FunCheker[.]vmp[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

FunCheker.vmp.exe
Size

12.3MB
MD5

058a1e5d46c912cd7ba24dc25c9b2ee2
SHA1

e4787367baff8a7f59f3fd857ef28de5d1ec2c27
SHA256

5988785b8dfb295c04928f58133baa84a4d10d6e97a6429afabdfd41bfbce750
SHA512

b6c9b937f265a52c7678d9fd535f8a74aedf80002e70d57f5298b51579148fd419b965757b3998b77c1fadf9415b8496bc53c334e4c63bf85c52b66ce0fa58b0
SSDEEP

196608:rpxr3YO0YrOA9OMEtBt52jvWVm3FoXDilzlwK8/RgDbtuddGgh5UpU3tIAZzvXjS:rpxTNETj2jvW6oXGh6ygh5P3H1vTH+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
FunCheker.vmp.exe

Files

FunCheker.vmp.exe
.exe windows:5 windows x86 arch:x86

7253f706624514ba6e9e7b5090254492

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcpy
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress

comctl32

InitCommonControls

Sections

Size: - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.)\}
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: - Virtual size: 3.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

ogurcqcx
Size: - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

plvofuuj
Size: - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Je7
Size: - Virtual size: 5.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.u&,
Size: 1024B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.^Qd
Size: 12.3MB - Virtual size: 12.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7253f706624514ba6e9e7b5090254492

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

comctl32

Sections

Size: - Virtual size: 64KB

.)\} Size: - Virtual size: 1KB

.idata Size: - Virtual size: 8KB

Size: - Virtual size: 3.3MB

ogurcqcx Size: - Virtual size: 2.1MB

plvofuuj Size: - Virtual size: 8KB

.Je7 Size: - Virtual size: 5.5MB

.u&, Size: 1024B - Virtual size: 856B

.^Qd Size: 12.3MB - Virtual size: 12.3MB

.reloc Size: 2KB - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.)\}
Size: - Virtual size: 1KB

.idata
Size: - Virtual size: 8KB

ogurcqcx
Size: - Virtual size: 2.1MB

plvofuuj
Size: - Virtual size: 8KB

.Je7
Size: - Virtual size: 5.5MB

.u&,
Size: 1024B - Virtual size: 856B

.^Qd
Size: 12.3MB - Virtual size: 12.3MB

.reloc
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB