c4200ecb586344ea8098d6c097313df7625b7c5cae7d1ee96678a4f99a4a8420

Sharing

Copy URL Twitter E-mail

General

Target

c4200ecb586344ea8098d6c097313df7625b7c5cae7d1ee96678a4f99a4a8420
Size

23KB
MD5

2c432eba80cfdddbe5135c25dd777ff8
SHA1

aeb1b5e750bbbfcd804af727d1a59344dc21332e
SHA256

c4200ecb586344ea8098d6c097313df7625b7c5cae7d1ee96678a4f99a4a8420
SHA512

b00e91e78e6e97d0b2117257f0273f91a5a05c9e2b67a3a49d4e388e0d18cd0eb9db659bf8ebe8b5a2ee8b5d073400afd61794ff7e6e0f992e2021e9fe52543d
SSDEEP

384:3HBZjhXFBo+YJhMJyjLcCdBurrKIylj4Z/gxUR5d1fRaHwSKXZ/yb/rsHZCvz+k9:3Hb7BoviJYJurrKkou5d1fRaqab/rcZP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c4200ecb586344ea8098d6c097313df7625b7c5cae7d1ee96678a4f99a4a8420

Files

c4200ecb586344ea8098d6c097313df7625b7c5cae7d1ee96678a4f99a4a8420
.exe windows:6 windows x86 arch:x86

988ddab0e31e5133d17e7ddaf5dbeca9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLocalTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead

vcruntime140

_except_handler4_common
memset
__current_exception_context
__current_exception
strrchr

api-ms-win-crt-stdio-l1-1-0

fread_s
ftell
freopen_s
__acrt_iob_func
__p__commode
tmpfile_s
fopen_s
fwrite
rewind
fclose
_set_fmode
__stdio_common_vfprintf_s
__stdio_common_vfprintf
fseek

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
_exit
_seh_filter_exe
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
exit
system
_set_app_type
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_controlfp_s
terminate

api-ms-win-crt-string-l1-1-0

strcpy_s
strcat_s
strncpy_s

api-ms-win-crt-utility-l1-1-0

rand

api-ms-win-crt-heap-l1-1-0

malloc
_set_new_mode
free

api-ms-win-crt-math-l1-1-0

_CIatan2
_libm_sse2_asin_precise
__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 912B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 956B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

988ddab0e31e5133d17e7ddaf5dbeca9

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 13KB - Virtual size: 12KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 912B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 956B

.text
Size: 13KB - Virtual size: 12KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 912B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 956B