962f3cfa2992d8870cfac49e49496004be4de29b5cabc2d4187b3a690755df00

Sharing

Copy URL Twitter E-mail

General

Target

962f3cfa2992d8870cfac49e49496004be4de29b5cabc2d4187b3a690755df00
Size

367KB
MD5

32e4d8a46cca59835d23e19dff3425ce
SHA1

78f2efb3982ecb8707d795045d781340996dcf3e
SHA256

962f3cfa2992d8870cfac49e49496004be4de29b5cabc2d4187b3a690755df00
SHA512

c6e3c0f56b82fb4209d284ee130cd6ffee0eebb131e4ec41188ad9a87a082eedbbcc8b5e5e8093ce9633b7a046d9de3a7378bbb7f563f21b87c296d7a022b98d
SSDEEP

6144:NpBP/LJv8LJYc5S0649DXkdhMt1vHDLqx:NPLJv86Qt6KXk3M/bLK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
962f3cfa2992d8870cfac49e49496004be4de29b5cabc2d4187b3a690755df00

Files

962f3cfa2992d8870cfac49e49496004be4de29b5cabc2d4187b3a690755df00
.exe windows:5 windows x86 arch:x86

129ee856bce6e25105abea852acada54

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\vmagent_new\bin\joblist\273958\out\Release\360ZipPdfView.pdb

Imports

gdiplus

GdiplusShutdown
GdiplusStartup

kernel32

LoadLibraryExW
GetModuleHandleW
InitializeCriticalSection
LoadLibraryW
LeaveCriticalSection
GetModuleFileNameW
CreateFileW
GetLastError
GetProcAddress
EnterCriticalSection
DeviceIoControl
DeleteCriticalSection
CloseHandle
GetCurrentProcessId
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
FreeLibrary
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
GetCurrentProcess
TerminateProcess
LocalFree
GetCommandLineW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
InitializeCriticalSectionAndSpinCount
LoadLibraryA
VirtualAlloc
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
WriteConsoleA
HeapDestroy
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
GetProcessHeap
RaiseException
CreateFileA
SystemTimeToFileTime
GetSystemTimeAsFileTime
LocalFileTimeToFileTime
SetFilePointerEx
WriteFile
ReadFile
GetFileSizeEx
SetLastError
CreateMutexW
TlsGetValue
WaitForSingleObject
OutputDebugStringW
TlsSetValue
HeapUnlock
OpenThread
HeapLock
HeapWalk
GetCurrentThreadId
ReleaseMutex
TlsAlloc
TlsFree
GetStartupInfoW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedIncrement
InterlockedDecrement
Sleep
ExitProcess
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA

user32

LoadStringW
LoadAcceleratorsW
GetMessageW
TranslateMessage
BeginPaint
DispatchMessageW
PostMessageW
EndDialog
PostQuitMessage
EndPaint
LoadIconW
DefWindowProcW
DestroyWindow
DialogBoxParamW
UpdateWindow
ShowWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
TranslateAcceleratorW

advapi32

RegQueryValueExA
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RegEnumKeyExW

shell32

CommandLineToArgvW

ole32

CoUninitialize
CoInitialize

shlwapi

PathFileExistsW
PathFindExtensionW
PathAppendW
PathRemoveFileSpecW

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 6KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 76KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

129ee856bce6e25105abea852acada54

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

gdiplus

kernel32

user32

advapi32

shell32

ole32

shlwapi

Sections

.text Size: 88KB - Virtual size: 87KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 6KB - Virtual size: 17KB

.rsrc Size: 164KB - Virtual size: 164KB

.reloc Size: 76KB - Virtual size: 76KB

.text
Size: 88KB - Virtual size: 87KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 6KB - Virtual size: 17KB

.rsrc
Size: 164KB - Virtual size: 164KB

.reloc
Size: 76KB - Virtual size: 76KB