691876be89f7a68292f246edba0137760b714a379a1f0a00bb2d40c51ae9448d[.]exe

Resubmissions

23/02/2024, 11:30

240223-nmfvgsfc8v 7

23/02/2024, 11:28

240223-nkyyaafg54 7

Sharing

Copy URL Twitter E-mail

General

Target

691876be89f7a68292f246edba0137760b714a379a1f0a00bb2d40c51ae9448d.exe
Size

344KB
MD5

7e009b48a89e9a0180bd8ae57be64ebf
SHA1

a36df676b583a5a13fd00abab975977f0eeabef5
SHA256

691876be89f7a68292f246edba0137760b714a379a1f0a00bb2d40c51ae9448d
SHA512

a64f8979c58a3028687fa2ca897f402a84aec4ba5e1ba77b150401aa6fc32e5c0417eed7473eac3474c2f34484b8bde984023b3ff689ce23850b7441479ad9a8
SSDEEP

6144:gRKpBi0rqGveSsCNWguftcFHu3W06YLvN1R5Vz6+TICwOyYEN:rVqGGFCfu3kKN1R57TIKG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
691876be89f7a68292f246edba0137760b714a379a1f0a00bb2d40c51ae9448d.exe

Files

691876be89f7a68292f246edba0137760b714a379a1f0a00bb2d40c51ae9448d.exe
.exe windows:5 windows x86 arch:x86

731eeddfc8bebc93d179cca7900dbc40

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\internet\cybernetics\aimed\gost.pdb

Imports

kernel32

FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
GetConsoleMode
GetConsoleCP
SetFilePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
GetCurrentThreadId
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
GetFileType
SetHandleCount
GetModuleFileNameA
Sleep
GetModuleHandleW
HeapCreate
HeapReAlloc
VirtualAlloc
VirtualFree
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
HeapFree
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
RtlUnwind
RaiseException
GetStartupInfoA
GetCommandLineA
CreateThread
CloseHandle
GetModuleHandleA
LockResource
LocalAlloc
LoadLibraryA
GetPrivateProfileStringA
GlobalFree
CreateNamedPipeA
ExitProcess
GetProcAddress
GetLastError
GetStdHandle
GlobalUnlock
lstrcatA
ReadFile
CreateEventA
SizeofResource
LoadLibraryW
GlobalAlloc
FindResourceExA
EnumResourceTypesA
WriteFile
FormatMessageA
ConnectNamedPipe
GetTimeFormatA
WaitForSingleObject
GlobalLock
UpdateResourceA
HeapAlloc
LoadResource
FreeLibrary
lstrlenA
FreeResource
CreateFileA
SetLastError

user32

GetDialogBaseUnits
GetWindow
DestroyIcon
GetDlgItemTextA
CopyRect
FindWindowA
SetClipboardData
EnableWindow
MoveWindow
LoadCursorA
GetWindowThreadProcessId
SetDlgItemTextA
ClientToScreen
DestroyWindow
CloseClipboard
SetWindowRgn
ScreenToClient
GetWindowRect
PostQuitMessage
SendDlgItemMessageA
GetWindowDC
IsIconic
FillRect
NotifyWinEvent
KillTimer
DrawIconEx
SetForegroundWindow
GetFocus
LoadBitmapA
GetParent
LoadMenuA
LoadIconA
DlgDirSelectExA
IsWindowEnabled
FindWindowExA
WindowFromPoint
GetClientRect
CreateMenu
SetFocus
SendMessageA
RegisterWindowMessageA
DlgDirListA
GetDC
DrawFocusRect
InflateRect
OffsetRect
GetCursorInfo
SetPropA
SetRect
SetWindowLongA
MessageBoxA
GetAncestor
GetWindowLongA
CreateWindowExA
ReleaseDC
EmptyClipboard
GetDlgItem
EndDialog
DefWindowProcA
RedrawWindow
GetSysColor
SetWindowPos
GetCursorPos
IsDlgButtonChecked
OpenClipboard
SystemParametersInfoA
GetSystemMetrics
IsWindowVisible
LoadImageA
MapWindowPoints

gdi32

BitBlt
SetTextColor
DeleteDC
CreateFontA
StretchBlt
GetCurrentObject
SetBkColor
ExcludeClipRect
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
CombineRgn
CreateCompatibleBitmap
Rectangle
GetBkColor
CreateRectRgn
CreatePen
GetTextMetricsA
GetObjectA
GetStockObject
ExtTextOutA
CreateSolidBrush
TextOutA
SelectClipRgn

comdlg32

PrintDlgA
ChooseFontA
PageSetupDlgA
ReplaceTextA

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegOpenKeyExW
RegCloseKey
RegQueryValueExA

ole32

CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop

oleaut32

OleCreatePropertyFrameIndirect

shlwapi

AssocCreate

comctl32

ImageList_SetOverlayImage
ImageList_LoadImageA

uxtheme

CloseThemeData
DrawThemeParentBackground
IsThemeActive
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
GetThemeBackgroundRegion
OpenThemeData
GetThemeBackgroundContentRect

powrprof

GetPwrCapabilities

rasapi32

RasGetConnectionStatistics

Sections

.text
Size: 256KB - Virtual size: 256KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 51KB - Virtual size: 51KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

731eeddfc8bebc93d179cca7900dbc40

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comdlg32

advapi32

ole32

oleaut32

shlwapi

comctl32

uxtheme

powrprof

rasapi32

Sections

.text Size: 256KB - Virtual size: 256KB

.rdata Size: 51KB - Virtual size: 51KB

.data Size: 20KB - Virtual size: 26KB

.rsrc Size: 15KB - Virtual size: 14KB

.text
Size: 256KB - Virtual size: 256KB

.rdata
Size: 51KB - Virtual size: 51KB

.data
Size: 20KB - Virtual size: 26KB

.rsrc
Size: 15KB - Virtual size: 14KB