ecca1328d4d3a30918c0dc5c92f7e018d6e614d065cf99dadd4c513efec751e8

Sharing

Copy URL Twitter E-mail

General

Target

ecca1328d4d3a30918c0dc5c92f7e018d6e614d065cf99dadd4c513efec751e8
Size

3.6MB
MD5

e5db4326e392464b99404ab1b149b1f2
SHA1

b9b9280df21f0fea10544b74aaae4c64608fe84b
SHA256

ecca1328d4d3a30918c0dc5c92f7e018d6e614d065cf99dadd4c513efec751e8
SHA512

05a9657bed6ec68a504b7e275c8eeb307a10d039933433f6502101c57bcaf7029a11ead3c1a4edcdc83c99b7f34add45eb26a0a790d52d973bc03d53b4054177
SSDEEP

6144:M6kHHFvOOamkszKqzPArPwK47J7bCpr+q2T+d7cY0n1eYznjB:ilv1amkszKW4cK4hCpr+qF+nFznjB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ecca1328d4d3a30918c0dc5c92f7e018d6e614d065cf99dadd4c513efec751e8

Files

ecca1328d4d3a30918c0dc5c92f7e018d6e614d065cf99dadd4c513efec751e8
.exe windows:6 windows x86 arch:x86

1b545cba06a9d2ca860d3ceacb75161b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

E:\workplace\AndroidEmulator\7KUI_Git_Branch_Packet_NEW\Basic\Client\Output\Binfinal\UiTools\TUiInst.pdb

Imports

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

psapi

GetModuleFileNameExW

shlwapi

PathIsDirectoryW
PathFileExistsW
PathRemoveFileSpecW
StrStrIW
PathFindFileNameW

kernel32

DeleteCriticalSection
LoadResource
LockResource
SizeofResource
FindResourceW
FindResourceExW
DeleteFileW
GetModuleFileNameW
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
GetCommandLineW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetPrivateProfileSectionW
GetFileAttributesW
Sleep
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
CreateFileW
GetFileAttributesExW
FindFirstFileW
ReadFile
DeviceIoControl
GetTickCount
WriteFile
SetFilePointer
GetCurrentProcess
RemoveDirectoryW
FindNextFileW
FindClose
InitializeCriticalSectionAndSpinCount
GetLogicalDrives
GetDriveTypeW
GetDiskFreeSpaceExW
GetVersion
GetSystemDirectoryW
CreateProcessW
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
ExpandEnvironmentStringsW
GetLongPathNameW
GetLocalTime
CreateDirectoryW
LoadLibraryW
SetFileAttributesW
FreeLibrary
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
OpenProcess
TerminateProcess
MoveFileExW
CopyFileW
VirtualAlloc
VirtualFree
MoveFileW
OutputDebugStringW
IsDebuggerPresent
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
DecodePointer
WriteConsoleW
GetProcAddress
GetModuleHandleW
GetLastError
RaiseException
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
IsValidCodePage
FindNextFileA
FindFirstFileExA
LCMapStringW
CompareStringW
GetFileType
GetStringTypeW
EncodePointer
QueryPerformanceCounter
SetLastError
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
RtlUnwind
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetStdHandle
GetCommandLineA
GetACP

advapi32

RegCreateKeyExW
RegDeleteKeyW
CloseServiceHandle
DeleteService
ControlService
OpenServiceW
OpenSCManagerW
AdjustTokenPrivileges
LookupPrivilegeValueW
LookupPrivilegeNameW
GetTokenInformation
OpenProcessToken
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW

shell32

CommandLineToArgvW
SHCreateDirectoryExW
SHGetSpecialFolderPathW

ole32

CoUninitialize
CoInitialize
CoCreateInstance

Sections

.text
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 93KB - Virtual size: 93KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 376B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 78KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1b545cba06a9d2ca860d3ceacb75161b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

version

psapi

shlwapi

kernel32

advapi32

shell32

ole32

Sections

.text Size: 201KB - Virtual size: 201KB

.rdata Size: 93KB - Virtual size: 93KB

.data Size: 4KB - Virtual size: 7KB

.gfids Size: 512B - Virtual size: 376B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 78KB - Virtual size: 80KB

.text
Size: 201KB - Virtual size: 201KB

.rdata
Size: 93KB - Virtual size: 93KB

.data
Size: 4KB - Virtual size: 7KB

.gfids
Size: 512B - Virtual size: 376B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 78KB - Virtual size: 80KB