12a2dcc9399b6c9056e5c59ece781640N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

12a2dcc9399b6c9056e5c59ece781640N.exe
Size

1.8MB
MD5

12a2dcc9399b6c9056e5c59ece781640
SHA1

6ee941829ac387ecc1598a0fb1d3b8fe19b83678
SHA256

92e3938cd9268bd6c657dbede64f57563b8b24421cb79550af89298859dd4a4f
SHA512

e2b77fc041625ba5c9d5738fea3ba840aed9fd676a68a9e7b0927cfbb8837b841f4aa201713567866504ecae8b0478b5314eeb4fff5f129326f4a35b83df7f74
SSDEEP

12288:tQAI6TTgqvY7JNulyirytykkNLfXlwBI+qvAS1trezyMIr06eSi:JIMTe7Jk3NL/lrrRr06eL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
12a2dcc9399b6c9056e5c59ece781640N.exe

Files

12a2dcc9399b6c9056e5c59ece781640N.exe
.dll windows:6 windows x86 arch:x86

05e23b9ad763da31a67e8df30a4cae14

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d3dim700.pdb

Imports

msvcrt

_onexit
_lock
__dllonexit
_unlock
_except_handler4_common
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_amsg_exit
_initterm
free
malloc
_XcptFilter
_CIcos
_CIsqrt
_ftol2
fopen
fclose
fflush
fseek
ftell
fwrite
_purecall
memcpy
??2@YAPAXI@Z
_CIexp
_CIpow
_ftol2_sse
_vsnprintf
exp
__CxxFrameHandler3
_CxxThrowException
??3@YAXPAX@Z
memset

user32

IntersectRect
IsRectEmpty

advapi32

RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey

ddraw

ReleaseDDThreadLock
CompleteCreateSysmemSurface
D3DParseUnknownCommand
DDInternalUnlock
DDInternalLock
AcquireDDThreadLock

kernel32

QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
LoadLibraryA
GetProcAddress
GetTickCount
GetModuleHandleA
GetModuleFileNameA
GetSystemInfo
GetVersionExA
GetCurrentProcessId
FreeLibrary
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LocalAlloc
LocalFree
LocalReAlloc
VirtualAlloc
VirtualFree
DisableThreadLibraryCalls

Exports

Exports

CreateTexture
D3DBreakVBLock
D3DFree
D3DMalloc
D3DRealloc
D3DTextureUpdate
DestroyTexture
Direct3DCreate
Direct3DCreateDevice
Direct3D_HALCleanUp
FlushD3DDevices
GetLOD
GetPriority
PaletteAssociateNotify
PaletteUpdateNotify
SetLOD
SetPriority
SurfaceFlipNotify

Sections

.text
Size: 759KB - Virtual size: 759KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

05e23b9ad763da31a67e8df30a4cae14

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

user32

advapi32

ddraw

kernel32

Exports

Exports

Sections

.text Size: 759KB - Virtual size: 759KB

.data Size: 22KB - Virtual size: 29KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 154KB - Virtual size: 153KB

.text
Size: 759KB - Virtual size: 759KB

.data
Size: 22KB - Virtual size: 29KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 154KB - Virtual size: 153KB