ac388c4ddb352008fa85710f004bf53956af09e85e15a7a424afdcff91cb34f4N

Sharing

Copy URL Twitter E-mail

General

Target

ac388c4ddb352008fa85710f004bf53956af09e85e15a7a424afdcff91cb34f4N
Size

121KB
MD5

eede79199c3151026679c050472c58a0
SHA1

c0b9e39227539c06b0ba7a076b63f36668c1d9ca
SHA256

ac388c4ddb352008fa85710f004bf53956af09e85e15a7a424afdcff91cb34f4
SHA512

df7c88b7298ea03c9694fc0ea9c10815d83fdaa289160f683ee464334d5584a72281478a161d5802a5c13f56bbbd69c093e7862f1d3a727712d80a0c21312aba
SSDEEP

3072:mDvmG3lrllnCrhYuaTxuZFXddqXy5t62WJC:m53B7nIhUduZF2Xy5t6JC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ac388c4ddb352008fa85710f004bf53956af09e85e15a7a424afdcff91cb34f4N

Files

ac388c4ddb352008fa85710f004bf53956af09e85e15a7a424afdcff91cb34f4N
.exe windows:10 windows x86 arch:x86

23a25990aff49227db97b82188e2a64d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

private_browsing.pdb

Imports

shlwapi

PathAppendW
PathRemoveFileSpecW

user32

MessageBoxW

msvcp140

?_Raise_handler@std@@3P6AXABVexception@stdext@@@ZA
?_Xlength_error@std@@YAXPBD@Z

kernel32

CloseHandle
CreateProcessW
FormatMessageW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleFileNameW
GetModuleHandleW
GetStartupInfoW
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter

vcruntime140

_CxxThrowException
__current_exception
__current_exception_context
__std_exception_copy
__std_exception_destroy
_except_handler4_common
memcpy
memmove
memset

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-runtime-l1-1-0

_c_exit
_cexit
_configure_wide_argv
_controlfp_s
_crt_atexit
_exit
_get_wide_winmain_command_line
_initialize_onexit_table
_initialize_wide_environment
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_invoke_watson
_register_onexit_function
_register_thread_local_exe_atexit_callback
_seh_filter_exe
_set_app_type
exit
terminate

api-ms-win-crt-heap-l1-1-0

_callnewh
_set_new_mode
free
malloc

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-string-l1-1-0

wcslen

Sections

.text
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.grdata
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

23a25990aff49227db97b82188e2a64d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

shlwapi

user32

msvcp140

kernel32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-string-l1-1-0

Sections

.text Size: 6KB - Virtual size: 6KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 37KB - Virtual size: 36KB

.reloc Size: 1024B - Virtual size: 600B

.grdata Size: 60KB - Virtual size: 60KB

.text
Size: 6KB - Virtual size: 6KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 37KB - Virtual size: 36KB

.reloc
Size: 1024B - Virtual size: 600B

.grdata
Size: 60KB - Virtual size: 60KB