0e52406d93b9c75927a111a214e8f2d95ce6ad0f3abc76a9a78b300c62edca65[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

0e52406d93b9c75927a111a214e8f2d95ce6ad0f3abc76a9a78b300c62edca65.exe
Size

3.2MB
MD5

9882c553537d910ab52fa50aab24cfc2
SHA1

564c5cd422a279dfb999f8e4be062f4dc35733ba
SHA256

0e52406d93b9c75927a111a214e8f2d95ce6ad0f3abc76a9a78b300c62edca65
SHA512

402db33cf046c02961abb4ca4909650d5e148091daf4c83e8da89373911d7d45e5f95fbb48c9349bcf3b12b11a876bac92c203814be1df0c32b0cf1183ecb1ce
SSDEEP

98304:rBrIJukIjbMK3WlEmVGBuhZ0lEvAsIY3WRaAVzT+NYTSVyTBtmMg8k54eD62:RTmVGuH0lEVIY3WRaAd+NYmVyTBgMHk

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e52406d93b9c75927a111a214e8f2d95ce6ad0f3abc76a9a78b300c62edca65.exe

Files

0e52406d93b9c75927a111a214e8f2d95ce6ad0f3abc76a9a78b300c62edca65.exe
.exe windows:6 windows x86 arch:x86

a97dbb87337fa7dd4de029554f7047b4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetFileTime
LockFile
SetFilePointerEx
GetCompressedFileSizeW
EncodePointer
DecodePointer
EncodeSystemPointer
DecodeSystemPointer
SetHandleInformation
GetLastError
SetLastError
DisconnectNamedPipe
PeekNamedPipe
GetNamedPipeInfo
GetNamedPipeHandleStateW
HeapCreate
CreateIoCompletionPort
PostQueuedCompletionStatus
ResetEvent
ReleaseSemaphore
ReleaseMutex
WaitForSingleObject
CreateMutexW
CancelWaitableTimer
Sleep
GetProcessTimes
GetExitCodeProcess
GetCurrentThreadId
GetThreadPriorityBoost
GetThreadPriority
TlsSetValue
GetProcessVersion
GetStartupInfoW
SetPriorityClass
GetPriorityClass
GetProcessId
GetThreadContext
FlushInstructionCache
GetThreadTimes
OpenProcess
GetProcessHandleCount
GetProcessPriorityBoost
SetProcessPriorityBoost
GetThreadIOPendingFlag
SetSystemTimeAdjustment
CreateFileMappingW
FlushViewOfFile
SetProcessWorkingSetSize
GetWriteWatch
ResetWriteWatch
CreateMemoryResourceNotification
IsProcessInJob
AssignProcessToJobObject
SetInformationJobObject
QueryInformationJobObject
DisableThreadLibraryCalls
FreeResource
GetModuleFileNameA
GetModuleFileNameW
LockResource
GlobalUnlock
GlobalCompact
GlobalUnfix
GlobalUnWire
LocalUnlock
LocalShrink
LocalCompact
GetProcessAffinityMask
GetProcessIoCounters
SwitchToFiber
ConvertFiberToThread
CreateFiberEx
CreateFiber
ConvertThreadToFiber
PulseEvent
GlobalDeleteAtom
InitAtomTable
DeleteAtom
SetHandleCount
SetMessageWaitingIndicator
SetFileShortNameW
ClearCommBreak
ClearCommError
EscapeCommFunction
GetCommMask
GetCommModemStatus
GetFileInformationByHandle
TransmitCommChar
GetTapePosition
PrepareTape
EraseTape
CreateTapePartition
GetTapeStatus
MulDiv
GetMailslotInfo
SetMailslotInfo
lstrcmpiW
AddAtomW
MoveFileWithProgressW
ReplaceFileW
GetNamedPipeHandleStateA
MapUserPhysicalPagesScatter
GetStringTypeW
GetACP
IsValidLanguageGroup
GetSystemDefaultUILanguage
SetThreadLocale
SetConsoleMode
GetNumberOfConsoleInputEvents
SetConsoleActiveScreenBuffer
FlushConsoleInputBuffer
GetConsoleTitleW
GetConsoleSelectionInfo
CloseHandle
GetConsoleMode
GetConsoleOutputCP
HeapReAlloc
HeapSize
GetProcessHeap
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
FindClose
HeapFree
HeapAlloc
GetModuleHandleExW
WriteFile
RaiseException
LoadLibraryExW
FreeLibrary
TlsFree
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
TerminateProcess
GetCurrentProcess
GetModuleHandleW
IsProcessorFeaturePresent
WriteConsoleW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetFileType
GetFileAttributesExW
FlushFileBuffers
FindNextFileW
FindNextChangeNotification
FindFirstFileExW
CreateFileW
SetEnvironmentVariableW
SetStdHandle
GetStdHandle
ExitProcess
GetModuleHandleA
GetProcAddress
GetCommTimeouts
LoadLibraryA

