8533bb3ca7c39789952be350fd2260960eed5dd1c79dffa00f53bdbbeaf4f2f3N

Sharing

Copy URL

Twitter E-mail

General

Target

8533bb3ca7c39789952be350fd2260960eed5dd1c79dffa00f53bdbbeaf4f2f3N
Size

186KB
MD5

80ab00a9489d26fbdaf146e50bc89020
SHA1

5429ff45211a500ab30b2d1719a57cef2204ffc7
SHA256

8533bb3ca7c39789952be350fd2260960eed5dd1c79dffa00f53bdbbeaf4f2f3
SHA512

80e621d5b0057b9d9b9dcc6bf3f12a7d73d830c2715960f7fdd0793635cc2c22b151a6faa5114b2fc22140805ceb853681115e029e5377bec25e98770314bd57
SSDEEP

1536:tBVPZVWcDjK/9vE+XFOC3++JWjAcoX/eZqSMRPYeZqSMRqeZqSMRcKLEVGCq2iWv:t72ZO+J4AcoXcsjgCLYGCH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8533bb3ca7c39789952be350fd2260960eed5dd1c79dffa00f53bdbbeaf4f2f3N

Files

8533bb3ca7c39789952be350fd2260960eed5dd1c79dffa00f53bdbbeaf4f2f3N
.exe windows:6 windows x86 arch:x86

65c6fe30622907b3e3b9a43611c3cded

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\SSD_WinPro_Code\Pre_Code\OverWriteSys\Release\OverWriteSys.pdb

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetModuleFileNameW
Wow64EnableWow64FsRedirection
GetLastError
WaitForSingleObject
GetExitCodeProcess
CloseHandle
GetModuleHandleW
GetProcAddress
CreateFileW
InterlockedIncrement
InterlockedDecrement
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
InitializeCriticalSectionEx
Sleep
EncodePointer
DecodePointer
HeapFree
GetCPInfo
GetCommandLineW
InitializeCriticalSectionAndSpinCount
HeapAlloc
RaiseException
RtlUnwind
IsProcessorFeaturePresent
IsDebuggerPresent
GetProcessHeap
SetLastError
GetCurrentThreadId
GetStdHandle
GetFileType
InitOnceExecuteOnce
GetStartupInfoW
ExitProcess
GetModuleHandleExW
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
HeapSize
IsValidCodePage
GetACP
GetOEMCP
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
LCMapStringEx
HeapReAlloc
LoadLibraryExW
SetStdHandle
WriteConsoleW
OutputDebugStringW
LoadLibraryW

shell32

ShellExecuteExW

Sections

.text
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 17KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

0c#q�u�
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

65c6fe30622907b3e3b9a43611c3cded

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

shell32

Sections

.text Size: 57KB - Virtual size: 57KB

.rdata Size: 17KB - Virtual size: 17KB

.data Size: 6KB - Virtual size: 14KB

.rsrc Size: 57KB - Virtual size: 56KB

.reloc Size: 30KB - Virtual size: 30KB

0c#q�u� Size: 16KB - Virtual size: 20KB

.text
Size: 57KB - Virtual size: 57KB

.rdata
Size: 17KB - Virtual size: 17KB

.data
Size: 6KB - Virtual size: 14KB

.rsrc
Size: 57KB - Virtual size: 56KB

.reloc
Size: 30KB - Virtual size: 30KB

0c#q�u�
Size: 16KB - Virtual size: 20KB