b9a1fd5d0acbd84ab432169579452696a420eb213c42106ac7086a23a0cf3609[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

b9a1fd5d0acbd84ab432169579452696a420eb213c42106ac7086a23a0cf3609.exe
Size

34.4MB
MD5

d367b73118fa966b5f5432bbbf35bae5
SHA1

f9fb38b39ec20fa571b36c17ff479c00c1d29f7c
SHA256

b9a1fd5d0acbd84ab432169579452696a420eb213c42106ac7086a23a0cf3609
SHA512

0aed18f8b1682df494277bd7834b01ad9a024870fe1e50c454a3ea8c6b7440a8f4fdea224cda215a2a20ef903909ff0630332b689207f3baf3521746b9c7910b
SSDEEP

786432:FAGgXcwUbCxqWIQUDaE2g71DiPiiAq98cKLC:xwUbCTdU+E22+PiN+8cK+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b9a1fd5d0acbd84ab432169579452696a420eb213c42106ac7086a23a0cf3609.exe

Files

b9a1fd5d0acbd84ab432169579452696a420eb213c42106ac7086a23a0cf3609.exe
.exe windows x64

22a71214a0c9214caa6b4dfa0b409cb5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

GetSystemMetrics

kernel32

FindResourceW
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

advapi32

CryptCreateHash

shell32

ShellExecuteExW

ole32

CoInitializeEx

crypt32

CryptDecodeObjectEx

ws2_32

WSAWaitForMultipleEvents

bcrypt

BCryptGenRandom

oleaut32

SysStringLen

Sections

.text
Size: - Virtual size: 638KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.OX?
Size: - Virtual size: 20.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.s#4
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.=S7
Size: 34.4MB - Virtual size: 34.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

22a71214a0c9214caa6b4dfa0b409cb5

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

advapi32

shell32

ole32

crypt32

ws2_32

bcrypt

oleaut32

Sections

.text Size: - Virtual size: 638KB

.rdata Size: - Virtual size: 180KB

.data Size: - Virtual size: 10KB

.pdata Size: - Virtual size: 22KB

_RDATA Size: - Virtual size: 348B

.OX? Size: - Virtual size: 20.9MB

.s#4 Size: 4KB - Virtual size: 3KB

.=S7 Size: 34.4MB - Virtual size: 34.4MB

.rsrc Size: 22KB - Virtual size: 21KB

.text
Size: - Virtual size: 638KB

.rdata
Size: - Virtual size: 180KB

.data
Size: - Virtual size: 10KB

.pdata
Size: - Virtual size: 22KB

_RDATA
Size: - Virtual size: 348B

.OX?
Size: - Virtual size: 20.9MB

.s#4
Size: 4KB - Virtual size: 3KB

.=S7
Size: 34.4MB - Virtual size: 34.4MB

.rsrc
Size: 22KB - Virtual size: 21KB