f4f85163f59802508e06fc2cfb11d601ea1455d77bfd4ff9da69ee79dee9e9e1

Sharing

Copy URL Twitter E-mail

General

Target

f4f85163f59802508e06fc2cfb11d601ea1455d77bfd4ff9da69ee79dee9e9e1
Size

40KB
MD5

955e5803e25fd99a99831fc4fc93bfd0
SHA1

7261edfb94f9065651db294bbf9d4a02508730f7
SHA256

f4f85163f59802508e06fc2cfb11d601ea1455d77bfd4ff9da69ee79dee9e9e1
SHA512

2f8f50397768dcd9f0df9bd02a3663ba5111c0906eaae10cc881907ad9648a3fdbb017319ee12626d5e686d2a54278d33d294929a9cdd30ff8380a017a319378
SSDEEP

768:FvGq/KGs7VchSVvQ061DYNi4JqWvyDzZURuW6FpTwLivzZyXOJGlDGl/7:Fb/XWVchSVv+YNi4JqWaPoyFdwLi7ZyS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4f85163f59802508e06fc2cfb11d601ea1455d77bfd4ff9da69ee79dee9e9e1

Files

f4f85163f59802508e06fc2cfb11d601ea1455d77bfd4ff9da69ee79dee9e9e1
.exe windows:6 windows x86 arch:x86

ddd22e056b06f181897dbaa9cd867b8f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\assemblage\Builds\3270890879428119767jdvzkxiojz\PerfectShuffle_V2-master\assemblage_outdir_bin\PerfectShuffle_v2.pdb

Imports

kernel32

QueryPerformanceCounter
QueryPerformanceFrequency
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentThreadId
GetModuleHandleW

msvcp140d

?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??1_Lockit@std@@QAE@XZ
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
_Query_perf_counter
_Query_perf_frequency
?good@ios_base@std@@QBE_NXZ
?flags@ios_base@std@@QBEHXZ
?width@ios_base@std@@QBE_JXZ
?width@ios_base@std@@QAE_J_J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
??0_Lockit@std@@QAE@H@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z

vcruntime140d

__std_exception_copy
__std_exception_destroy
_CxxThrowException
__CxxFrameHandler3
memcmp
__current_exception_context
memcpy
memmove
memset
_except_handler4_common
__current_exception

ucrtbased

_initterm
_initterm_e
exit
_exit
_set_fmode
__p___argc
__p___argv
_cexit
_c_exit
_configure_narrow_argv
_configthreadlocale
_set_new_mode
__p__commode
_free_dbg
_initialize_onexit_table
_register_onexit_function
_crt_atexit
_controlfp_s
terminate
__setusermatherr
_set_app_type
_seh_filter_exe
_callnewh
_CrtDbgReport
_invalid_parameter
_get_initial_narrow_environment
_register_thread_local_exe_atexit_callback
_initialize_narrow_environment
malloc

Sections

.text
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.msvcjmc
Size: 512B - Virtual size: 413B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ddd22e056b06f181897dbaa9cd867b8f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcp140d

vcruntime140d

ucrtbased

Sections

.text Size: 26KB - Virtual size: 26KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 1KB

.msvcjmc Size: 512B - Virtual size: 413B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 26KB - Virtual size: 26KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 1KB

.msvcjmc
Size: 512B - Virtual size: 413B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 2KB - Virtual size: 1KB