cbca0cd8ee3276dce00a652532922be915e9f796297eebdea663c3e29c104b52

Sharing

Copy URL Twitter E-mail

General

Target

cbca0cd8ee3276dce00a652532922be915e9f796297eebdea663c3e29c104b52
Size

810KB
MD5

89a66b14edb28622c6a9b238273e3a46
SHA1

27fd16803b252bb7b93b8412c23c9bd2ef8af34c
SHA256

cbca0cd8ee3276dce00a652532922be915e9f796297eebdea663c3e29c104b52
SHA512

dc3c02eb9ce0b1495a4a7313dcef577d637aac31abe06b1968d71c3865b4d035ab40cd3dfa275cda6444204ea1c014999ddc4f549becde03fe55cc2958b78534
SSDEEP

6144:pqe50cQB26IgQfxCh4U61lW8UzNHi/qZf0ry1CJLcbl5OJ8Mtx9gY1JzkKnksb9y:gI026I3l2NC/YsaCmMMYDbyD4M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cbca0cd8ee3276dce00a652532922be915e9f796297eebdea663c3e29c104b52

Files

cbca0cd8ee3276dce00a652532922be915e9f796297eebdea663c3e29c104b52
.exe windows:5 windows x86 arch:x86

f75da92282d8cd1f36fe80e7f5d0f51c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\VMWD\Build\Bin.Win\Programs_SOLO.fin\Add-Ons\Extras\ArchiCAD YouTube Channel.pdb

Imports

msvcr100

_onexit
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
?terminate@@YAXXZ
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
memcpy
memmove
??2@YAPAXI@Z
_CxxThrowException
__CxxFrameHandler3
_lock
abort
fprintf
__iob_func
malloc
_vsnprintf
memchr
_snprintf
isprint
atoi
isdigit
strncat
strftime
realloc
__dllonexit
_gmtime64
_localtime64
strerror
strtol
_errno
isspace
strtod
_strtoui64
calloc
_strdup
_unlock
__clean_type_info_names_internal
??3@YAXPAX@Z
__CppXcptFilter
_crt_debugger_hook
__CxxUnregisterExceptionObject
__CxxDetectRethrow
__CxxRegisterExceptionObject
__CxxExceptionFilter
__CxxQueryExceptionSize
??_V@YAXPAX@Z
_cexit
__FrameUnwindFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
free
_malloc_crt
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@XZ
_time64
__RTDynamicCast
_purecall
exit
_mktime64
tolower
sscanf
sprintf
_lseeki64
_filelength
_stat64
_findfirst64
_findnext64
_findclose
printf
vprintf
_beginthreadex
_endthreadex
qsort
memset
_stricmp
strncmp
strchr
_open
_write
_read
_close
strtoul
getenv
?what@exception@std@@UBEPBDXZ

kernel32

ReleaseMutex
WaitForSingleObject
CreateMutexA
CloseHandle
ResumeThread
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
SleepEx
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
EncodePointer
DecodePointer
InterlockedExchange
Sleep
InterlockedCompareExchange
DisableThreadLibraryCalls
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime

msvcp100

?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z

user32

InsertMenuW
ModifyMenuW
GetSystemMenu

wsock32

select
listen
setsockopt
accept
bind
htons
socket
__WSAFDIsSet
recv
send
closesocket
WSACleanup
WSAStartup
WSAGetLastError
getpeername

mscoree

_CorExeMain

Sections

.text
Size: 155KB - Virtual size: 154KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 359KB - Virtual size: 358KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 280KB - Virtual size: 280KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f75da92282d8cd1f36fe80e7f5d0f51c

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcr100

kernel32

msvcp100

user32

wsock32

mscoree

Sections

.text Size: 155KB - Virtual size: 154KB

.rdata Size: 359KB - Virtual size: 358KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 280KB - Virtual size: 280KB

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: 155KB - Virtual size: 154KB

.rdata
Size: 359KB - Virtual size: 358KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 280KB - Virtual size: 280KB

.reloc
Size: 12KB - Virtual size: 12KB