b92c4f3b24c0772241f5ec985be12c3070858c0922155ff6d2c88410a593a5b0[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

b92c4f3b24c0772241f5ec985be12c3070858c0922155ff6d2c88410a593a5b0.exe
Size

538KB
MD5

9ef88513c03fe6f865123205ccc83097
SHA1

be1d9d7f4aa6f4fe7bc111a72edcf972f8a6360f
SHA256

b92c4f3b24c0772241f5ec985be12c3070858c0922155ff6d2c88410a593a5b0
SHA512

0ab6a996a4dadf7852bcb34936c64be757e7426f49bd693fc815e1c5888255fe24d6124fca69c3f3567a6d3ae280607d151d1731a6de471299af49b94258b2f0
SSDEEP

6144:utPGgri0txv5z42AkBejR64TjyY/9HVgoh6OGZbez:ir3txZ42vGR64TjROooOK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b92c4f3b24c0772241f5ec985be12c3070858c0922155ff6d2c88410a593a5b0.exe

Files

b92c4f3b24c0772241f5ec985be12c3070858c0922155ff6d2c88410a593a5b0.exe
.exe windows:6 windows x64 arch:x64

579eedde336129a7589279b2113961c2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

EnumCalendarInfoW
WriteFile
CreateFileW
GetCurrentDirectoryA
CloseHandle
FreeConsole
LoadLibraryW
GetProcAddress
GlobalMemoryStatusEx
SetEndOfFile
WriteConsoleW
HeapSize
GetProcessHeap
SetStdHandle
GetLastError
WideCharToMultiByte
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
EncodePointer
DecodePointer
GetCPInfo
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetStdHandle
GetModuleFileNameW
GetCommandLineA
GetCommandLineW
GetFileSizeEx
SetFilePointerEx
GetFileType
HeapAlloc
HeapFree
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
GetConsoleOutputCP
GetConsoleMode
HeapReAlloc
ReadFile
ReadConsoleW
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
RtlUnwind

shell32

ShellExecuteW

d3d9

Direct3DCreate9

Sections

.text
Size: 247KB - Virtual size: 246KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 98KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gxfg
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gehcont
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

579eedde336129a7589279b2113961c2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

d3d9

Sections

.text Size: 247KB - Virtual size: 246KB

.rdata Size: 98KB - Virtual size: 98KB

.data Size: 5KB - Virtual size: 11KB

.pdata Size: 17KB - Virtual size: 16KB

.gxfg Size: 8KB - Virtual size: 8KB

.gehcont Size: 512B - Virtual size: 32B

.rsrc Size: 157KB - Virtual size: 156KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 247KB - Virtual size: 246KB

.rdata
Size: 98KB - Virtual size: 98KB

.data
Size: 5KB - Virtual size: 11KB

.pdata
Size: 17KB - Virtual size: 16KB

.gxfg
Size: 8KB - Virtual size: 8KB

.gehcont
Size: 512B - Virtual size: 32B

.rsrc
Size: 157KB - Virtual size: 156KB

.reloc
Size: 3KB - Virtual size: 3KB