5aa7bec943e3f8788790b9c5b39704f0ee89741b859af0654183471ab6b28c69

Sharing

Copy URL

Twitter E-mail

General

Target

5aa7bec943e3f8788790b9c5b39704f0ee89741b859af0654183471ab6b28c69
Size

21KB
MD5

2dc6d02268eb5df5f7b96f34903233a7
SHA1

d7c7e56d61cafe2d809f224598472109b589340c
SHA256

5aa7bec943e3f8788790b9c5b39704f0ee89741b859af0654183471ab6b28c69
SHA512

10a71f58b5503d429adae270adb6a4590d9c7c55a208849118b717f864102adaba2ce570a360221693c947d00b8a49b6aa0f7bd60224bdfcf210ba2c0408ce55
SSDEEP

384:zolzhhagq8n7eyXxQXYFP0R5+XOrPugUb2HX1o9qfbV1YT:mDagqU7eyBQd5Jr1UygCZ1e

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5aa7bec943e3f8788790b9c5b39704f0ee89741b859af0654183471ab6b28c69

Files

5aa7bec943e3f8788790b9c5b39704f0ee89741b859af0654183471ab6b28c69
.exe windows:5 windows x86 arch:x86

42e0b476ec0096945836f2ad8f7056b8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\eccle\Documents\Visual Studio 2010\Projects\test1\Debug\test3.pdb

Imports

opencv_core249d

cvResetImageROI
cvSetZero
cvSetImageROI
cvRectangle
cvInRangeS
cvMerge
cvSplit
cvClone
cvCreateImage
cvReleaseImage

opencv_highgui249d

cvShowImage
cvNamedWindow
cvLoadImage
cvWaitKey

opencv_imgproc249d

cvErode
cvDilate
cvCvtColor
cvEqualizeHist

msvcr100d

_fmode
_amsg_exit
__getmainargs
_exit
_XcptFilter
_cexit
exit
__initenv
_CrtSetCheckCount
_CrtDbgReportW
_initterm
_initterm_e
_crt_debugger_hook
?terminate@@YAXXZ
_controlfp_s
_invoke_watson
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
_commode
__setusermatherr
_configthreadlocale
_CRT_RTC_INITW
??2@YAPAXI@Z
__CxxFrameHandler3
printf
__set_app_type

kernel32

FreeLibrary
VirtualQuery
GetModuleFileNameW
GetProcessHeap
HeapAlloc
HeapFree
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
LoadLibraryW
GetProcAddress
lstrlenA
RaiseException
MultiByteToWideChar
WideCharToMultiByte
IsDebuggerPresent
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
EncodePointer
UnhandledExceptionFilter

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 960B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 910B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

42e0b476ec0096945836f2ad8f7056b8

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

opencv_core249d

opencv_highgui249d

opencv_imgproc249d

msvcr100d

kernel32

Sections

.text Size: 12KB - Virtual size: 12KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 960B

.rsrc Size: 512B - Virtual size: 436B

.reloc Size: 1024B - Virtual size: 910B

.text
Size: 12KB - Virtual size: 12KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 960B

.rsrc
Size: 512B - Virtual size: 436B

.reloc
Size: 1024B - Virtual size: 910B