Fluorocarbomorpholide[.]zip

Sharing

Copy URL

Twitter E-mail

General

Target

Fluorocarbomorpholide.zip
Size

307KB
MD5

c44da3f2bb10d7651c0f8b0222cb236c
SHA1

2167ddd9e9a0dec9930e4c2c4ce2a9ec666a3435
SHA256

8cfe620c739729eb82839dffb37a67213b8f4aa2ba480a9dd8fd6b0f02e5d360
SHA512

35b96da55c252233a260c6f9597894d4ec71dd532690bc59d83957d910c4b0ab77cf5d122f59547b214e8f91b2cc87d97488f0c81a64bab7a69f8998d4ad3a5e
SSDEEP

6144:x1fBQcUxuwYxpLBf7wG54XdJQM/HBKtb0YCVoMPvAef3wG/4XdJUMf2:ZYXScG5AHpBKtb0RVoqzoG/AHB2

Score

3^/10

Malware Config

Signatures

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Fluorocarbomorpholide.exe
unpack001/Fluorocarbomorpholide.harmless.exe

Files

Fluorocarbomorpholide.zip
.zip
Fluorocarbomorpholide.exe
.exe windows:6 windows x86 arch:x86

39280c19cd7bc683ce554cd98127c8a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Senad\source\repos\Fluorocarbomorpholide\Release\Fluorocarbomorpholide.pdb

Imports

kernel32

GetCurrentProcess
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcessId
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
UnhandledExceptionFilter
QueryPerformanceCounter
IsProcessorFeaturePresent
ExitProcess
CreateThread
CloseHandle
TerminateThread
Sleep
FindNextFileW
FindFirstFileW
SetUnhandledExceptionFilter
TerminateProcess

user32

LoadIconW
ReleaseDC
InvalidateRect
GetSystemMetrics
GetWindowRect
GetDC
MessageBoxW
DrawIcon
GetWindowDC
GetDesktopWindow

gdi32

BitBlt
SelectObject
PatBlt
PlgBlt
CreatePen
Rectangle
Polygon
DeleteObject
CreateSolidBrush

shell32

ShellExecuteW

winmm

waveOutWrite
waveOutUnprepareHeader
waveOutClose
waveOutOpen
waveOutPrepareHeader

ntdll

NtRaiseHardError
RtlAdjustPrivilege

vcruntime140

__current_exception
_except_handler4_common
__current_exception_context
memset

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-runtime-l1-1-0

_c_exit
system
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_controlfp_s
terminate
_seh_filter_exe
_set_app_type
_register_thread_local_exe_atexit_callback
_configure_narrow_argv
_cexit
_initialize_narrow_environment
_exit
exit
_initterm_e
_initterm
_get_narrow_winmain_command_line

api-ms-win-crt-math-l1-1-0

_libm_sse2_sin_precise
__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sections

.text
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 230KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 880B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Fluorocarbomorpholide.harmless.exe
.exe windows:6 windows x86 arch:x86

d3ca14018d2c8bd971f8cbff8f7e0e4e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Senad\source\repos\Fluorocarbomorpholide.harmless\Release\Fluorocarbomorpholide.pdb

Imports

kernel32

GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetCurrentProcessId
GetStartupInfoW
SetUnhandledExceptionFilter
GetModuleHandleW
UnhandledExceptionFilter
QueryPerformanceCounter
IsProcessorFeaturePresent
ExitProcess
CreateThread
CloseHandle
TerminateThread
Sleep
GetCurrentProcess
TerminateProcess

user32

GetWindowRect
ReleaseDC
InvalidateRect
LoadIconW
DrawIcon
GetSystemMetrics
MessageBoxW
GetDC
GetWindowDC
GetDesktopWindow

gdi32

BitBlt
SelectObject
PatBlt
PlgBlt
CreatePen
Rectangle
Polygon
DeleteObject
CreateSolidBrush

winmm

waveOutWrite
waveOutUnprepareHeader
waveOutClose
waveOutOpen
waveOutPrepareHeader

vcruntime140

__current_exception_context
__current_exception
memset
_except_handler4_common

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function
_crt_atexit
_controlfp_s
terminate
_set_app_type
_configure_narrow_argv
_initialize_onexit_table
_initialize_narrow_environment
_get_narrow_winmain_command_line
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
_initterm
_exit
exit
_initterm_e
_seh_filter_exe

api-ms-win-crt-math-l1-1-0

_libm_sse2_sin_precise
__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sections

.text
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 932B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 230KB - Virtual size: 229KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 844B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
README.txt

Sharing

General

Malware Config

Signatures

Files

39280c19cd7bc683ce554cd98127c8a5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

shell32

winmm

ntdll

vcruntime140

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 10KB - Virtual size: 9KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 932B

.rsrc Size: 230KB - Virtual size: 229KB

.reloc Size: 1024B - Virtual size: 880B

d3ca14018d2c8bd971f8cbff8f7e0e4e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

winmm

vcruntime140

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 9KB - Virtual size: 9KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 512B - Virtual size: 932B

.rsrc Size: 230KB - Virtual size: 229KB

.reloc Size: 1024B - Virtual size: 844B

.text
Size: 10KB - Virtual size: 9KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 932B

.rsrc
Size: 230KB - Virtual size: 229KB

.reloc
Size: 1024B - Virtual size: 880B

.text
Size: 9KB - Virtual size: 9KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 512B - Virtual size: 932B

.rsrc
Size: 230KB - Virtual size: 229KB

.reloc
Size: 1024B - Virtual size: 844B