1d59bc782e532780da0364b14a1b474a8cb8a5af50c8124159bf5d943bd050f7[.]exe

Resubmissions

15/07/2024, 11:47

240715-nycxzaxfng 7

12/04/2024, 14:35

240412-rx1t7abb98 7

09/02/2024, 12:35

240209-psb9xsba9z 7

Sharing

Copy URL Twitter E-mail

General

Target

1d59bc782e532780da0364b14a1b474a8cb8a5af50c8124159bf5d943bd050f7.exe
Size

4.9MB
MD5

5134e6925ff1397fdda0f3b48afec87b
SHA1

e443dc35f4d1456284d93463392f137e9c9eb883
SHA256

1d59bc782e532780da0364b14a1b474a8cb8a5af50c8124159bf5d943bd050f7
SHA512

8279fd5d9d06c259c425744dfa1d545b44e1f3d3f03c0051584bb40d26d507966864d5d5fefb8b6102bafcf525b9688ba48bed578151016e0b9ee43330df0abf
SSDEEP

24576:sieRfHJIGN2GmofJymJbRLe7ozFVMVYDnpe/iniPG1XAPfuEzOzdQ8g3LEsPgt/F:k1grij200JFsGGu

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1d59bc782e532780da0364b14a1b474a8cb8a5af50c8124159bf5d943bd050f7.exe

Files

1d59bc782e532780da0364b14a1b474a8cb8a5af50c8124159bf5d943bd050f7.exe
.dll regsvr32 windows:4 windows x64 arch:x64

e923fd2ee2558942eafbec4a9773e68a

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
QueryPerformanceCounter
RtlAddFunctionTable
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery

msvcrt

__iob_func
_amsg_exit
_fileno
_initterm
_lock
_setjmp
_setmode
_unlock
abort
calloc
exit
fflush
fprintf
fputc
free
fwrite
longjmp
memchr
memcpy
memmove
memset
printf
realloc
signal
strcmp
strlen
strncmp
strstr
vfprintf

Exports

Exports

ClearReportsBetween_ExportThunk
CrashForException_ExportThunk
DisableHook
DllInstall
DllRegisterServer
DllUnregisterServer
DrainLog
DumpHungProcessWithPtype_ExportThunk
DumpProcessWithoutCrash
GetApplyHookResult
GetBlockedModulesCount
GetCrashReports_ExportThunk
GetCrashpadDatabasePath_ExportThunk
GetHandleVerifier
GetInstallDetailsPayload
GetUniqueBlockedModulesCount
GetUserDataDirectoryThunk
InjectDumpForHungInput_ExportThunk
IsBrowserProcess
IsExtensionPointDisableSet
IsThirdPartyInitialized
RegisterLogNotification
RequestSingleCrashUpload_ExportThunk
SetMetricsClientId
SetUploadConsent_ExportThunk
SignalChromeElf
SignalInitializeCrashReporting

Sections

.text
Size: 110KB - Virtual size: 109KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 272B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4.5MB - Virtual size: 4.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 86KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 993B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 354KB - Virtual size: 353KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

e923fd2ee2558942eafbec4a9773e68a

Headers

File Characteristics

Imports

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 110KB - Virtual size: 109KB

.data Size: 512B - Virtual size: 272B

.rdata Size: 4.5MB - Virtual size: 4.5MB

.pdata Size: 5KB - Virtual size: 4KB

.xdata Size: 4KB - Virtual size: 4KB

.bss Size: - Virtual size: 86KB

.edata Size: 1024B - Virtual size: 993B

.idata Size: 2KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 354KB - Virtual size: 353KB

.text
Size: 110KB - Virtual size: 109KB

.data
Size: 512B - Virtual size: 272B

.rdata
Size: 4.5MB - Virtual size: 4.5MB

.pdata
Size: 5KB - Virtual size: 4KB

.xdata
Size: 4KB - Virtual size: 4KB

.bss
Size: - Virtual size: 86KB

.edata
Size: 1024B - Virtual size: 993B

.idata
Size: 2KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 354KB - Virtual size: 353KB