f88a93a384675669d03a2a269ae12a60_exe32[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

f88a93a384675669d03a2a269ae12a60_exe32.exe
Size

106KB
MD5

f88a93a384675669d03a2a269ae12a60
SHA1

50da1f3fb5416d2671d4f36a135aba50abb7d973
SHA256

44df7fa729fbfec2fee0780a4614bfa92fd3e1ff9a1cfe53b3318cac3580f1e4
SHA512

100d8409f16906e3a466078292a9a1232716721896f054b3faa2aee8215ec0471175c6e2e917aa5ce8ccd5c7d4801890dc489bf6b485a882c02ac4d6137c8e83
SSDEEP

3072:L3c36b8x/Mh0Z1MAKS4q9mnIhEoaL5KVDVKjrhCA:Y36b8dM+HmBLpLYDViFCA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f88a93a384675669d03a2a269ae12a60_exe32.exe

Files

f88a93a384675669d03a2a269ae12a60_exe32.exe
.exe windows:5 windows x86

916275e1121c584772afb7541180b4e6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
EncodePointer
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
InterlockedIncrement
FreeEnvironmentStringsW
GetModuleFileNameA
GetModuleFileNameW
GetStdHandle
WriteFile
DecodePointer
HeapCreate
HeapAlloc
SetLastError
GetCurrentThreadId
InterlockedDecrement
QueryPerformanceCounter
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapReAlloc
ExitProcess
GetCurrentProcessId
Sleep
LoadLibraryW
GetModuleHandleW
GetModuleHandleA
HeapSize
GetProcAddress
GetLastError
CreateProcessA
GetTickCount
WideCharToMultiByte
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetStartupInfoW
HeapSetInformation
GetCommandLineA
HeapFree
IsProcessorFeaturePresent

user32

PaintDesktop
FindWindowA

gdi32

MoveToEx
SetWindowOrgEx
SetLayout
GetLayout
SetViewportOrgEx
LineTo
SetWindowExtEx
GetWindowExtEx
GetCharWidthW
ExcludeClipRect
SelectClipRgn
CombineRgn
SetMapMode
GetMapMode
SaveDC
SetPolyFillMode
GetObjectType
OffsetWindowOrgEx
ScaleViewportExtEx
SelectPalette
CreateRectRgn
CreatePatternBrush
GetClipBox
SetViewportExtEx
SetROP2
GetViewportExtEx
SetTextAlign
ExtSelectClipRgn
IntersectClipRect
OffsetViewportOrgEx
ScaleWindowExtEx
RestoreDC
CreateSolidBrush
SetRectRgn

Sections

.text
Size: 42KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 44KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

916275e1121c584772afb7541180b4e6

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 42KB - Virtual size: 42KB

.rdata Size: 9KB - Virtual size: 8KB

.data Size: 44KB - Virtual size: 48KB

.rsrc Size: 9KB - Virtual size: 8KB

.text
Size: 42KB - Virtual size: 42KB

.rdata
Size: 9KB - Virtual size: 8KB

.data
Size: 44KB - Virtual size: 48KB

.rsrc
Size: 9KB - Virtual size: 8KB