7f579ed51d50dfa45060b3e0f60027d0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

7f579ed51d50dfa45060b3e0f60027d0N.exe
Size

640KB
MD5

7f579ed51d50dfa45060b3e0f60027d0
SHA1

5366f521166a1fbe2b637c45e8f1c3732c9503ef
SHA256

0bcb886c8edc342ad64d10863d968735532133b5b6f4c1922bf302b96b07a871
SHA512

ef77827a38b86d0450e16cdbc171eccc7bdd68ef5ef61c57e0b472ebb87cd55615eb73c5e6cdbb6b6c4278d5c6fc7dd30d751af73bee3b7a9468036a4ed9f60d
SSDEEP

12288:ZZqZiMwQJXx6a/YvRcFKBsX9Da2XbJda3Q93i8OPowY79pk/DCWN:6ZiUJXca/VQBIe2dhi8OP3YGv

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7f579ed51d50dfa45060b3e0f60027d0N.exe

Files

7f579ed51d50dfa45060b3e0f60027d0N.exe
.exe windows:10 windows x64 arch:x64

288c77221ee9a27f869b542320d273ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

CertMgr.pdb

Imports

msvcrt

_exit
_cexit
__setusermatherr
_initterm
_XcptFilter
__C_specific_handler
_fmode
_commode
?terminate@@YAXXZ
__set_app_type
wprintf
strtok
_vsnwprintf
realloc
printf
_wasctime
free
scanf
_wtol
towupper
memset
__wgetmainargs
exit
_amsg_exit
_wcsicmp
vwprintf
malloc
memcmp
memcpy
strcmp

user32

LoadStringW
LoadStringA

crypt32

CertGetCRLFromStore
CertDuplicateCTLContext
CryptFreeOIDFunctionAddress
CertGetCertificateContextProperty
CertGetCRLContextProperty
CryptStringToBinaryW
CertAddEncodedCTLToStore
CertOpenStore
CryptInstallOIDFunctionAddress
CertGetCTLContextProperty
CertFindCertificateInStore
CertSetCertificateContextProperty
CertEnumCTLsInStore
CertRDNValueToStrW
CryptEncodeObject
CryptMsgGetParam
CertCloseStore
CryptSIPLoad
CertEnumCertificateContextProperties
CertDeleteCRLFromStore
CertDeleteCertificateFromStore
CertDuplicateCRLContext
CryptHashPublicKeyInfo
CryptDecodeObject
CertFreeCTLContext
CertAddEncodedCertificateToStore
CertGetPublicKeyLength
CryptSIPRetrieveSubjectGuid
CryptMsgClose
CryptMsgUpdate
CryptGetOIDFunctionAddress
CryptInitOIDFunctionSet
CertRDNValueToStrA
CertFreeCRLContext
CertDeleteCTLFromStore
CertFreeCertificateContext
CryptStringToBinaryA
CryptFindOIDInfo
CertAddCRLContextToStore
CertAddCertificateContextToStore
CryptMsgGetAndVerifySigner
CryptMsgOpenToDecode
CertSaveStore
CertFindCTLInStore
CertEnumCertificatesInStore
CertAddEncodedCRLToStore
CertAddCTLContextToStore
CertDuplicateCertificateContext

cryptui

CryptUIDlgCertMgr

advapi32

CryptAcquireContextA
CryptReleaseContext

kernel32

CreateFileMappingA
CreateFileW
WriteFile
GetSystemTime
SystemTimeToFileTime
MultiByteToWideChar
CompareFileTime
GetFileSize
HeapSetInformation
CloseHandle
FileTimeToSystemTime
GetLastError
GetModuleHandleA
UnmapViewOfFile
SetLastError
WideCharToMultiByte
FileTimeToLocalFileTime
RtlLookupFunctionEntry
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
Sleep
SetUnhandledExceptionFilter
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
RtlCaptureContext
MapViewOfFile
RtlVirtualUnwind

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 568KB - Virtual size: 572KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

288c77221ee9a27f869b542320d273ef

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

user32

crypt32

cryptui

advapi32

kernel32

Sections

.text Size: 38KB - Virtual size: 37KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 10KB

.pdata Size: 1KB - Virtual size: 1KB

.rsrc Size: 23KB - Virtual size: 22KB

.reloc Size: 568KB - Virtual size: 572KB

.text
Size: 38KB - Virtual size: 37KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 10KB

.pdata
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 23KB - Virtual size: 22KB

.reloc
Size: 568KB - Virtual size: 572KB