17a9b0400bf3e0be8d5bc2ce7e65c9eccba5f73166dcf17bacbbb7cc7b8c331e

Sharing

Copy URL Twitter E-mail

General

Target

17a9b0400bf3e0be8d5bc2ce7e65c9eccba5f73166dcf17bacbbb7cc7b8c331e
Size

118KB
MD5

4b6c8385920806fd77b6e55010fd6e24
SHA1

5b3d2c3dbfee24161e548a462999a81604790a94
SHA256

17a9b0400bf3e0be8d5bc2ce7e65c9eccba5f73166dcf17bacbbb7cc7b8c331e
SHA512

512aff0719d380deff2aff373c547dc0bf63d42869f825b13612f2b66a4cea187919f70ad660df32bb6e24531e0335f2c7a5cec68506a6443f70e6dceebc0b29
SSDEEP

1536:YmOHSfSFOM5ZJw8RKm0Ozfceab6a4B3db/AelgWciuwaKg2e8z1W:JcSdUZJ3RKiVa41KogWciuGg2JW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
17a9b0400bf3e0be8d5bc2ce7e65c9eccba5f73166dcf17bacbbb7cc7b8c331e

Files

17a9b0400bf3e0be8d5bc2ce7e65c9eccba5f73166dcf17bacbbb7cc7b8c331e
.exe windows:6 windows x86 arch:x86

74a3c779abc32fd7c4ffc2bef03948c8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\ShovivSoftPvtLtd\BackupAndRestore\SRV_VCC\IMAP Backup And Restore\Restore\ShovivImapRestoreJobCheck\Release\ShovivScheduler.pdb

Imports

mfc140u

ord6348
ord14667
ord8000
ord12531
ord14466
ord11983
ord11982
ord2034
ord7941
ord12947
ord4090
ord4152
ord9398
ord14595
ord7922
ord14589
ord12542
ord12541
ord2486
ord5357
ord8324
ord12865
ord8386
ord8470
ord458
ord1111
ord7493
ord2215
ord2246
ord10472
ord14137
ord4885
ord3833
ord890
ord1391
ord11038
ord6531
ord9210
ord10255
ord5790
ord12168
ord3265
ord3371
ord3372
ord3941
ord12124
ord2682
ord5935
ord13703
ord11717
ord6877
ord14596
ord7923
ord14590
ord3055
ord3852
ord9693
ord4502
ord4988
ord4927
ord4912
ord4974
ord5019
ord4942
ord4997
ord5013
ord4954
ord4960
ord4966
ord4948
ord5003
ord4936
ord1777
ord1756
ord1770
ord1744
ord1722
ord12258
ord12262
ord13878
ord3266
ord9256
ord11002
ord6978
ord12172
ord8965
ord14588
ord11936
ord3838
ord12089
ord9139
ord11726
ord11725
ord5652
ord10288
ord10284
ord10286
ord10287
ord10285
ord14785
ord2760
ord8210
ord3302
ord3305
ord14669
ord6218
ord3164
ord3403
ord3404
ord11396
ord11015
ord9040
ord12131
ord5918
ord12239
ord12247
ord4589
ord8217
ord10433
ord12251
ord12219
ord12928
ord5249
ord5549
ord5760
ord9350
ord5525
ord5763
ord5252
ord5411
ord5228
ord7722
ord7723
ord7712
ord5409
ord8219
ord10250
ord9209
ord6860
ord4092
ord13911
ord2205
ord7997
ord1472
ord995
ord7653
ord10379
ord14415
ord12584
ord8360
ord8756
ord12884
ord1692
ord2886
ord5583
ord8177
ord4735
ord4715
ord1144
ord503
ord14416
ord8712
ord14417
ord14411
ord1623
ord1616
ord2010
ord13251
ord975
ord12612
ord1451
ord5074
ord4886
ord6751
ord14657
ord12405
ord3236
ord2383
ord4856
ord4664
ord12763
ord2990
ord285
ord5921
ord3009
ord500
ord1142
ord494
ord6555
ord6350
ord14668
ord13752
ord5512
ord12784
ord11962
ord346
ord1060
ord2413
ord14604
ord4797
ord2342
ord291
ord12348
ord287
ord2378
ord4616
ord2874
ord2885
ord1523
ord5514
ord3849
ord12586
ord1663
ord280
ord8464
ord286
ord1511
ord1525
ord1045
ord2385
ord2389
ord296
ord1513
ord6349
ord4494
ord2409

kernel32

IsProcessorFeaturePresent
CopyFileW
TerminateProcess
CloseHandle
Sleep
FindFirstFileW
FindClose
GetLastError
GetModuleFileNameW
CreateDirectoryW
CreateMutexW
InitializeCriticalSectionEx
GetCurrentProcess
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
GetProcAddress
CreateEventW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GetStartupInfoW
OutputDebugStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent

user32

GetClientRect
GetSystemMetrics
IsIconic
AppendMenuW
DrawIcon
LoadIconW
SendMessageW
FindWindowW
SetTimer
GetSystemMenu
EnableWindow
KillTimer

shell32

ShellExecuteW

comctl32

InitCommonControlsEx

ole32

CoCreateGuid
StringFromGUID2

oleaut32

SystemTimeToVariantTime
VariantTimeToSystemTime

vcruntime140

__CxxFrameHandler3
__std_terminate
memset
__current_exception
__current_exception_context
_except_handler4_common

api-ms-win-crt-filesystem-l1-1-0

_waccess

api-ms-win-crt-heap-l1-1-0

malloc
free
_set_new_mode

api-ms-win-crt-time-l1-1-0

_time64
_localtime64_s

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-runtime-l1-1-0

_initterm
_initterm_e
exit
_exit
_get_wide_winmain_command_line
_initialize_wide_environment
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_set_app_type
_configure_wide_argv
_initialize_onexit_table
_register_onexit_function
_crt_atexit
terminate
_controlfp_s
_seh_filter_exe

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74a3c779abc32fd7c4ffc2bef03948c8

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mfc140u

kernel32

user32

shell32

comctl32

ole32

oleaut32

vcruntime140

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 58KB - Virtual size: 58KB

.rdata Size: 15KB - Virtual size: 15KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 34KB - Virtual size: 34KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 58KB - Virtual size: 58KB

.rdata
Size: 15KB - Virtual size: 15KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 34KB - Virtual size: 34KB

.reloc
Size: 7KB - Virtual size: 7KB