PC-Killer[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

PC-Killer.exe
Size

17KB
MD5

040de56e74e3871da49c0fcf310986fb
SHA1

906d5f642d65d8b5f470cc247d0f0a4a71573372
SHA256

6f97de1dede7714778f1958f56937f257579fcad447ddcc868aeb2c85fcd43b0
SHA512

1ee6deee4283f3e67128df54d571ddf0aee84ccfbbd02612b6847797517fd7669b179f2d1085c783830e550b8842f1151ca343517f69ecc80460e44385a5ca7a
SSDEEP

384:tifJXhIkFBa5Thiaa4ITGPfEwtjZK63b:kHxi3RZL3b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PC-Killer.exe

Files

PC-Killer.exe
.exe windows:6 windows x64 arch:x64

2634ea93d82eb0d6c6de0e1695cd3c7c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\damia_de0etcp\Desktop\PC-Killer\x64\Release\PC-Killer.pdb

Imports

kernel32

FreeConsole
CloseHandle
Sleep
CreateFileW
WriteFile
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
GetCurrentProcess
RtlCaptureContext

advapi32

RegCloseKey
RegEnumKeyExW
RegSetValueExW
RegOpenKeyExW
RegEnumValueW

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

ntdll

RtlAdjustPrivilege
NtRaiseHardError

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception_context
__C_specific_handler
__std_exception_copy
__std_exception_destroy
__current_exception
_CxxThrowException
memset
memcpy

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback
_initterm_e
_initialize_onexit_table
_c_exit
_crt_atexit
terminate
_initterm
_cexit
exit
_seh_filter_exe
__p___argv
__p___argc
_register_onexit_function
_invalid_parameter_noinfo_noreturn
system
_initialize_narrow_environment
_configure_narrow_argv
_exit
_set_app_type
_get_initial_narrow_environment

api-ms-win-crt-heap-l1-1-0

malloc
free
_set_new_mode
_callnewh

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1024B - Virtual size: 576B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2634ea93d82eb0d6c6de0e1695cd3c7c

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

advapi32

msvcp140

ntdll

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 7KB - Virtual size: 6KB

.rdata Size: 7KB - Virtual size: 6KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 1024B - Virtual size: 576B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 88B

.text
Size: 7KB - Virtual size: 6KB

.rdata
Size: 7KB - Virtual size: 6KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 1024B - Virtual size: 576B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 88B