893bc6a5cef19e5b7542939e010b9d2de39c8fd1c0d8ff407ab4a77a404fb5d1

Sharing

Copy URL Twitter E-mail

General

Target

893bc6a5cef19e5b7542939e010b9d2de39c8fd1c0d8ff407ab4a77a404fb5d1
Size

165KB
MD5

055e97931ace5e4245ab31a7609e8823
SHA1

29dee04ba6741b2957d61a86f80be89d7480063e
SHA256

893bc6a5cef19e5b7542939e010b9d2de39c8fd1c0d8ff407ab4a77a404fb5d1
SHA512

1424e89dc8f596864fab3ae1f8fa17fe82306ce52aad715527a184292a5bb39b0ca6faec4b436f2a32431277f6ba98bb301dc3ba55234d086ecd46737d63f392
SSDEEP

1536:J2Ojw7ELkjkWhUE1tZ3QZsXUrc3OrkDTqlz3zL3tuy8al6UiWXOvZp:Bu/Z32soc3CkDTon7twalpnXOvZp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
893bc6a5cef19e5b7542939e010b9d2de39c8fd1c0d8ff407ab4a77a404fb5d1

Files

893bc6a5cef19e5b7542939e010b9d2de39c8fd1c0d8ff407ab4a77a404fb5d1
.exe windows:5 windows x64 arch:x64

ab358d874ef5f4e3043ac7442f2ff5ad

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

c:\users\admin\documents\visual studio 2010\Projects\iiii\x64\Release\iiii.pdb

Imports

kernel32

CreateToolhelp32Snapshot
Thread32First
Thread32Next
CloseHandle
CreateEventW
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetStringTypeW
HeapSize
Sleep
EnterCriticalSection
LeaveCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
HeapCreate
GetVersion
GetCommandLineW
GetStartupInfoW
RaiseException
RtlPcToFileHeader
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
HeapAlloc
GetLastError
HeapFree
EncodePointer
DecodePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
WideCharToMultiByte
LCMapStringW
MultiByteToWideChar
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
RtlUnwindEx
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
HeapSetInformation
HeapReAlloc

user32

EndDialog
PostQuitMessage
EndPaint
BeginPaint
DefWindowProcW
DestroyWindow
DialogBoxParamW
UpdateWindow
ShowWindow
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadIconW
DispatchMessageW
TranslateMessage
TranslateAcceleratorW
GetMessageW
LoadAcceleratorsW
LoadStringW

Sections

.text
Size: 87KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab358d874ef5f4e3043ac7442f2ff5ad

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

Sections

.text Size: 87KB - Virtual size: 87KB

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 4KB - Virtual size: 9KB

.pdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 48KB - Virtual size: 47KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 87KB - Virtual size: 87KB

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 4KB - Virtual size: 9KB

.pdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 48KB - Virtual size: 47KB

.reloc
Size: 1KB - Virtual size: 1KB