12ce7b71a2d840306aa65574a3e9ce14ae7031d8de37ae10d6c9c3e79a1f2a82

Sharing

Copy URL Twitter E-mail

General

Target

12ce7b71a2d840306aa65574a3e9ce14ae7031d8de37ae10d6c9c3e79a1f2a82
Size

822KB
MD5

8bf847d707eaa9b8325c6f5afd0fc769
SHA1

9e427f1a60c27f51b7ea576e4905b94d100dc4c0
SHA256

12ce7b71a2d840306aa65574a3e9ce14ae7031d8de37ae10d6c9c3e79a1f2a82
SHA512

4a90d65c5a2b009d31d9ec85dbf98f4d0139775f894e1c83f3db7ef08b49d194b174235cffc2e2e54836fa0a4ce6fe163f61a61a42a8ff6ca7505d2b26b33381
SSDEEP

12288:b8ABF2sEiBS0AmjUXhzu33N0cPMhCv0SmVQIG1NkyYfknB84V464cMwnT4WN6zUa:f6sJS0A5J+JM4vro4S4VPFIUjaKP+F/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12ce7b71a2d840306aa65574a3e9ce14ae7031d8de37ae10d6c9c3e79a1f2a82

Files

12ce7b71a2d840306aa65574a3e9ce14ae7031d8de37ae10d6c9c3e79a1f2a82
.exe windows:5 windows x86 arch:x86

e65d5b4f121e2310851ee3f3bf431b73

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

P:\intermoutput\3\360ExtLoader_3.1\Release\360ExtLoader.pdb

Imports

kernel32

SetFilePointer
CreateFileW
GetCurrentProcessId
DeviceIoControl
LoadLibraryW
GetProcAddress
FreeLibrary
OutputDebugStringW
GetStdHandle
WriteFile
GetPrivateProfileIntW
WritePrivateProfileStringW
GetCommandLineW
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetLocalTime
GetFileSizeEx
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetSystemTime
SystemTimeToFileTime
SetFileTime
GetFileAttributesExW
SetFilePointerEx
GetTickCount
DeleteFileW
SetEndOfFile
GetFileAttributesW
SetFileAttributesW
ReadFile
CreateThread
Sleep
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
SetEvent
ResetEvent
CreateDirectoryW
FindFirstFileW
FindNextFileW
FindClose
GetModuleFileNameW
GetLastError
CreateMutexW
DeleteCriticalSection
CloseHandle
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
VirtualAlloc
QueryPerformanceCounter
InitializeCriticalSection
MoveFileExW
VirtualFree
HeapCreate
GetStartupInfoA
GetFileType
SetHandleCount
GetEnvironmentStringsW
CreateEventW
FreeEnvironmentStringsW
LCMapStringW
WideCharToMultiByte
LCMapStringA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
RaiseException
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
CreateFileA
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
FormatMessageW
MultiByteToWideChar
SetLastError
GetCurrentThreadId
LocalFree
GetEnvironmentVariableW
TlsGetValue
SetEnvironmentVariableW
TlsSetValue
OpenThread
ReleaseMutex
TlsAlloc
TlsFree
GetModuleHandleW
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleFileNameA

user32

PeekMessageW
PostThreadMessageW
DefWindowProcW
DestroyWindow
EndPaint
GetClientRect
BeginPaint
PostQuitMessage
ShowWindow
UpdateWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadIconW
DispatchMessageW
TranslateMessage
GetMessageW
SetTimer
SendMessageW
InvalidateRect
KillTimer
IsWindow
FindWindowW
DrawTextW

gdi32

GetStockObject

shell32

SHGetSpecialFolderPathW
CommandLineToArgvW

shlwapi

PathFindExtensionW
PathRemoveFileSpecW
PathFileExistsW
PathAppendW
PathRemoveExtensionW

advapi32

RegCloseKey
RegQueryValueExA
RegQueryValueExW
RegOpenKeyExW
RegEnumKeyExW

Sections

.text
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e65d5b4f121e2310851ee3f3bf431b73

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

shell32

shlwapi

advapi32

Sections

.text Size: 110KB - Virtual size: 110KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 7KB - Virtual size: 15KB

.rsrc Size: 26KB - Virtual size: 25KB

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 110KB - Virtual size: 110KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 7KB - Virtual size: 15KB

.rsrc
Size: 26KB - Virtual size: 25KB

.reloc
Size: 9KB - Virtual size: 8KB