d1dfad76d339b4e7de15ac78d54cbe6b85eb97455cde4afdbb08dd7d49b20b3e

Sharing

Copy URL Twitter E-mail

General

Target

d1dfad76d339b4e7de15ac78d54cbe6b85eb97455cde4afdbb08dd7d49b20b3e
Size

81KB
MD5

20f00ac6c2de0103fa6ff0fc59bf6950
SHA1

a9d9af32a01ff32fee7defed49e4e5d3c55e348a
SHA256

d1dfad76d339b4e7de15ac78d54cbe6b85eb97455cde4afdbb08dd7d49b20b3e
SHA512

6642295453dfc0af83184f93a1c8d943eccfc923be3ec453ccb4e732b6f7293924bfe4a9ca4e4ccafcbd5506427122d9ea8b0410c4955c9dc9abb2e28c962d35
SSDEEP

768:aPZS+dv4sDmROyIsYUP6RuGg7gsuIuUF7NeY/hKxtcXUnd5AO1yqY:aP5CROyIRUa2ZuY7Ne0h0tcXUndGOZY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d1dfad76d339b4e7de15ac78d54cbe6b85eb97455cde4afdbb08dd7d49b20b3e

Files

d1dfad76d339b4e7de15ac78d54cbe6b85eb97455cde4afdbb08dd7d49b20b3e
.exe windows:5 windows x86 arch:x86

86e9492dc4449d566e708171d54deaee

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\charles\Desktop\Code\TestContent\Debug\TestContent.pdb

Imports

msvcr100d

_unlock
?what@exception@std@@UBEPBDXZ
_invoke_watson
_onexit
_controlfp_s
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_initterm_e
_initterm
_CrtSetCheckCount
__winitenv
exit
_cexit
_XcptFilter
??1exception@std@@UAE@XZ
_exit
__wgetmainargs
_amsg_exit
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
?terminate@@YAXXZ
_CRT_RTC_INITW
memmove
_lock
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
_CxxThrowException
_CrtDbgReportW
_invalid_parameter
??_U@YAPAXI@Z
_findfirst64i32
_findnext64i32
strcmp
_findclose
printf
malloc
fwrite
_stat64i32
feof
fopen
ftell
rewind
__CxxFrameHandler3
strlen
??2@YAPAXI@Z
memcpy
fread
fseek
fclose
??3@YAXPAX@Z
memset
__dllonexit
sprintf

msvcp100d

?width@ios_base@std@@QAE_J_J@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?good@ios_base@std@@QBE_NXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?_Xlength_error@std@@YAXPBD@Z
??0_Container_base12@std@@QAE@XZ
?_Getpfirst@_Container_base12@std@@QBEPAPAU_Iterator_base12@2@XZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
??1_Container_base12@std@@QAE@XZ
?_Debug_message@std@@YAXPB_W0I@Z
?_Orphan_all@_Container_base12@std@@QAEXXZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DecodePointer
FreeLibrary
VirtualQuery
GetModuleFileNameW
GetProcessHeap
HeapAlloc
HeapFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
HeapSetInformation
InterlockedCompareExchange
Sleep
InterlockedExchange
EncodePointer
LoadLibraryW
GetProcAddress
lstrlenA
RaiseException
MultiByteToWideChar
IsDebuggerPresent
WideCharToMultiByte
GetSystemTimeAsFileTime

Sections

.textbss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 59KB - Virtual size: 59KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

86e9492dc4449d566e708171d54deaee

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcr100d

msvcp100d

kernel32

Sections

.textbss Size: - Virtual size: 64KB

.text Size: 59KB - Virtual size: 59KB

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 1KB

.idata Size: 5KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 2KB

.textbss
Size: - Virtual size: 64KB

.text
Size: 59KB - Virtual size: 59KB

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 2KB