53911c4b71bc7676b01936aa6e5ea870N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

53911c4b71bc7676b01936aa6e5ea870N.exe
Size

504KB
MD5

53911c4b71bc7676b01936aa6e5ea870
SHA1

989612855e50d58e0e1d303e98910e320dbe50cb
SHA256

533e80787cbc10a489a336cccb20e04e96c816499c2a70f0db11760655d9eea0
SHA512

9a0fd3476a7ab6cbe22280eaf6be51cbe700b3c7c1cd69df7f6319ca3dfceffc33ceead94385cf740f2e26cfedc438ad9207c0a2d44a41462afd4d0098b7e39d
SSDEEP

12288:1CT259VoRQPwzY2RlQtNJWULugpfZc6KMIA8kIDV7:1uJYSlQtNJWULugpfZc6KMIA8kIDV7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
53911c4b71bc7676b01936aa6e5ea870N.exe

Files

53911c4b71bc7676b01936aa6e5ea870N.exe
.exe windows:4 windows x86 arch:x86

ebb733222f8bdddbd6a41f8efadee479

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

oleaut32

VariantInit
SysStringLen
SysAllocStringByteLen
SysAllocString
VariantCopy
VariantClear
VariantChangeType
SysFreeString
VariantTimeToSystemTime
SysAllocStringLen

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

kernel32

CreateThread
WaitForSingleObject
LockResource
GetSystemDefaultLangID
lstrcpyA
GetPrivateProfileIntA
ResetEvent
CreateEventA
LocalAlloc
DeviceIoControl
GetLastError
GetVersionExA
LocalFree
CreateFileA
GetProcAddress
lstrcpynA
LoadLibraryA
WideCharToMultiByte
SleepEx
GetCurrentDirectoryA
GetCommandLineA
GetPrivateProfileStringA
FreeLibrary
GetSystemDirectoryA
WritePrivateProfileStringA
SetEvent
CloseHandle
GetEnvironmentStringsW
LeaveCriticalSection
CompareStringA
GlobalReAlloc
MultiByteToWideChar
IsBadCodePtr
IsBadReadPtr
SetStdHandle
GetStringTypeW
GetStringTypeA
SetUnhandledExceptionFilter
IsBadWritePtr
VirtualAlloc
GetProfileStringA
SetEnvironmentVariableA
CompareStringW
EnterCriticalSection
TlsSetValue
GetFileType
GetStdHandle
HeapDestroy
VirtualFree
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
UnhandledExceptionFilter
LCMapStringW
LCMapStringA
GetTimeZoneInformation
GetACP
HeapSize
HeapReAlloc
RaiseException
HeapAlloc
HeapFree
TerminateProcess
ExitProcess
GetStartupInfoA
RtlUnwind
FormatMessageA
GetTickCount
FileTimeToLocalFileTime
FileTimeToSystemTime
GetCurrentThreadId
GetCurrentThread
lstrcmpiA
lstrcmpA
GlobalDeleteAtom
GlobalAlloc
GlobalLock
GetModuleFileNameA
LoadResource
FindResourceA
GlobalFree
GlobalUnlock
SetLastError
GetModuleHandleA
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
lstrcatA
GetVersion
MulDiv
InterlockedDecrement
InterlockedIncrement
lstrlenA
HeapCreate
InitializeCriticalSection
TlsAlloc
DeleteCriticalSection
GlobalHandle
TlsFree
SetEndOfFile
SetErrorMode
SetHandleCount
LocalReAlloc
TlsGetValue
GlobalFlags
GetProcessVersion
SizeofResource
GetThreadLocale
DuplicateHandle
GetCurrentProcess
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
GetFileAttributesA
FindClose
FindFirstFileA
GetVolumeInformationA
GetFullPathNameA
GetFileSize
GetFileTime
GetCPInfo
GetOEMCP

