fbb12ff00c62ef58b38385d06abb4f43[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

fbb12ff00c62ef58b38385d06abb4f43.exe
Size

167KB
MD5

fbb12ff00c62ef58b38385d06abb4f43
SHA1

455d3d910a2387925daf8ce2295e14119e1dfe76
SHA256

0085f13770b5b1ef96b1f5b57474c44f4a21ae8befef06a17cd254f75a071ec2
SHA512

d5af414987fd89c1abfb43bd73aa9bc8f911902fa7ea8311ee303496a2911408ac22a7dd839069a0c70b9948722ebe24da5b207cfb02f8252c1e2b967c6aaaa1
SSDEEP

3072:ifnleDg3ktfb/th+mAcP8aZRptCKuM5oqLbGdfKZw2yoZnByNCwhC589hde:2l6g3ktj0cxtCrMDbOfYH00GC58le

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fbb12ff00c62ef58b38385d06abb4f43.exe

Files

fbb12ff00c62ef58b38385d06abb4f43.exe
.exe windows:5 windows x86

82e06f8d5b0f878c76ae07d54b6e7760

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetHandleInformation
GetTickCount
GetCommConfig
GlobalAlloc
LoadLibraryW
TerminateThread
GetSystemTimeAdjustment
TerminateProcess
GetTempPathW
GetStdHandle
GetLastError
GetProcAddress
GetProcessIoCounters
SetProcessWorkingSetSize
AddAtomA
GetThreadPriority
SetProcessShutdownParameters
CloseHandle
GetCurrentProcessId
WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
SetComputerNameExA
SetProcessAffinityMask
GetProcessWorkingSetSize
ExitProcess
FlushFileBuffers
GetStringTypeW
HeapAlloc
EncodePointer
DecodePointer
HeapReAlloc
GetCommandLineW
RaiseException
RtlUnwind
IsProcessorFeaturePresent
GetModuleHandleExW
MultiByteToWideChar
WideCharToMultiByte
WriteFile
GetModuleFileNameW
GetProcessHeap
HeapSize
HeapFree
SetLastError
GetCurrentThreadId
GetFileType
DeleteCriticalSection
GetStartupInfoW
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
Sleep
GetCurrentProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
OutputDebugStringW
LCMapStringW
CreateFileW

user32

SetScrollRange
ShowScrollBar
LoadImageA
GetMonitorInfoW

gdi32

StretchBlt
StretchDIBits
BitBlt

winhttp

WinHttpOpen

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 342KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

82e06f8d5b0f878c76ae07d54b6e7760

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winhttp

Sections

.text Size: 54KB - Virtual size: 54KB

.rdata Size: 26KB - Virtual size: 26KB

.data Size: 73KB - Virtual size: 342KB

.rsrc Size: 6KB - Virtual size: 6KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 54KB - Virtual size: 54KB

.rdata
Size: 26KB - Virtual size: 26KB

.data
Size: 73KB - Virtual size: 342KB

.rsrc
Size: 6KB - Virtual size: 6KB

.reloc
Size: 5KB - Virtual size: 4KB