75b648e9547899b5174a9f7c10151999d4b69bc0db73892fc4303aa0e822ef02[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

75b648e9547899b5174a9f7c10151999d4b69bc0db73892fc4303aa0e822ef02.exe
Size

676KB
MD5

a00a35beda6816f7e0c29db66d802bfc
SHA1

771ecdb1bb8510fd42c63283216f93fcb0f6e9e6
SHA256

75b648e9547899b5174a9f7c10151999d4b69bc0db73892fc4303aa0e822ef02
SHA512

2ced93516c629689eef5cdb046b7576696085c66a42fc6d4ffb5ccabe9253a7dc63aa401a4d327fc391c71114ac0116735a32cc6ac16358af38a23366f867857
SSDEEP

12288:Tq2dQlvHImaoZqG7jl3WkLmpk9lpMmQDgcjPSLkpbaOyD+SS64za:TqNoloZqyjl3D19l0A+SS64z

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
75b648e9547899b5174a9f7c10151999d4b69bc0db73892fc4303aa0e822ef02.exe

Files

75b648e9547899b5174a9f7c10151999d4b69bc0db73892fc4303aa0e822ef02.exe
.exe windows:5 windows x86 arch:x86

b6b568fa943c1881d15e283d34f55d12

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

gdi32

GetTextCharset
SetTextJustification
GetTextAlign
GetTextCharacterExtra
GetClipRgn

user32

MoveWindow
LoadIconA
GetWindowLongA
GetMenuContextHelpId
GetWindowDC
WindowFromDC
GetForegroundWindow
GetMenuItemCount
GetMenuState
IsWindowEnabled
GetQueueStatus
GetInputState
GetDialogBaseUnits
SetDlgItemTextA
GetDlgItem
ShowWindow
EndDialog

kernel32

ExitProcess
RaiseException
DecodePointer
EncodePointer
ReadConsoleW
ReadFile
SetEndOfFile
HeapSize
WriteConsoleW
SetFilePointerEx
GetTimeZoneInformation
SetConsoleCtrlHandler
GetProcessHeap
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
DeleteFileA
GetLastError
GetCurrentProcess
GetVersion
GetTickCount
GetModuleHandleA
GetProcAddress
LockResource
GlobalSize
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetModuleHandleW
TerminateProcess
GetModuleFileNameW
InterlockedPushEntrySList
InterlockedFlushSList
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
CreateFileW
GetDriveTypeW
GetFileType
GetEnvironmentStringsW
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
CloseHandle
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameA
MultiByteToWideChar
WideCharToMultiByte
GetACP
HeapFree
HeapAlloc
SetCurrentDirectoryW
GetCurrentDirectoryW
GetFullPathNameW
GetFullPathNameA
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetStdHandle
HeapReAlloc
GetCurrentThread
GetStringTypeW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
OutputDebugStringA
OutputDebugStringW
WaitForSingleObjectEx
CreateThread
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW

advapi32

SystemFunction036

Sections

.text
Size: 601KB - Virtual size: 600KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b6b568fa943c1881d15e283d34f55d12

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

user32

kernel32

advapi32

Sections

.text Size: 601KB - Virtual size: 600KB

.rdata Size: 70KB - Virtual size: 69KB

.data Size: 4KB - Virtual size: 11KB

.text
Size: 601KB - Virtual size: 600KB

.rdata
Size: 70KB - Virtual size: 69KB

.data
Size: 4KB - Virtual size: 11KB