user32

DrawFocusRect
ExcludeUpdateRgn
GrayStringA
PostQuitMessage
MessageBoxA
GetWindowLongA
IsWindowEnabled
GetLastActivePopup
GetParent
SetWindowsHookExA
PeekMessageA
ValidateRect
CallNextHookEx
GetKeyState
GetActiveWindow
DispatchMessageA
TranslateMessage
GetMessageA
GetNextDlgTabItem
GetFocus
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
GetDlgItem
DestroyWindow
CreateDialogIndirectParamA
IsWindow
SetActiveWindow
EndDialog
SetWindowContextHelpId
GetWindow
SetWindowPos
MapDialogRect
DestroyMenu
SendDlgItemMessageA
DefDlgProcA
IsDialogMessageA
SetWindowTextA
GetWindowTextA
GetWindowTextLengthA
GetDlgCtrlID
SetWindowLongA
MoveWindow
ShowWindow
SetFocus
GetWindowPlacement
SystemParametersInfoA
IntersectRect
OffsetRect
RegisterWindowMessageA
GetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
UnhookWindowsHookEx
SetPropA
GetClassLongA
CreateWindowExA
DefWindowProcA
TrackPopupMenu
GetMenuItemID
GetMenuItemCount
GetMenu
RegisterClassA
GetClassInfoA
wsprintfA
WinHelpA
GetCapture
IsChild
GetTopWindow
CopyRect
ScreenToClient
AdjustWindowRectEx
GetSysColor
MapWindowPoints
UpdateWindow
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
TabbedTextOutA
DrawTextA
LoadCursorA
GetClassNameA
PtInRect
GetSysColorBrush
CharNextA
CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
CharUpperA
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
IsWindowUnicode
SetWindowRgn
LoadImageA
PostMessageA
ShowCaret
HideCaret
GetSystemMetrics
DestroyIcon
GetCursorPos
DrawIcon
UnregisterClassA
InvalidateRect
ShowCursor
SetCursor
MessageBeep
GetSubMenu
ModifyMenuA
LoadMenuA
SendMessageA
IsIconic
FindWindowA
GetWindowRect
GetClientRect
GetDC
ReleaseDC
SetForegroundWindow
IsWindowVisible
RedrawWindow
SetTimer
KillTimer
SetCapture
GetDesktopWindow
ReleaseCapture
EnableWindow
LoadIconA
LoadStringA
RegisterHotKey
UnregisterHotKey

gdi32

GetDeviceCaps
OffsetRgn
CreateCompatibleDC
GetClipBox
SetTextColor
CreateRectRgn
CombineRgn
RestoreDC
GetStockObject
SaveDC
SetBkMode
SetMapMode
OffsetViewportOrgEx
SetViewportExtEx
SetViewportOrgEx
CreateDIBitmap
GetTextExtentPointA
PatBlt
GetMapMode
LPtoDP
DPtoLP
GetBkColor
GetTextColor
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateSolidBrush
GetWindowExtEx
GetViewportExtEx
CreateBitmap
CreateCompatibleBitmap
DeleteObject
ScaleViewportExtEx
DeleteDC
SetBkColor
SelectObject
BitBlt
CreateFontIndirectA
GetObjectA
GetPixel
ScaleWindowExtEx
SetWindowExtEx
IntersectClipRect

advapi32

RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA

shell32

Shell_NotifyIconA
ShellExecuteA

ole32

CoUninitialize
CoCreateInstance
CoInitialize
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoRevokeClassObject
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard

winmm

mixerGetLineInfoA
mmioClose
mmioRead
mixerGetDevCapsA
mmioDescend
mmioOpenA
waveOutOpen
mixerOpen
mixerGetNumDevs
mixerSetControlDetails
mixerGetControlDetailsA
mixerGetLineControlsA
waveOutWrite
waveOutGetDevCapsA
waveOutGetNumDevs
waveOutRestart
waveOutClose
waveOutPrepareHeader
waveOutReset
waveOutPause
mixerClose
mmioAscend

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdA
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailA

dsound

ord1

comctl32

ord17

oledlg

ord8

olepro32

ord253

wsock32

WSACleanup
WSAStartup

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

comdlg32

GetFileTitleA

Sections

.text
Size: 400KB - Virtual size: 396KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

PublicDa
Size: 4KB - Virtual size: 194B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ebb733222f8bdddbd6a41f8efadee479

Headers

File Characteristics

Imports

oleaut32

version

kernel32

user32

gdi32

advapi32

shell32

ole32

winmm

setupapi

dsound

comctl32

oledlg

olepro32

wsock32

winspool.drv

comdlg32

Sections

.text Size: 400KB - Virtual size: 396KB

.rdata Size: 48KB - Virtual size: 46KB

.data Size: 32KB - Virtual size: 48KB

PublicDa Size: 4KB - Virtual size: 194B

.rsrc Size: 16KB - Virtual size: 15KB

.text
Size: 400KB - Virtual size: 396KB

.rdata
Size: 48KB - Virtual size: 46KB

.data
Size: 32KB - Virtual size: 48KB

PublicDa
Size: 4KB - Virtual size: 194B

.rsrc
Size: 16KB - Virtual size: 15KB