b5aaca1962dc816659db2ef7f94ca450N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

b5aaca1962dc816659db2ef7f94ca450N.exe
Size

3.2MB
MD5

b5aaca1962dc816659db2ef7f94ca450
SHA1

29e4bbd0615b6bdb3b28a9e737880ca06eaaed09
SHA256

30d50be900e7e9dd087b22b299c920b6578abba5f85ba84e8fdddcc2b7d3eac4
SHA512

aacbbaf3a5d1e3f28a70fa4e4b44aef5bf2128417a4cc0f8fdbf1af778b04af88409856383382880f0f93328f1d1246045c2079c3c4a61e80917a1db8e15e48e
SSDEEP

98304:HboGyGKG3GzGjG7GEGnGyGVG+GIGjGjG:HboGyGKG3GzGjG7GEGnGyGVG+GIGjGjG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b5aaca1962dc816659db2ef7f94ca450N.exe

Files

b5aaca1962dc816659db2ef7f94ca450N.exe
.dll windows:6 windows x64 arch:x64

6e93fb537dfb3b0c279cac2c5318fd65

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\DISQO-Dev\vcpkg\buildtrees\brotli\x64-windows-rel\brotlienc.pdb

Imports

brotlicommon

BrotliDefaultFreeFunc
BrotliDefaultAllocFunc
BrotliGetTransforms
BrotliGetDictionary
_kBrotliPrefixCodeRanges
_kBrotliContextLookupTable

vcruntime140

memcpy
memset
memmove
__C_specific_handler
__std_type_info_destroy_list

api-ms-win-crt-math-l1-1-0

log2

api-ms-win-crt-runtime-l1-1-0

exit
_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_seh_filter_dll
_initterm_e
_initterm
_configure_narrow_argv

api-ms-win-crt-heap-l1-1-0

malloc

kernel32

GetCurrentProcessId
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetCurrentThreadId

Exports

Exports

BrotliEncoderAttachPreparedDictionary
BrotliEncoderCompress
BrotliEncoderCompressStream
BrotliEncoderCreateInstance
BrotliEncoderDestroyInstance
BrotliEncoderDestroyPreparedDictionary
BrotliEncoderHasMoreOutput
BrotliEncoderIsFinished
BrotliEncoderMaxCompressedSize
BrotliEncoderPrepareDictionary
BrotliEncoderSetParameter
BrotliEncoderTakeOutput
BrotliEncoderVersion

Sections

.text
Size: 306KB - Virtual size: 305KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.9MB - Virtual size: 2.9MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6e93fb537dfb3b0c279cac2c5318fd65

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

brotlicommon

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 306KB - Virtual size: 305KB

.rdata Size: 2.9MB - Virtual size: 2.9MB

.data Size: 1024B - Virtual size: 2KB

.pdata Size: 6KB - Virtual size: 5KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 52B

.text
Size: 306KB - Virtual size: 305KB

.rdata
Size: 2.9MB - Virtual size: 2.9MB

.data
Size: 1024B - Virtual size: 2KB

.pdata
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 52B