b02e16e6645e27dcf2e28a1816ec64da99e9b22d25c689ed45c4ec4913746313[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

b02e16e6645e27dcf2e28a1816ec64da99e9b22d25c689ed45c4ec4913746313.exe
Size

14.7MB
MD5

f27ed65e8762aaf528ee348868724b85
SHA1

fe01d5c6d61fa22c5b86937a31b9c8ed164812d2
SHA256

b02e16e6645e27dcf2e28a1816ec64da99e9b22d25c689ed45c4ec4913746313
SHA512

bdffdfe33b334a5863043e2fe5d7b37139c6c5944caecef683c7d330da0c066e5de668f9470d8edb8e0debbeb8cb29f616c39e71b930ebe928815e2c261cf825
SSDEEP

393216:u9Kl8kLhcwbENoVL9rliCclt0rF33tZUwGdHH:vl/XENoVFMqtFq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b02e16e6645e27dcf2e28a1816ec64da99e9b22d25c689ed45c4ec4913746313.exe

Files

b02e16e6645e27dcf2e28a1816ec64da99e9b22d25c689ed45c4ec4913746313.exe
.exe windows:6 windows x64 arch:x64

63f995b2ffc1961aff5828dcddf0a03b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

d3dx9_43

D3DXCreateTextureFromFileInMemory

d3d9

Direct3DCreate9

kernel32

MultiByteToWideChar

user32

DefWindowProcW

advapi32

LookupPrivilegeValueW

shell32

SHGetKnownFolderPath

oleaut32

VariantClear

ntdll

RtlAnsiStringToUnicodeString

ws2_32

send

Sections

.text
Size: - Virtual size: 861KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text0
Size: - Virtual size: 488B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 2.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text1
Size: - Virtual size: 7.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text2
Size: 512B - Virtual size: 200B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text3
Size: 14.7MB - Virtual size: 14.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

63f995b2ffc1961aff5828dcddf0a03b

Headers

DLL Characteristics

File Characteristics

Imports

d3dx9_43

d3d9

kernel32

user32

advapi32

shell32

oleaut32

ntdll

ws2_32

Sections

.text Size: - Virtual size: 861KB

.rdata Size: - Virtual size: 141KB

.data Size: - Virtual size: 292KB

.pdata Size: - Virtual size: 28KB

_RDATA Size: - Virtual size: 500B

.text0 Size: - Virtual size: 488B

.reloc Size: - Virtual size: 3KB

.data Size: - Virtual size: 2.7MB

.text1 Size: - Virtual size: 7.6MB

.text2 Size: 512B - Virtual size: 200B

.text3 Size: 14.7MB - Virtual size: 14.7MB

.rsrc Size: 512B - Virtual size: 480B

.text
Size: - Virtual size: 861KB

.rdata
Size: - Virtual size: 141KB

.data
Size: - Virtual size: 292KB

.pdata
Size: - Virtual size: 28KB

_RDATA
Size: - Virtual size: 500B

.text0
Size: - Virtual size: 488B

.reloc
Size: - Virtual size: 3KB

.data
Size: - Virtual size: 2.7MB

.text1
Size: - Virtual size: 7.6MB

.text2
Size: 512B - Virtual size: 200B

.text3
Size: 14.7MB - Virtual size: 14.7MB

.rsrc
Size: 512B - Virtual size: 480B