5c2cd8de2faf026f9392c156b1df75e0b7f372f29f5cdbcc65ee12d3b02ec9c7

Sharing

Copy URL Twitter E-mail

General

Target

5c2cd8de2faf026f9392c156b1df75e0b7f372f29f5cdbcc65ee12d3b02ec9c7
Size

42KB
MD5

42f2d65b1d3f6716bcb5824f8ef665fc
SHA1

15b2f958eea2833341f0471c0a6707f65d6196d2
SHA256

5c2cd8de2faf026f9392c156b1df75e0b7f372f29f5cdbcc65ee12d3b02ec9c7
SHA512

654039ab93e4a9b64ee6578ea076da7b849d3059e2c22d26891ed4580379a21eb79e74bf7022b510c15f133f8d525b667ab0085c19ba24c8b02f3b12296192f5
SSDEEP

768:YcXQnQb01W5l5kt1/sH9W778fSo7jbuJKC/2QL6pXnSFl7rp:tXQkfk3sH968fSK8vLu3Qlp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5c2cd8de2faf026f9392c156b1df75e0b7f372f29f5cdbcc65ee12d3b02ec9c7

Files

5c2cd8de2faf026f9392c156b1df75e0b7f372f29f5cdbcc65ee12d3b02ec9c7
.exe windows:6 windows x86 arch:x86

af0c07f0f865d01a03bb52411d1ced70

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\ACER\Downloads\P15Dropper\Release\P15Dropper.pdb

Imports

kernel32

GetProcessHeap
CreateProcessW
lstrcatW
GetStdHandle
GetLastError
ExitProcess
GetExitCodeProcess
GetModuleFileNameW
HeapAlloc
GetProcAddress
lstrlenW
LoadLibraryW
WriteConsoleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
CloseHandle
WriteFile
ReadFile
GetFileSize
GetModuleHandleA
CreateFileW
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW

user32

wsprintfW
GetDesktopWindow
MessageBoxW

advapi32

RegSetValueExW
RegOpenKeyW
RegCreateKeyW
RegCloseKey
InitiateShutdownW

vcruntime140

_except_handler4_common
memset

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_exit
_register_thread_local_exe_atexit_callback
_crt_atexit
_controlfp_s
terminate
exit
__p___argc
_initterm_e
_c_exit
_cexit
_set_app_type
_seh_filter_exe
__p___argv
_initterm
_configure_narrow_argv
_register_onexit_function
_initialize_narrow_environment
_get_initial_narrow_environment

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 916B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 524B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af0c07f0f865d01a03bb52411d1ced70

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 32KB - Virtual size: 31KB

.data Size: 512B - Virtual size: 916B

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 524B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 512B - Virtual size: 916B

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 524B