5a1ffc64688e6b7a80f3722d0d0fbd3edad39c98c49826eeef23503855dbfd84

Sharing

Copy URL Twitter E-mail

General

Target

5a1ffc64688e6b7a80f3722d0d0fbd3edad39c98c49826eeef23503855dbfd84
Size

93KB
MD5

5361022d24a6399ee34b6ffffa983681
SHA1

04e95fe949fa39dddcef71358cab855d0cf36ab6
SHA256

5a1ffc64688e6b7a80f3722d0d0fbd3edad39c98c49826eeef23503855dbfd84
SHA512

35725d57a21c460990d4d2e52f587313c46ae0e8de733e19ad400cbbcd0f7e97652029ec2e11c3a76848d4299978e90d84d2e239a9d71e5d0b0b24e4ffec4010
SSDEEP

1536:mm/OCd/fmiYPTiF1kmdj/tf+OZEtckaTP5nMBuONn+RfV437/ZuzG1P3N2Uhy2T5:mm/RmbPTibkmF/pstBaDqwONnct437Bl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5a1ffc64688e6b7a80f3722d0d0fbd3edad39c98c49826eeef23503855dbfd84

Files

5a1ffc64688e6b7a80f3722d0d0fbd3edad39c98c49826eeef23503855dbfd84
.exe windows:6 windows x86 arch:x86

c00f6397ab85f458c069c663274437db

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\WorkFolder\Code\GitHub\MWS_fork\UTIL\StorageURL_Gen\Release\StorageURL_Gen.pdb

Imports

mfc120u

ord5557
ord11600
ord11601
ord9020
ord11964
ord3795
ord11811
ord14447
ord8846
ord12095
ord6875
ord10883
ord9137
ord3224
ord13738
ord12134
ord12132
ord1711
ord1723
ord1731
ord1727
ord1736
ord4879
ord4920
ord4887
ord4899
ord4895
ord4891
ord4928
ord4916
ord4883
ord4932
ord4905
ord4867
ord4874
ord4909
ord4459
ord9574
ord4451
ord3013
ord14449
ord7807
ord14455
ord6774
ord8268
ord13563
ord5838
ord2640
ord11999
ord3898
ord3330
ord3329
ord3223
ord12043
ord5693
ord6032
ord10136
ord6452
ord999
ord2173
ord2204
ord3654
ord10353
ord4842
ord8346
ord3790
ord887
ord1386
ord10919
ord7704
ord13997
ord6436
ord9091
ord9116
ord10169
ord2718
ord13612
ord6121
ord3122
ord3361
ord3362
ord11271
ord10896
ord8921
ord12006
ord12736
ord8206
ord5262
ord2444
ord12412
ord12413
ord14448
ord7806
ord14454
ord9279
ord4109
ord4047
ord12818
ord7825
ord1992
ord11857
ord11858
ord14326
ord12402
ord7884
ord14526
ord6251
ord14528
ord6253
ord14527
ord6252
ord3809
ord5821
ord12114
ord12122
ord4546
ord8099
ord10314
ord12126
ord12094
ord12799
ord5157
ord5454
ord5664
ord9231
ord5430
ord5667
ord5160
ord5316
ord5137
ord7609
ord7610
ord7600
ord5314
ord8101
ord10131
ord9090
ord6758
ord1110
ord6392
ord6469
ord3839
ord296
ord1042
ord4772
ord2262
ord1658
ord1108
ord10165
ord10167
ord10168
ord10166
ord2719
ord8092
ord3260
ord3263
ord13616
ord6123
ord7384
ord1130
ord4049
ord13771
ord7206
ord462
ord12048
ord8352
ord13302
ord949
ord1506
ord2163
ord7881
ord1467
ord992
ord7542
ord2367
ord10260
ord11592
ord1508

msvcr120

_CxxThrowException
memcpy
__crtTerminateProcess
__crtUnhandledException
_crt_debugger_hook
_controlfp_s
_invoke_watson
__crtSetUnhandledExceptionFilter
_except_handler4_common
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
_commode
_fmode
_wcmdln
_initterm
_initterm_e
__setusermatherr
_configthreadlocale
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__crtGetShowWindowMode
_XcptFilter
memset
wcstol
memmove
free
__CxxFrameHandler3

kernel32

InitializeCriticalSectionEx
GetLastError
OutputDebugStringW
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
DeleteCriticalSection
DecodePointer

user32

IsIconic
DrawIcon
GetClientRect
GetSystemMetrics
SendMessageW
AppendMenuW
GetSystemMenu
LoadIconW
EnableWindow

comctl32

InitCommonControlsEx

msvcp120

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Orphan_all@_Container_base0@std@@QAEXXZ

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c00f6397ab85f458c069c663274437db

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mfc120u

msvcr120

kernel32

user32

comctl32

msvcp120

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 8KB - Virtual size: 8KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 69KB - Virtual size: 69KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 8KB - Virtual size: 8KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 69KB - Virtual size: 69KB

.reloc
Size: 2KB - Virtual size: 2KB