5b4debfe1f2a59e63e890d0bd24812a0N[.]exe

General

Target

5b4debfe1f2a59e63e890d0bd24812a0N.exe
Size

151KB
MD5

5b4debfe1f2a59e63e890d0bd24812a0
SHA1

eddf46869552c70d4c3519cbae4f9f8d5d2bbad7
SHA256

97ebd42ed09f25e193380d05a1103576a9624945948e16a06786995330d33d44
SHA512

794d5fc5cfaf2101e3bccbfdcedc0fe9f053ae7e9328edec0040b5b3e36f594e29f923a89884f0fbc34880b82cb2fba4ddc901296aa19f5e8c6e41c03de6d0c8
SSDEEP

3072:UK/sU2Ta1+oK1vl8vCVxWBHv7V+0S1nXKiG5hlxksNel:UKkU2Ta1+oK1vuvUWh7kKik+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b4debfe1f2a59e63e890d0bd24812a0N.exe

Files

5b4debfe1f2a59e63e890d0bd24812a0N.exe
.exe windows:4 windows x64 arch:x64

9c14c840f0417aec34641bb999a43a00

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcr80

sprintf
fwrite
atoi
atol
fgets
memcpy
memset
memmove
memcmp
_amsg_exit
__getmainargs
__C_specific_handler
_XcptFilter
_exit
_cexit
perror
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
_fmode
_encode_pointer
__set_app_type
__crt_debugger_hook
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
fflush
fseek
ftell
printf
_wassert
fopen
fread
fclose
free
malloc
exit
strncmp
__iob_func
fprintf
strchr
clock
__initenv
_time64
_strnicmp

kernel32

GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
Sleep
GetCurrentThread
GetThreadTimes
GetCurrentProcess
GetProcessTimes
GetSystemTimeAsFileTime

Sections

.text
Size: 120KB - Virtual size: 120KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9c14c840f0417aec34641bb999a43a00

Headers

DLL Characteristics

File Characteristics

Imports

msvcr80

kernel32

Sections

.text Size: 120KB - Virtual size: 120KB

.rdata Size: 24KB - Virtual size: 24KB

.data Size: 512B - Virtual size: 3KB

.pdata Size: 4KB - Virtual size: 4KB

.text
Size: 120KB - Virtual size: 120KB

.rdata
Size: 24KB - Virtual size: 24KB

.data
Size: 512B - Virtual size: 3KB

.pdata
Size: 4KB - Virtual size: 4KB