetFileAttributesExA
SetFileAttributesA
CopyFileA
FindNextFileA
FindClose
FindFirstFileA
RemoveDirectoryA
CreateDirectoryA
MoveFileA
GetTempPathA
GetWindowsDirectoryA
GetLogicalDrives
GetFileAttributesA
VirtualFree
VirtualAlloc
SetThreadPriority
SetPriorityClass
GetCurrentThread
GetCurrentProcess
MoveFileExA
GetVersionExA
GetTempFileNameA
HeapFree
HeapAlloc
GetProcessHeap
CreateFileW
FindFirstFileW
MultiByteToWideChar
lstrlenA
GetDiskFreeSpaceA
GetUserDefaultLangID
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GlobalUnlock
GlobalLock
GlobalAlloc
LockResource
LoadResource
SetFileTime
SetLastError
DeleteCriticalSection
GetCurrentThreadId
RaiseException
EnterCriticalSection
LeaveCriticalSection
FlushInstructionCache
GlobalFree
GlobalHandle
lstrlenW
lstrcmpA
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InitializeCriticalSection
MulDiv
SizeofResource
LoadLibraryExA
lstrcmpiA
lstrcpynA
IsDBCSLeadByte
VirtualQueryEx
GetSystemInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
HeapSize
SetUnhandledExceptionFilter
FlushFileBuffers
IsBadWritePtr
HeapCreate
HeapDestroy
LCMapStringW
LCMapStringA
SetStdHandle
GetStdHandle
SetHandleCount
GetCPInfo
GetOEMCP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetCommandLineA
GetStartupInfoA
HeapReAlloc
VirtualQuery
VirtualProtect
GetFileType
FileTimeToLocalFileTime
FileTimeToSystemTime
GetFullPathNameA
ExitProcess
RtlUnwind
SuspendThread
GetModuleHandleA
CreateThread
WaitForSingleObject
TerminateThread
VirtualProtectEx
WriteProcessMemory
TerminateProcess
DeviceIoControl
GetModuleFileNameA
SetCurrentDirectoryA
CreateFileA
FreeLibrary
GetVersion
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
CloseHandle
OpenProcess
ReadProcessMemory
GetPrivateProfileIntA
GetPrivateProfileStringA
WritePrivateProfileStringA
GetLogicalDriveStringsA
GetDriveTypeA
IsBadReadPtr
IsBadCodePtr
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
SetConsoleCtrlHandler
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetCurrentDirectoryA
FindResourceA

user32

GetDesktopWindow
CharNextA
GetClassNameA
RedrawWindow
IsWindow
BeginPaint
FillRect
EndPaint
ReleaseDC
GetFocus
DestroyAcceleratorTable
GetSysColor
DefWindowProcA
CreateAcceleratorTableA
SetWindowContextHelpId
SetWindowPos
CreateWindowExA
DestroyWindow
IsChild
GetDC
ReleaseCapture
SetCapture
InvalidateRgn
RegisterClassExA
SendMessageA
SetWindowTextA
GetParent
MessageBoxA
CharUpperA
GetActiveWindow
EndDialog
DialogBoxParamA
SendDlgItemMessageA
GetClassInfoExA
RegisterWindowMessageA
GetWindowTextA
GetWindowTextLengthA
wsprintfA
UnregisterClassA
ShowWindow
MapWindowPoints
SystemParametersInfoA
GetWindowRect
DialogBoxIndirectParamA
MapDialogRect
GetWindow
ScreenToClient
GetClientRect
PtInRect
SetTimer
InvalidateRect
WindowFromPoint
KillTimer
LoadCursorA
SetCursor
CallWindowProcA
GetDlgCtrlID
GetSysColorBrush
LoadIconA
SetWindowLongA
SetDlgItemTextA
GetWindowLongA
GetSystemMenu
EnableMenuItem
GetDlgItem
EnableWindow
SetFocus
GetCursorPos

gdi32

CreateSolidBrush
CreateCompatibleBitmap
CreateCompatibleDC
BitBlt
DeleteDC
GetDeviceCaps
CreateFontIndirectA
SelectObject
SetTextColor
GetStockObject
SetBkMode
GetObjectA
DeleteObject

advapi32

OpenSCManagerA
RegQueryInfoKeyA
RegCreateKeyExA
OpenProcessToken
LookupPrivilegeValueA
AdjustTokenPrivileges
RegOpenKeyA
RegEnumValueA
RegSetValueExA
RegDeleteValueA
RegOpenKeyExA
RegCloseKey
RegEnumKeyExA
RegDeleteKeyA
EnumServicesStatusA
CloseServiceHandle
QueryServiceConfigA
OpenServiceA
DeleteService
ControlService
QueryServiceStatus

shell32

ShellExecuteA

ole32

CoCreateInstance
StringFromGUID2
CoTaskMemAlloc
OleLockRunning
OleUninitialize
OleInitialize
CoTaskMemFree
CLSIDFromString
CLSIDFromProgID
CoGetClassObject
CreateStreamOnHGlobal
CoTaskMemRealloc

oleaut32

LoadRegTypeLi
VarUI4FromStr
OleCreateFontIndirect
SysStringByteLen
VariantClear
VariantInit
LoadTypeLi
SysAllocString
SysStringLen
SysAllocStringLen
SysFreeString
GetErrorInfo
VariantChangeType
SetErrorInfo
CreateErrorInfo

Sections

.text
Size: 208KB - Virtual size: 205KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 76KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.+%
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

c943872f1a85c23fdf2de2ac63b7d3c7

Headers

File Characteristics

PDB Paths

Imports

comctl32

version

ws2_32

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

Sections

.text Size: 208KB - Virtual size: 205KB

.rdata Size: 28KB - Virtual size: 26KB

.data Size: 4KB - Virtual size: 9KB

.rsrc Size: 76KB - Virtual size: 74KB

.+% Size: 2KB - Virtual size: 2KB

.text
Size: 208KB - Virtual size: 205KB

.rdata
Size: 28KB - Virtual size: 26KB

.data
Size: 4KB - Virtual size: 9KB

.rsrc
Size: 76KB - Virtual size: 74KB

.+%
Size: 2KB - Virtual size: 2KB