PC-Killer[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

PC-Killer.exe
Size

17KB
MD5

820689e6486f83c054bd4d889f6a4fa2
SHA1

1489c1b098c96aa5bebd069549e98d5bdee61f84
SHA256

036522842c88d065d1186fbcd39ec868ec1a123b676f71c3c13503cd4e786ae3
SHA512

6ef905eb488fe2d115e9bf95cf73b37a03dae858bf96c156e9747a9935d24746cc31c1b063e02fbbea4b09232cdf4108ca8cbd0e48b11ef1ccae9fb3b83c9be5
SSDEEP

384:xSf5dR4blgA5OctCB46eBwt8Z/ZK63bw:gIjN/Z/ZL3bw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PC-Killer.exe

Files

PC-Killer.exe
.exe windows:6 windows x64 arch:x64

2634ea93d82eb0d6c6de0e1695cd3c7c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\damia_de0etcp\Desktop\PC-Killer\x64\Release\PC-Killer.pdb

Imports

kernel32

FreeConsole
CloseHandle
Sleep
CreateFileW
WriteFile
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
GetCurrentProcess
RtlCaptureContext

advapi32

RegCloseKey
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumValueW

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

ntdll

RtlAdjustPrivilege
NtRaiseHardError

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception_context
__C_specific_handler
__std_exception_copy
__std_exception_destroy
__current_exception
_CxxThrowException
memset
memcpy

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback
_initterm_e
_initialize_onexit_table
_c_exit
_crt_atexit
terminate
_initterm
_cexit
exit
_seh_filter_exe
__p___argv
__p___argc
_register_onexit_function
_invalid_parameter_noinfo_noreturn
system
_initialize_narrow_environment
_configure_narrow_argv
_exit
_set_app_type
_get_initial_narrow_environment

api-ms-win-crt-heap-l1-1-0

malloc
free
_set_new_mode
_callnewh

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2634ea93d82eb0d6c6de0e1695cd3c7c

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

msvcp140

ntdll

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1024B - Virtual size: 576B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 88B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 576B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 88B