759c55615f638b149d3842d54da084cb34c97f90f6c6d84d59dda9496e6141ea

Sharing

Copy URL Twitter E-mail

General

Target

759c55615f638b149d3842d54da084cb34c97f90f6c6d84d59dda9496e6141ea
Size

30KB
MD5

b8c01641c8826e225e47a94c03707931
SHA1

8c818a9e310e2a631cb8f07615f98b813e08b747
SHA256

759c55615f638b149d3842d54da084cb34c97f90f6c6d84d59dda9496e6141ea
SHA512

b06bb514f1f84fa691258d4832021aff236a589054ff4c5f6ddc91d16b7b0879249e04cd8c5cea5f487ef741215d056c204a079d1c7a0e34f9ea2db16f9e05eb
SSDEEP

384:IKMixsCj/T3VIkau1d7B08sYpEST7a9AaWdBCXU:IX5kT3VIkau1dFCYpnfaOacAk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
759c55615f638b149d3842d54da084cb34c97f90f6c6d84d59dda9496e6141ea

Files

759c55615f638b149d3842d54da084cb34c97f90f6c6d84d59dda9496e6141ea
.exe windows:6 windows x86 arch:x86

33161b0b29e9ed6a7a6f62519b6d892f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\User\Desktop\LES 4 OFEK HADAR\LESS_6_OFEK_HADAR\Debug\ex5.pdb

Imports

msvcr120d

__crtSetUnhandledExceptionFilter
_lock
_unlock
_calloc_dbg
__dllonexit
_onexit
_invoke_watson
?terminate@@YAXXZ
_except_handler4_common
wcscpy_s
_wmakepath_s
_wsplitpath_s
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
_commode
_fmode
__initenv
_initterm
_initterm_e
__setusermatherr
_configthreadlocale
_cexit
_exit
exit
_CrtSetCheckCount
_CrtDbgReportW
__set_app_type
__getmainargs
_amsg_exit
_XcptFilter
_CRT_RTC_INITW
strlen
system
_controlfp_s
printf
puts
malloc
free

kernel32

GetModuleHandleW
GetModuleFileNameW
FreeLibrary
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
DecodePointer
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
WideCharToMultiByte
MultiByteToWideChar
LoadLibraryExW
GetProcAddress
GetLastError
RaiseException
IsDebuggerPresent
EncodePointer
IsProcessorFeaturePresent

Sections

.textbss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33161b0b29e9ed6a7a6f62519b6d892f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcr120d

kernel32

Sections

.textbss Size: - Virtual size: 64KB

.text Size: 15KB - Virtual size: 14KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1KB - Virtual size: 1KB

.textbss
Size: - Virtual size: 64KB

.text
Size: 15KB - Virtual size: 14KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1KB - Virtual size: 1KB