f24b2e94b07e32e9804aa1400cd16d0e[.]exe

General

Target

f24b2e94b07e32e9804aa1400cd16d0e.exe
Size

171KB
MD5

f24b2e94b07e32e9804aa1400cd16d0e
SHA1

f02409fd4dfb5939418c10224748195ed19e58c0
SHA256

81a61286f41aa32bc315d59e11e6798b20a8b4d0774cc368f5932a002b6740b2
SHA512

ee0ea30a642979542d239f386193bb93d6882d9123fc0441ade8c9b0923dfee1dfecd4f339e39f7470a8c9956405f66a176236b8f5ed611046f0ab5ce2b7145b
SSDEEP

3072:dqpU9rgQCONcn0lb+ddQ0w8Nbi+026cWHvr85ZFQIn9lFxh:zhggBlb+du0w8c+F6cx5ZFJn9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f24b2e94b07e32e9804aa1400cd16d0e.exe

Files

f24b2e94b07e32e9804aa1400cd16d0e.exe
.exe windows:4 windows x86 arch:x86

aa9aae4816c902e34c693cec37221642

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

SHGetFolderPathW

setupapi

CM_Get_Parent
CMP_WaitNoPendingInstallEvents
SetupDiGetDeviceRegistryPropertyW
CM_Get_DevNode_Status

kernel32

TlsSetValue
TlsFree
InterlockedExchange
AddAtomA
QueryPerformanceCounter
GetEnvironmentStrings
HeapSize
GetStdHandle
FreeEnvironmentStringsW
HeapCreate
GetStartupInfoA
TlsAlloc
SetLastError
SetHandleCount
GetCurrentProcessId
GetModuleFileNameA
GetSystemTimeAsFileTime
VirtualQuery
EnumResourceLanguagesA
WriteFile
GetVersionExA
TlsGetValue
GetCPInfo
UnhandledExceptionFilter
HeapDestroy
FormatMessageW
IsBadWritePtr
FreeEnvironmentStringsA
VirtualFree
GetACP
GetSystemInfo
GetCurrentProcess
SetEndOfFile
GetFileType
GetOEMCP
TerminateProcess
GetLocaleInfoA
GetEnvironmentStringsW
VirtualAlloc
SetUnhandledExceptionFilter

mprapi

MprConfigServerDisconnect
MprConfigServerConnect
MprConfigGetFriendlyName

iphlpapi

GetIpAddrTable

user32

DestroyWindow
SendMessageA
EnumChildWindows
IsWindow
CreateWindowExW
GetDlgItem
GetWindowThreadProcessId

newdev

UpdateDriverForPlugAndPlayDevicesW

Sections

.text
Size: 94KB - Virtual size: 490KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aa9aae4816c902e34c693cec37221642

Headers

File Characteristics

Imports

shell32

setupapi

kernel32

mprapi

iphlpapi

user32

newdev

Sections

.text Size: 94KB - Virtual size: 490KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 73KB - Virtual size: 73KB

.rsrc Size: 512B - Virtual size: 4KB

.text
Size: 94KB - Virtual size: 490KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 73KB - Virtual size: 73KB

.rsrc
Size: 512B - Virtual size: 4KB