270a61ab429ea9b300b20d635656af20N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

270a61ab429ea9b300b20d635656af20N.exe
Size

588KB
MD5

270a61ab429ea9b300b20d635656af20
SHA1

cf556ec3c9a8ab7ed1dd995adf30d798ff7103a6
SHA256

0db6520a67d375351a671127636b4a51f8cbfa79b2ca6403c9fe0a625d4cfce0
SHA512

642053662f4e0ddd2b9773f412a8f3d68ce940b8897790071b34af05856485ce9797af23fadf161feaf5c72ab87e5caef4bbac547fe454a5bd1f3c0b79fd81d6
SSDEEP

6144:TLODHUqM6YpRHUS3WurJhmuaUZPNzBt83U7R5vjWZ7PR1:f2HUGYlPXt83Ul5LgR1

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
270a61ab429ea9b300b20d635656af20N.exe

Files

270a61ab429ea9b300b20d635656af20N.exe
.dll windows:4 windows x86 arch:x86

796b39721923d8879d7e777c0c9631d9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

SetLastError
GetLastError
EnumResourceLanguagesW
GetVersion
ConvertDefaultLocale
GlobalDeleteAtom
GlobalAlloc
GlobalLock
GetCurrentThreadId
GetCurrentThread
SizeofResource
LockResource
LoadResource
CloseHandle
LoadLibraryA
LocalAlloc
LocalFree
LeaveCriticalSection
GlobalReAlloc
GlobalUnlock
GlobalHandle
EnterCriticalSection
TlsGetValue
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
DeleteCriticalSection
GlobalFree
TlsFree
InterlockedDecrement
SetErrorMode
InterlockedIncrement
GlobalFlags
RaiseException
GetVersionExA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
GetCurrentProcess
GetCommandLineA
ExitProcess
RtlUnwind
TerminateProcess
HeapFree
HeapAlloc
HeapSize
HeapReAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
IsBadWritePtr
SetUnhandledExceptionFilter
GetOEMCP
IsBadReadPtr
IsBadCodePtr
GetStringTypeA
LCMapStringA
SetStdHandle
GetSystemDirectoryA
GetWindowsDirectoryA
GetModuleFileNameA
GetModuleHandleA
CompareStringA
FreeLibrary
GetLocaleInfoA
GetACP
InterlockedExchange

comctl32

ord17

shlwapi

PathFindFileNameW
PathFindExtensionW

oleaut32

VariantClear
VariantChangeType
VariantInit

advapi32

RegCloseKey

user32

IsIconic
SystemParametersInfoA
AdjustWindowRectEx
GetMenu
GetClientRect
SetForegroundWindow
MapWindowPoints
GetMessagePos
GetMessageTime
GetWindowPlacement
GetTopWindow
GetForegroundWindow
GetCapture
DestroyMenu
TranslateMessage
GetActiveWindow
IsWindowVisible
GetKeyState
GetCursorPos
ValidateRect
SetCursor
PostQuitMessage
CopyRect
SetWindowPos
ShowWindow
GetDlgItem
GetSystemMetrics
GetSysColorBrush
GetMenuItemID
GetSubMenu
GetSysColor
ReleaseDC
GetDC
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
PtInRect
GetLastActivePopup
IsWindowEnabled
GetMenuItemCount
UnhookWindowsHookEx
SetMenuItemBitmaps
GetFocus
GetParent
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
DestroyWindow
CallNextHookEx

gdi32

SetBkColor
RestoreDC
DeleteObject
SetTextColor
SetMapMode
GetClipBox
SaveDC
CreateBitmap
GetDeviceCaps
GetStockObject
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
RectVisible
PtVisible

winspool.drv

ClosePrinter

Sections

.text
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 440KB - Virtual size: 438KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 20KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

796b39721923d8879d7e777c0c9631d9

Headers

File Characteristics

Imports

kernel32

comctl32

shlwapi

oleaut32

advapi32

user32

gdi32

winspool.drv

Sections

.text Size: 92KB - Virtual size: 90KB

.rdata Size: 24KB - Virtual size: 22KB

.data Size: 8KB - Virtual size: 21KB

.rsrc Size: 440KB - Virtual size: 438KB

.reloc Size: 20KB - Virtual size: 18KB

.text
Size: 92KB - Virtual size: 90KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 8KB - Virtual size: 21KB

.rsrc
Size: 440KB - Virtual size: 438KB

.reloc
Size: 20KB - Virtual size: 18KB