9661b69b62e2217f1151f7ebc3f2c6427a803d93e0fb4d36bad5316208525c82

Sharing

Copy URL

Twitter E-mail

General

Target

9661b69b62e2217f1151f7ebc3f2c6427a803d93e0fb4d36bad5316208525c82
Size

16KB
MD5

5649d6cf785f628d17b974fabe0ab88f
SHA1

d51ed2e3df0023be358b39b7f8722597d63f69c0
SHA256

9661b69b62e2217f1151f7ebc3f2c6427a803d93e0fb4d36bad5316208525c82
SHA512

3ec575c3e5d44defea00dfd32be0102d5ee6c9f339477054eb52f7dc74b3726a862723b8f5722d21a4376d35f01368ec5c758fea6ce65ad74a810291fcd457fb
SSDEEP

384:sfkdwxfHP8Kkfi8WFljexUUCpOeCmjwJWvK:sfNP8KkfiRqlWOeGWvK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9661b69b62e2217f1151f7ebc3f2c6427a803d93e0fb4d36bad5316208525c82

Files

9661b69b62e2217f1151f7ebc3f2c6427a803d93e0fb4d36bad5316208525c82
.exe windows:5 windows x86 arch:x86

b9e1250b342b673e488270f4abdab4b1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Administrator\source\repos\TestApplication\Release\TestApplication.pdb

Imports

arlib

ord16
ord22

kernel32

CloseHandle
GetLastError
DeleteCriticalSection
LocalFree
IsDebuggerPresent
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
OutputDebugStringW
CreateEventW
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead

oleaut32

VariantClear

msvcp140

?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z

vcruntime140

memmove
__CxxFrameHandler3
_CxxThrowException
memset
__vcrt_InitializeCriticalSectionEx
__std_exception_copy
__std_exception_destroy
_except_handler4_common
memcpy

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
__p__commode
_set_fmode
__stdio_common_vfprintf

api-ms-win-crt-runtime-l1-1-0

_register_thread_local_exe_atexit_callback
_c_exit
_exit
exit
terminate
_controlfp_s
_initterm_e
_initterm
__p___argv
system
__p___argc
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_get_initial_narrow_environment
_invalid_parameter_noinfo_noreturn
_set_app_type

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free
_set_new_mode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 120B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 700B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b9e1250b342b673e488270f4abdab4b1

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

arlib

kernel32

oleaut32

msvcp140

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 512B - Virtual size: 3KB

.gfids Size: 512B - Virtual size: 120B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 700B

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 512B - Virtual size: 3KB

.gfids
Size: 512B - Virtual size: 120B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 700B