01674699[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

01674699.exe
Size

134KB
MD5

aedbbccb355b4b671b260ddae4caf48a
SHA1

fac537787c1c197c1eeff3776f18286c93fb62aa
SHA256

f87e7c558f070aba0493468837fcc6dacd76e5cc855a7f460c798af6fe8f0120
SHA512

09a412edfe005ab34006032fabcf7b12b18c1ff2aafdaa4a551a7da929c866532ff2d544dff55e2d6fbfbb52cca270481c9853652d6299eb077328d52dbee22a
SSDEEP

3072:s4/hNEFqgwt4AfLKUM3/oY+IUTzrojcbWy:ARATu3/Agcb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01674699.exe

Files

01674699.exe
.exe windows x64

acc48e60a55fe252ce798d26c5ecbc77

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

shlwapi

SHDeleteKeyW

kernel32

GetConsoleCP
FlushFileBuffers
HeapReAlloc
HeapSize
GetStringTypeW
GetFileType
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetConsoleMode
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExA
FindClose
GetProcessHeap
HeapAlloc
GlobalFree
GlobalAlloc
HeapFree
ExitProcess
LoadLibraryA
WaitForSingleObject
GetConsoleWindow
WriteConsoleW
CreateThread
ReadConsoleW
Sleep
ResumeThread
GetStdHandle
SetThreadPriority
lstrlenW
GetModuleHandleW
GetProcAddress
CloseHandle
CreateFileW
WriteFile
GetCurrentProcess
SetFilePointerEx
GetCommandLineA
RaiseException
GetLastError
FreeLibrary
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
GetModuleHandleExW
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetACP
LCMapStringW

user32

DispatchMessageW
SetTimer
TranslateMessage
SendMessageTimeoutW
EnumChildWindows
EnumDisplayMonitors
GetAsyncKeyState
RedrawWindow
ExitWindowsEx
GetMessageW
GetWindowLongW
GetWindowRect
GetDC
SetWindowPos
FillRect
CreateWindowExW
ShowWindow
BlockInput
SetWindowLongW
GetDesktopWindow
SetCursorPos
GetCursorPos
GetForegroundWindow

gdi32

SelectObject
CreateDIBSection
CreateCompatibleDC
DeleteDC
Rectangle
Ellipse
BitBlt
GdiGradientFill
TextOutW
DeleteObject
CreateSolidBrush

advapi32

LookupPrivilegeValueW
AdjustTokenPrivileges
OpenProcessToken
RegCloseKey
RegSetValueExW
RegSetValueExA
RegOpenKeyExA
RegCreateKeyW

Sections

.text
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

acc48e60a55fe252ce798d26c5ecbc77

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

kernel32

user32

gdi32

advapi32

Sections

.text Size: 79KB - Virtual size: 79KB

.rdata Size: 44KB - Virtual size: 43KB

.data Size: 2KB - Virtual size: 23KB

.pdata Size: 4KB - Virtual size: 4KB

_RDATA Size: 512B - Virtual size: 252B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 79KB - Virtual size: 79KB

.rdata
Size: 44KB - Virtual size: 43KB

.data
Size: 2KB - Virtual size: 23KB

.pdata
Size: 4KB - Virtual size: 4KB

_RDATA
Size: 512B - Virtual size: 252B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 2KB - Virtual size: 1KB