user32

SetMenuItemInfoA
DrawTextW
DrawTextExW
SetActiveWindow
InvalidateRect
ValidateRect
RedrawWindow
ScrollWindow
SetWindowTextA
GetWindowTextA
GetClientRect
GetWindowRect
GetMenuContextHelpId
MessageBoxA
MessageBoxExW
SetCursor
GetCursorPos
SetCaretBlinkTime
SetCaretPos
ClientToScreen
ChildWindowFromPoint
GetSysColor
GetSysColorBrush
FrameRect
InflateRect
OffsetRect
GetWindowLongA
SetWindowLongA
FindWindowA
IsGUIThread
CheckMenuRadioItem
LoadCursorA
DestroyCursor
LoadIconA
PrivateExtractIconsW
DestroyIcon
LookupIconIdFromDirectoryEx
DrawIconEx
IsDialogMessageA
MapDialogRect
ChangeDisplaySettingsW
BlockInput
InsertMenuItemW
wvsprintfA
wsprintfA
GetKeyboardLayoutNameW
IsHungAppWindow
DrawAnimatedRects
GetMessageA
TranslateMessage
DispatchMessageA
SendMessageA
PostMessageA
PostQuitMessage
CallWindowProcA
SetDoubleClickTime
RegisterClassA
UnregisterClassA
GetClassInfoA
IsWindow
IsMenu
DestroyWindow
UpdateLayeredWindow
MoveWindow
SetWindowPos
GetWindowPlacement
SetWindowPlacement
CreateDialogParamA
DialogBoxParamA
EndDialog
GetDlgItem
SetDlgItemInt
SetDlgItemTextA
GetDlgItemTextA
GetDlgItemTextW
CheckDlgButton
CheckRadioButton
IsDlgButtonChecked
SetFocus
SendDlgItemMessageA
DefDlgProcA
OpenClipboard
InsertMenuItemA
TrackPopupMenu
RemoveMenu
AppendMenuA
InsertMenuW
GetSubMenu
EnableMenuItem
CheckMenuItem
DestroyMenu
CreatePopupMenu
GetSystemMenu
GetMenu
GetSystemMetrics
TranslateAcceleratorA
DestroyAcceleratorTable
LoadAcceleratorsA
EnableWindow
KillTimer
SetTimer
SetCapture
GetInputState
GetActiveWindow
IsCharUpperW
CharPrevW
CharLowerBuffA
CharUpperA
CharToOemBuffW
OemToCharW
GetOpenClipboardWindow
GetPriorityClipboardFormat
EmptyClipboard
EnumClipboardFormats
GetClipboardData
SetClipboardData
CloseClipboard

ole32

OleRegGetMiscStatus
OleRegGetUserType
OleGetIconOfClass
GetRunningObjectTable
MkParseDisplayName
CoInstall
CoTreatAsClass
CoAllowSetForegroundWindow
CoGetInstanceFromIStorage
CoGetInstanceFromFile
CoTaskMemRealloc
CoInvalidateRemoteMachineBindings
StringFromGUID2
OleDoAutoConvert
IIDFromString
StringFromIID
StringFromCLSID
CoEnableCallCancellation
CoCancelCall
CoSwitchCallContext
CoImpersonateClient
CoQueryClientBlanket
CoQueryProxyBlanket
CoGetCallContext
CoDisconnectObject
CoUnmarshalInterface
CoGetClassObject
CoGetObjectContext
CoGetCurrentLogicalThreadId
CoGetCallerTID
CoGetCurrentProcess
ProgIDFromCLSID

version

GetFileVersionInfoW
VerInstallFileW
VerFindFileW
VerQueryValueW
GetFileVersionInfoSizeW

comctl32

PropertySheetW
ImageList_Create
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_Remove
CreateToolbarEx
ord13
ord14
ord410
ord411
ord412
ord413
InitCommonControlsEx

Sections

.text
Size: 2.7MB - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 387KB - Virtual size: 386KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 109KB - Virtual size: 129KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a97dbb87337fa7dd4de029554f7047b4

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

version

comctl32

Sections

.text Size: 2.7MB - Virtual size: 2.7MB

.rdata Size: 387KB - Virtual size: 386KB

.data Size: 109KB - Virtual size: 129KB

.rsrc Size: 70KB - Virtual size: 70KB

.text
Size: 2.7MB - Virtual size: 2.7MB

.rdata
Size: 387KB - Virtual size: 386KB

.data
Size: 109KB - Virtual size: 129KB

.rsrc
Size: 70KB - Virtual size: 70KB