07440f6eeb5fb90f9a459af1378e5bd0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

07440f6eeb5fb90f9a459af1378e5bd0N.exe
Size

496KB
MD5

07440f6eeb5fb90f9a459af1378e5bd0
SHA1

df0c9f872f77c5a9113b5ed989c55d66853f17f7
SHA256

cdf5c4312afaf6c576c44b09c5c26b6cf5dcde08537649028d286b2919259879
SHA512

cd8f3b8b3edc3aeb28ff8ccd47a540698ca261e68770ef1ff7abd1a0df3cd6bcdaab6eb9c0b49c9ca415801d8bd01a612f946d3ff90345bc78c811f32dd47c28
SSDEEP

12288:WUbE6DAqRYP5w88pL1IscoYgU/KvFhEbZM56rSjjLu:WUbEyAqX8AB3tUNKj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
07440f6eeb5fb90f9a459af1378e5bd0N.exe

Files

07440f6eeb5fb90f9a459af1378e5bd0N.exe
.exe windows:6 windows x86 arch:x86

ee1826ef94fbf687bc75ea97090704b9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\удача\Desktop\projects\Release\BigProject.pdb

Imports

kernel32

WaitForSingleObject
Sleep
GetCurrentProcess
CreateThread
VirtualAlloc
VirtualProtect
FreeLibrary
GetModuleHandleA
GetModuleHandleW
GetProcAddress
LoadLibraryA
MultiByteToWideChar
CloseHandle
HeapSize
GetProcessHeap
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
CreateFileW
FindClose
HeapReAlloc
ReadConsoleW
SetFilePointerEx
GetFileSizeEx
ReadFile
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
WideCharToMultiByte
GetStringTypeW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetCPInfo
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
TerminateProcess
RtlUnwind
GetLastError
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameW
HeapFree
HeapAlloc
GetFileType
WriteConsoleW

user32

CreateWindowExW
DestroyWindow
ShowWindow
GetSystemMetrics
UpdateWindow
GetForegroundWindow
SetWindowTextW
GetWindowTextW
MessageBoxW
GetDesktopWindow
GetCursorPos
SetCursorPos

advapi32

OpenProcessToken

oleaut32

SysAllocString
SysReAllocString
SysFreeString
SysStringLen
SafeArrayCreate
SafeArrayDestroy
SafeArrayGetElement
SafeArrayPutElement
VariantInit
VariantClear

userenv

ExpandEnvironmentStringsForUserW
DestroyEnvironmentBlock
CreateEnvironmentBlock
GetUserProfileDirectoryW
GetAllUsersProfileDirectoryW
GetDefaultUserProfileDirectoryW
DeleteProfileW
GetProfilesDirectoryW
RefreshPolicy

Sections

.text
Size: 283KB - Virtual size: 283KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 73KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 128KB - Virtual size: 131KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ee1826ef94fbf687bc75ea97090704b9

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

oleaut32

userenv

Sections

.text Size: 283KB - Virtual size: 283KB

.rdata Size: 73KB - Virtual size: 72KB

.data Size: 128KB - Virtual size: 131KB

.reloc Size: 10KB - Virtual size: 10KB

.text
Size: 283KB - Virtual size: 283KB

.rdata
Size: 73KB - Virtual size: 72KB

.data
Size: 128KB - Virtual size: 131KB

.reloc
Size: 10KB - Virtual size: 10KB