abb7c8922854cab2d18b6c5fb526ef90N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

abb7c8922854cab2d18b6c5fb526ef90N.exe
Size

242KB
MD5

abb7c8922854cab2d18b6c5fb526ef90
SHA1

79d33f3b97954cc3e38eafd9a1f7418954c732fd
SHA256

3fae2c68172d36b042db849f65940c609e2280e35df8122ec961430daf76ecdf
SHA512

c98fd002a1cbd1f1528b97ee512c9711fa99985a7cee61f7002c35f65fa2953f9b1ae87336307f40392dda363b201d2d041aaf8445a8434aec7c567282fc1454
SSDEEP

6144:hlZdjtC+geugJOQsQEsSIzc7HpcbF9aLNm3RkETFLR+heDS86Pjy9u280JVPBPVn:jZdjtC+geugJOQsQEsSIzc7HpcbF9aLu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
abb7c8922854cab2d18b6c5fb526ef90N.exe

Files

abb7c8922854cab2d18b6c5fb526ef90N.exe
.exe windows:4 windows x86 arch:x86

4f6aec47f8182ae63e08ec47c7c868b1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
_onexit
__p__fmode
__set_app_type
_controlfp
__dllonexit
_CIpow
printf
_CIacos
calloc
_beginthreadex
_strupr
wcscpy
atoi
wcstombs
wcslen
mbstowcs
_access
putchar
rand
strstr
strncat
vsprintf
exit
??1type_info@@UAE@XZ
_CxxThrowException
??3@YAXPAX@Z
fopen
fwrite
fclose
strrchr
_except_handler3
free
malloc
_ftol
memmove
??2@YAPAXI@Z
__CxxFrameHandler
__p__commode

kernel32

LocalFree
LoadLibraryA
Sleep
CloseHandle
WaitForSingleObject
SetEvent
lstrcatA
InterlockedDecrement
GetLastError
MultiByteToWideChar
lstrlenA
CreateThread
WideCharToMultiByte
GetStartupInfoA
GetModuleHandleA
GetExitCodeThread
TerminateThread
GetProcAddress

user32

PostThreadMessageA
SendMessageA
CreateWindowExA
IsWindow
GetMessageA

ws2_32

socket
gethostbyname
ntohs
recv
send
htons
connect
setsockopt
WSACleanup
WSAStartup
select
getsockname
gethostname
closesocket

msvcp60

?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?_Xran@std@@YAXXZ
?_Split@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Refcnt@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEAAEPBD@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z

ole32

CLSIDFromString
CLSIDFromProgID
CoCreateInstance
OleRun
CoInitialize
CoUninitialize

oleaut32

SysFreeString
SysAllocString
GetErrorInfo
VariantClear

msvfw32

ICSendMessage

winmm

waveInAddBuffer
waveOutClose
waveOutOpen
waveOutUnprepareHeader
waveInStart
waveOutPrepareHeader
waveInReset
waveInOpen
waveInClose
waveInUnprepareHeader
waveInPrepareHeader
waveOutWrite

Sections

PAGE
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 214KB - Virtual size: 213KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4f6aec47f8182ae63e08ec47c7c868b1

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

ws2_32

msvcp60

ole32

oleaut32

msvfw32

winmm

Sections

PAGE Size: 26KB - Virtual size: 26KB

.data Size: 214KB - Virtual size: 213KB

.rsrc Size: 1024B - Virtual size: 4KB

PAGE
Size: 26KB - Virtual size: 26KB

.data
Size: 214KB - Virtual size: 213KB

.rsrc
Size: 1024B - Virtual size: 4KB