死に逝く君、館に芽吹く憎悪[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

死に逝く君、館に芽吹く憎悪.exe
Size

238KB
MD5

19eebf90ca8892c9b740ff8913a9f684
SHA1

c10d0740c15e528280922ca846def44004ea0f30
SHA256

28c6a435c70021bc63de2dfb1433ed68dd8f8830673fc3b383722182507b90a6
SHA512

9c175f08daeb0a864b7eb9a9c5580786826098270b806d1ff9f6af16fbd7b7ae0130349d2cf153d7433a9dd5aea089e357dd6b58ef641d7a54828fffea75d5da
SSDEEP

6144:tR1pHcWI2oTLm8rNbGikd37koId9/aicmkWpP:b1pHc72TN7koIdYiqKP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
死に逝く君、館に芽吹く憎悪.exe

Files

死に逝く君、館に芽吹く憎悪.exe
.exe windows:5 windows x86 arch:x86

bdc14b0f94dab11522c3bffa46eb986a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateEventW
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetDriveTypeW
GetLogicalDrives
GetVolumeInformationW
SetErrorMode
SetEvent
WaitForMultipleObjects
GetCurrentProcessId
WaitForSingleObject
MultiByteToWideChar
CreateEventA
GetModuleHandleA
ResetEvent
FlushFileBuffers
GetLastError
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
HeapSize
InitializeCriticalSectionAndSpinCount
LoadLibraryA
HeapReAlloc
VirtualAlloc
GetLocaleInfoA
CloseHandle
GetModuleFileNameW
FindFirstFileW
FindNextFileW
CreateFileA
FindClose
GetStringTypeW
GetStringTypeA
ExitThread
GetCurrentThreadId
CreateThread
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
RtlUnwind
GetCommandLineA
GetStartupInfoA
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
GetProcAddress
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
HeapAlloc
HeapFree
Sleep
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
DeleteCriticalSection
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
SetFilePointer
GetConsoleCP
GetConsoleMode
EnterCriticalSection
LeaveCriticalSection
LCMapStringA
LCMapStringW

user32

LoadBitmapW
MsgWaitForMultipleObjects
PeekMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
IsWindow
PostMessageA
LoadCursorA
RegisterClassExW
CreateWindowExW
DestroyWindow
GetWindowLongA
BeginPaint
GetClientRect
EndPaint
SystemParametersInfoA
SetWindowLongA
SetWindowPos
ShowWindow
UpdateWindow
LoadStringW
MessageBoxW
DefWindowProcA

gdi32

CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
GetObjectA
GetStockObject

shell32

ShellExecuteExW

Sections

.text
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 169KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bdc14b0f94dab11522c3bffa46eb986a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

shell32

Sections

.text Size: 50KB - Virtual size: 49KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 4KB - Virtual size: 20KB

.rsrc Size: 169KB - Virtual size: 169KB

.text
Size: 50KB - Virtual size: 49KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 4KB - Virtual size: 20KB

.rsrc
Size: 169KB - Virtual size: 169KB