1e5bcdd0a149f60a42f573cb3340c446c0cf8d20535a518d0b992c0509df3c67

Sharing

Copy URL Twitter E-mail

General

Target

1e5bcdd0a149f60a42f573cb3340c446c0cf8d20535a518d0b992c0509df3c67
Size

56KB
MD5

8b5730cf3a747cc39e578db3f7730516
SHA1

5f6b3d2295aef06240d9000650dec1e9f6939dec
SHA256

1e5bcdd0a149f60a42f573cb3340c446c0cf8d20535a518d0b992c0509df3c67
SHA512

c37835363c85be9a0051408365e065ab24761e21a57bb487ffc491a2fed3588a61e97b737bdb09abb0979fbbaa82d9a431a9e1d1f8f77e1e5f5ab42a5d0c7864
SSDEEP

768:pGh5loUbHwi+SZFLK13g8YpLRg4diJyrq/ayV6o6gjN+vU/tB2B2B2BvB/D+se2Z:Q/mUbHw07K13g8YplsJm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1e5bcdd0a149f60a42f573cb3340c446c0cf8d20535a518d0b992c0509df3c67

Files

1e5bcdd0a149f60a42f573cb3340c446c0cf8d20535a518d0b992c0509df3c67
.exe windows:6 windows x86 arch:x86

4a3d2642ebcdb668cd313f9ea58a6d80

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Bobitareco\Desktop\Trabalho S02 2015\TrabalhoPratico - V5.041\TrabalhoPratico\Debug\Cliente - Gráfico.pdb

Imports

kernel32

FreeLibrary
VirtualQuery
GetProcessHeap
HeapFree
HeapAlloc
DecodePointer
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
GetModuleFileNameW
IsProcessorFeaturePresent
WideCharToMultiByte
MultiByteToWideChar
LoadLibraryExW
GetProcAddress
GetLastError
RaiseException
IsDebuggerPresent
EncodePointer
GetModuleHandleW
Sleep
WaitNamedPipeW
CloseHandle
ReadFile
QueryPerformanceCounter
CreateFileW
CreateThread
WriteFile

user32

LoadIconW
LoadCursorW
LoadBitmapW
MessageBoxW
InvalidateRect
EndPaint
BeginPaint
ReleaseDC
GetDC
UpdateWindow
GetSystemMetrics
EndDialog
DialogBoxParamW
ShowWindow
CreateWindowExW
RegisterClassExW
PostQuitMessage
DefWindowProcW
DispatchMessageW
TranslateMessage
GetMessageW

gdi32

SelectObject
DeleteDC
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
GetStockObject

msvcr120d

_lock
exit
system
__iob_func
wprintf
_setmode
_fileno
_CRT_RTC_INITW
_XcptFilter
__crtGetShowWindowMode
_amsg_exit
__getmainargs
__set_app_type
_CrtDbgReportW
_wsplitpath_s
_exit
_cexit
_ismbblead
_configthreadlocale
__setusermatherr
_initterm_e
_initterm
_acmdln
_fmode
_commode
_crt_debugger_hook
__crtUnhandledException
__crtTerminateProcess
?terminate@@YAXXZ
__crtSetUnhandledExceptionFilter
_CrtSetCheckCount
_unlock
_calloc_dbg
__dllonexit
_onexit
_invoke_watson
_controlfp_s
_except_handler4_common
wcscpy_s
_wmakepath_s
_swprintf
_wperror

Sections

.textbss
Size: - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4a3d2642ebcdb668cd313f9ea58a6d80

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msvcr120d

Sections

.textbss Size: - Virtual size: 64KB

.text Size: 20KB - Virtual size: 20KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 1KB - Virtual size: 11KB

.idata Size: 3KB - Virtual size: 3KB

.rsrc Size: 18KB - Virtual size: 17KB

.reloc Size: 2KB - Virtual size: 1KB

.textbss
Size: - Virtual size: 64KB

.text
Size: 20KB - Virtual size: 20KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 1KB - Virtual size: 11KB

.idata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 18KB - Virtual size: 17KB

.reloc
Size: 2KB - Virtual size: 1KB