674f245f3c8f34622a7dacde66ea4e23bc741ffc4965a809579955406e470dae

Sharing

Copy URL

Twitter E-mail

General

Target

674f245f3c8f34622a7dacde66ea4e23bc741ffc4965a809579955406e470dae
Size

195KB
MD5

f8c0fdb692b1c243556edfa2b91bcb9b
SHA1

e3e43b795a9635fd97be68545226a33c55f98a75
SHA256

674f245f3c8f34622a7dacde66ea4e23bc741ffc4965a809579955406e470dae
SHA512

e5049ea1bfa4c36da9254b1c20301ed679a6929f8c013fec535ab406ff5b93069d7991d7d7f73850b6c827096f35a5de5bb528215fe9c303f99c548452a3b10d
SSDEEP

6144:hcF/p/uwONct43j92UfFD5ArD9dYN8DcO3:W9pGHNu4B2UDyfK4r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
674f245f3c8f34622a7dacde66ea4e23bc741ffc4965a809579955406e470dae

Files

674f245f3c8f34622a7dacde66ea4e23bc741ffc4965a809579955406e470dae
.exe windows:6 windows x86 arch:x86

cd26897675497813d02fe00d515e1404

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Ring.chen\source\Semi\01_CaliTest\XYMulCaliSuit\bin\Setting.pdb

Imports

mfc140u

ord13756
ord2761
ord12220
ord9256
ord9209
ord1002
ord11021
ord3697
ord7626
ord1511
ord14234
ord3833
ord8817
ord11000
ord12216
ord9042
ord8977
ord11235
ord11333
ord10570
ord11169
ord11932
ord11935
ord11933
ord11934
ord6309
ord286
ord3872
ord2993
ord8744
ord4222
ord3147
ord9128
ord6129
ord6497
ord1070
ord5422
ord3696
ord5110
ord3805
ord4881
ord4882
ord4886
ord5117
ord13028
ord7379
ord922
ord1411
ord6559
ord1928
ord7627
ord2594
ord2383
ord467
ord1114
ord8368
ord6380
ord5627
ord3605
ord10498
ord5037
ord6248
ord13224
ord13225
ord9253
ord9225
ord3054
ord12262
ord3238
ord4108
ord8719
ord10379
ord7653
ord995
ord1472
ord7997
ord2205
ord952
ord13442
ord7313
ord13911
ord6860
ord10250
ord5763
ord12928
ord12219
ord12251
ord10433
ord8217
ord4589
ord12247
ord12239
ord5918
ord3852
ord6349
ord14668
ord6350
ord14669
ord6348
ord14667
ord8000
ord12531
ord14466
ord11983
ord11982
ord2034
ord6220
ord12947
ord4090
ord4152
ord9398
ord14595
ord7922
ord14589
ord12542
ord3838
ord2486
ord5357
ord12865
ord8386
ord8470
ord2246
ord2409
ord12258
ord1722
ord1744
ord1770
ord1756
ord1777
ord4936
ord5003
ord4948
ord4966
ord4960
ord4954
ord5013
ord4997
ord4942
ord5019
ord4974
ord4912
ord4927
ord4988
ord4502
ord9693
ord4494
ord3055
ord14590
ord7923
ord14596
ord6877
ord11717
ord13703
ord5935
ord2682
ord12124
ord3941
ord3372
ord3371
ord3265
ord12168
ord5249
ord5549
ord5760
ord9350
ord5525
ord5790
ord5252
ord5411
ord5228
ord7722
ord7723
ord7712
ord5409
ord8219
ord10255
ord9210
ord2990
ord285
ord5921
ord3009
ord14507
ord10472
ord3816
ord7941
ord6566
ord3882
ord4815
ord2304
ord1523
ord1525
ord1045
ord296
ord1513
ord1408
ord11936
ord14588
ord8965
ord914
ord7378
ord8360
ord12884
ord1693
ord12131
ord11396
ord4092
ord3404
ord3403
ord3164
ord6218
ord13752
ord6978
ord3305
ord3302
ord8210
ord2760
ord14785
ord10285
ord10287
ord10286
ord10284
ord10288
ord5652
ord11725
ord11726
ord11002
ord9139
ord8324
ord3266
ord12089
ord12541
ord13878
ord12217

kernel32

InitializeCriticalSectionEx
GetLastError
OutputDebugStringW
DeleteCriticalSection
GetPrivateProfileIntW
InitializeCriticalSectionAndSpinCount
CloseHandle
CreateEventW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
WritePrivateProfileStringW
GetPrivateProfileStringW
GetModuleFileNameW
GetModuleHandleW
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
GetProcAddress

user32

GetClientRect
PostMessageW
EnableWindow
SendMessageW
GetDC
ReleaseDC
GetWindowRect
GetWindow
GetClassNameW

gdi32

GetTextMetricsW

comctl32

InitCommonControlsEx

vcruntime140

__CxxFrameHandler3
__std_terminate
memset
__current_exception
__current_exception_context
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_controlfp_s
_crt_atexit
_register_onexit_function
_seh_filter_exe
terminate
_set_app_type
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
_initialize_onexit_table
_exit
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__p__commode
_set_fmode

api-ms-win-crt-convert-l1-1-0

_itow
_wtoi

api-ms-win-crt-heap-l1-1-0

_set_new_mode
free

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 22KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 73KB - Virtual size: 76KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

cd26897675497813d02fe00d515e1404

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mfc140u

kernel32

user32

gdi32

comctl32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 22KB - Virtual size: 22KB

.rdata Size: 17KB - Virtual size: 16KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 80KB - Virtual size: 80KB

.reloc Size: 73KB - Virtual size: 76KB

.text
Size: 22KB - Virtual size: 22KB

.rdata
Size: 17KB - Virtual size: 16KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 80KB - Virtual size: 80KB

.reloc
Size: 73KB - Virtual size: 76KB