39224068eca1ce849659abfcbb615090N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

39224068eca1ce849659abfcbb615090N.exe
Size

52KB
MD5

39224068eca1ce849659abfcbb615090
SHA1

e31c02fa77072519d607d6dc8ec80d428e67057f
SHA256

91d8cbadcfb66c0e3eb07ff21405ab9441c4d5321a19472a0f0f63b80bf3227e
SHA512

a405a437e6da6718c4a495f83e09fb6585d301ea9689a2514b0c52d79187736388402a33025bad2533d863190dd6f7d143ed4323f951706a52b9d6bbf4a041df
SSDEEP

768:kXvxHhxBDnlnwviwSXlmaIowvIXo3H4Cmz266AOmbn57RWnk1YH3kQ82+t8Bw3yR:SvFY6Hma+vIj5z26Amqk1YXkz2bBwCR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
39224068eca1ce849659abfcbb615090N.exe

Files

39224068eca1ce849659abfcbb615090N.exe
.exe windows:5 windows x86 arch:x86

421fcc17b447d629820bcdf1e0d36f63

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\builds\moz2_slave\m-beta-w32-0000000000000000000\build\src\obj-firefox\media\libcubeb\tests\test_record.pdb

Imports

nss3

PR_GetEnv

xul

NS_CStringToUTF16
NS_GetServiceManager
NS_CStringContainerFinish
NS_CStringContainerInit2
NS_StringContainerFinish
NS_StringContainerInit2
NS_StringContainerInit
NS_NewLocalFile
NS_ShutdownXPCOM
NS_InitXPCOM2

mozglue

moz_xmalloc
realloc
free
_aligned_free
calloc
_strdup
malloc
_aligned_malloc

kernel32

IsDebuggerPresent
InterlockedPopEntrySList
GetModuleHandleW
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
WideCharToMultiByte
FreeLibrary
GetProcAddress
ResetEvent
LoadLibraryA
InitializeSListHead
CreateEventA
InterlockedPushEntrySList
VerSetConditionMask
DeleteCriticalSection
CloseHandle
InterlockedFlushSList
SetEvent
WaitForSingleObject
WaitForMultipleObjects
InitializeCriticalSection
LeaveCriticalSection
SetThreadPriority
EnterCriticalSection
MultiByteToWideChar
VerifyVersionInfoA
Sleep

user32

GetSystemMetrics

winmm

waveInMessage
waveOutClose
waveOutGetNumDevs
waveOutMessage
waveInGetDevCapsA
waveOutGetPosition
waveOutGetDevCapsA
waveOutPrepareHeader
waveOutOpen
waveOutPause
waveOutReset
waveInGetNumDevs
waveOutRestart
waveOutWrite
waveOutUnprepareHeader

ole32

CoUninitialize
CoCreateInstance
CoTaskMemFree
CoInitializeEx
PropVariantClear

vcruntime140

_purecall
memset
_except_handler4_common
memcpy
memmove

api-ms-win-crt-stdio-l1-1-0

__p__commode
__acrt_iob_func
putchar
__stdio_common_vfprintf
__stdio_common_vsnprintf_s
_set_fmode

api-ms-win-crt-runtime-l1-1-0

__p___argc
_configure_narrow_argv
_get_initial_narrow_environment
_set_app_type
_seh_filter_exe
_initterm
_initterm_e
_exit
_beginthreadex
abort
_wassert
exit
_initialize_narrow_environment
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
terminate
_controlfp_s
_crt_atexit
_register_onexit_function
_initialize_onexit_table

api-ms-win-crt-math-l1-1-0

round
__setusermatherr
_libm_sse2_sin_precise
ceil
floor
_except1

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_set_new_mode

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

421fcc17b447d629820bcdf1e0d36f63

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

nss3

xul

mozglue

kernel32

user32

winmm

ole32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 36KB - Virtual size: 36KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 512B - Virtual size: 944B

.gfids Size: 512B - Virtual size: 32B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 36KB - Virtual size: 36KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 512B - Virtual size: 944B

.gfids
Size: 512B - Virtual size: 32B

.reloc
Size: 2KB - Virtual size: 1KB