88081c9e0593739b0616c63a10f75d48db5941ff796e7d94d4edf065c3fa4020

Sharing

Copy URL Twitter E-mail

General

Target

88081c9e0593739b0616c63a10f75d48db5941ff796e7d94d4edf065c3fa4020
Size

228KB
MD5

061636f79db230248492a7741f7fa73b
SHA1

984f49bf79c12475aa6ea64da5bc947e3a122e60
SHA256

88081c9e0593739b0616c63a10f75d48db5941ff796e7d94d4edf065c3fa4020
SHA512

e5e48493a788d7fb215eacee21362d23807e397f5c5164d12d4fa4d6e88776216e03782b3acf90923d1eea9c1235b9240037cf784d5ce2b41be66795f3b6152b
SSDEEP

1536:tmqFvcLIFJrGWSz/w8IG+hUYpjKUzKvIBC6gy/:MqFvjNUY88UYp2nvyC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
88081c9e0593739b0616c63a10f75d48db5941ff796e7d94d4edf065c3fa4020

Files

88081c9e0593739b0616c63a10f75d48db5941ff796e7d94d4edf065c3fa4020
.exe windows:6 windows x86 arch:x86

50b2d1d77393e804aae321b00739d0be

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\软件测试2\WorkManagment\Debug\WorkManagment.pdb

Imports

kernel32

InitializeCriticalSectionEx
DeleteCriticalSection
GetLocalTime
WideCharToMultiByte
MultiByteToWideChar
VirtualQuery
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetCurrentProcess
GetProcessHeap
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetProcAddress
GetModuleHandleW
CreateEventW
WaitForSingleObjectEx
ResetEvent
SetEvent
CloseHandle
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringW
IsDebuggerPresent
FreeLibrary
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
SetLastError
GetLastError
RaiseException
GetStartupInfoW
DecodePointer

user32

LoadIconW
LoadCursorW
UpdateWindow
TranslateAcceleratorW
LoadAcceleratorsW
DialogBoxParamW
ShowWindow
GetDlgItem
SetDlgItemTextW
GetDlgItemTextW
SetFocus
EndDialog
MessageBoxW
GetFocus
SendMessageW
DrawTextW
ReleaseDC
BeginPaint
EndPaint
GetClientRect
wsprintfW
LoadStringW
GetMessageW
TranslateMessage
DestroyWindow
DispatchMessageW
DefWindowProcW
PostQuitMessage
RegisterClassExW
CreateWindowExW
UnregisterClassW

gdi32

CreateSolidBrush
DeleteObject
Rectangle
SelectObject
SetBkColor
SetBkMode
SetTextColor
TextOutW
CreateFontW

vcruntime140d

memset
__CxxFrameHandler3
memmove
__vcrt_InitializeCriticalSectionEx
__telemetry_main_invoke_trigger
__telemetry_main_return_trigger
_except_handler4_common
__std_type_info_destroy_list
__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__vcrt_LoadLibraryExW
_CxxThrowException

ucrtbased

_seh_filter_dll
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
__stdio_common_vsnwprintf_s
_crt_atexit
_crt_at_quick_exit
_cexit
_CrtDbgReport
_seh_filter_exe
_set_app_type
__setusermatherr
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_initterm_e
exit
_exit
_free_dbg
_c_exit
_register_thread_local_exe_atexit_callback
_configthreadlocale
_set_new_mode
__p__commode
terminate
__stdio_common_vsprintf_s
_controlfp_s
_wmakepath_s
_wsplitpath_s
__stdio_common_vswprintf_s
__stdio_common_vswprintf
_recalloc
malloc
free
strcpy
strcat
wcslen
wcscpy_s
_errno
_invalid_parameter_noinfo
strlen
wcscpy
wcscmp
wcscat
_CrtDbgReportW
__stdio_common_vsprintf
__stdio_common_vfscanf
__stdio_common_vfprintf
fopen
_set_fmode
fclose
_execute_onexit_table
calloc

Sections

.textbss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 1024B - Virtual size: 777B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.00cfg
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

50b2d1d77393e804aae321b00739d0be

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

vcruntime140d

ucrtbased

Sections

.textbss Size: - Virtual size: 64KB

.text Size: 84KB - Virtual size: 84KB

.rdata Size: 15KB - Virtual size: 15KB

.data Size: 1024B - Virtual size: 14KB

.idata Size: 5KB - Virtual size: 5KB

.tls Size: 1024B - Virtual size: 777B

.00cfg Size: 512B - Virtual size: 260B

.rsrc Size: 115KB - Virtual size: 114KB

.reloc Size: 5KB - Virtual size: 4KB

.textbss
Size: - Virtual size: 64KB

.text
Size: 84KB - Virtual size: 84KB

.rdata
Size: 15KB - Virtual size: 15KB

.data
Size: 1024B - Virtual size: 14KB

.idata
Size: 5KB - Virtual size: 5KB

.tls
Size: 1024B - Virtual size: 777B

.00cfg
Size: 512B - Virtual size: 260B

.rsrc
Size: 115KB - Virtual size: 114KB

.reloc
Size: 5KB - Virtual size: 4KB