e310e98236bb5f6062114f96a59ec15d[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

e310e98236bb5f6062114f96a59ec15d.exe
Size

7.0MB
MD5

e310e98236bb5f6062114f96a59ec15d
SHA1

38b288963cc5f212b31aba235db94432fbdc5211
SHA256

ade55481797d0c7bfdaaea3c7b6d14771c902e825b4f28bd29bd669d04d661df
SHA512

1965c7d6711fc7db61c532bd691e98a69b718bd44698660563bb75307c7e4d100edc802a3dc651ef0d2c25cfcf7cfa0b3d2bfc1703759d09e69105fdb6101373
SSDEEP

196608:cTEcVnJULKrytYcJX7Nfjw9cI1qyz+6weSn5B:4EcVnukcJLtlIwqwemH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e310e98236bb5f6062114f96a59ec15d.exe

Files

e310e98236bb5f6062114f96a59ec15d.exe
.exe windows x64

ccb2cf295a891890865d88d1e63e8f2c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

oleaut32

SysFreeString

kernel32

GetCurrentThread
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
ExitProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress

crypt32

CertDuplicateStore

ole32

CoInitializeSecurity

advapi32

RegQueryValueExW

user32

EnumDisplaySettingsExW

gdi32

SetStretchBltMode

bcrypt

BCryptCloseAlgorithmProvider

ws2_32

WSASend

ntdll

RtlNtStatusToDosError

secur32

EncryptMessage

vcruntime140

__C_specific_handler

api-ms-win-crt-string-l1-1-0

strcspn

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-heap-l1-1-0

realloc

api-ms-win-crt-time-l1-1-0

_localtime64_s

api-ms-win-crt-math-l1-1-0

_dclass

api-ms-win-crt-runtime-l1-1-0

_endthreadex

api-ms-win-crt-stdio-l1-1-0

_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 756KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.KBU
Size: - Virtual size: 4.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.1Ts
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.VdS
Size: 8.6MB - Virtual size: 8.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 60B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 433KB - Virtual size: 432KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ccb2cf295a891890865d88d1e63e8f2c

Headers

DLL Characteristics

File Characteristics

Imports

oleaut32

kernel32

crypt32

ole32

advapi32

user32

gdi32

bcrypt

ws2_32

ntdll

secur32

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: - Virtual size: 2.3MB

.rdata Size: - Virtual size: 756KB

.data Size: - Virtual size: 27KB

.pdata Size: - Virtual size: 56KB

.KBU Size: - Virtual size: 4.5MB

.1Ts Size: 4KB - Virtual size: 4KB

.VdS Size: 8.6MB - Virtual size: 8.6MB

.reloc Size: 512B - Virtual size: 60B

.rsrc Size: 433KB - Virtual size: 432KB

.text
Size: - Virtual size: 2.3MB

.rdata
Size: - Virtual size: 756KB

.data
Size: - Virtual size: 27KB

.pdata
Size: - Virtual size: 56KB

.KBU
Size: - Virtual size: 4.5MB

.1Ts
Size: 4KB - Virtual size: 4KB

.VdS
Size: 8.6MB - Virtual size: 8.6MB

.reloc
Size: 512B - Virtual size: 60B

.rsrc
Size: 433KB - Virtual size: 432KB