531a23cab4823ee98661c333b7836580N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

531a23cab4823ee98661c333b7836580N.exe
Size

284KB
MD5

531a23cab4823ee98661c333b7836580
SHA1

ccede7c47d2e4b40d57af8b17776f639a3499bc3
SHA256

4030032e8543505c022e35eb2dd81b35625e325d72e85d58d33bb56babdb95c8
SHA512

44110ec77f268d931d2f4e28e3076162b1042272dfd991df3e0a036a2f4f6ed5f034912a17976518529b2162087ef04b06641fb3e2cbe626a2298b7a92dc75bd
SSDEEP

3072:7aTzXSejPtR/8eogPALDSGkyHj66fvJK5fMpeQ2r+OOufP9JsSx9+lpSGw7JtOyp:AD/6fARHZpp8F4i1eL70QjwS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
531a23cab4823ee98661c333b7836580N.exe

Files

531a23cab4823ee98661c333b7836580N.exe
.dll windows:5 windows x86 arch:x86

5fb0674c7d61848de66230f38c6fb6bf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetPrivateProfileIntA
CreateEventA
HeapCreate
GetSystemDirectoryA
GetLastError
SetLastError
GetProcAddress
GetPrivateProfileStringA
GetLocalTime
LoadLibraryA
CreatePipe
SetEnvironmentVariableA
GetModuleFileNameA
HeapFree
DuplicateHandle
CloseHandle
GetCurrentProcessId
DeleteFileA
CreateThread
GetCurrentDirectoryA
SetCurrentDirectoryA
CreateFileA
GetFileTime
GetCommandLineA
FlushInstructionCache
GetCurrentProcess
HeapAlloc
ExitProcess
GetModuleHandleA
CreateDirectoryA
VirtualProtect
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent

user32

MessageBoxA

advapi32

RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

wininet

DeleteUrlCacheEntryA
InternetCheckConnectionA

urlmon

URLDownloadToFileA

msvcr110

_purecall
fgetc
ftell
fseek
_stricmp
sprintf_s
??_U@YAPAXI@Z
_vsnprintf_s
fopen_s
fgets
wcsstr
??_V@YAXPAX@Z
strcpy_s
strrchr
strcat_s
fprintf_s
memchr
fread
_snprintf
__crtUnhandledException
__crtTerminateProcess
_lock
_unlock
_calloc_crt
__dllonexit
_onexit
??1type_info@@UAE@XZ
__CppXcptFilter
_amsg_exit
free
_malloc_crt
_initterm
_initterm_e
_except_handler4_common
?terminate@@YAXXZ
__clean_type_info_names_internal
memmove
??2@YAPAXI@Z
fclose
??3@YAXPAX@Z
fopen
_crt_debugger_hook
printf
atoi
strstr
isspace
memcpy
_CxxThrowException
fwrite
_ultoa
memset
__CxxFrameHandler3

msvcp110

?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Syserror_map@std@@YAPBDH@Z
?_Winerror_map@std@@YAPBDH@Z

Exports

Exports

Breakpad_SetSteamID
Breakpad_SteamMiniDumpInit
Breakpad_SteamSetAppID
Breakpad_SteamWriteMiniDumpSetComment
Breakpad_SteamWriteMiniDumpUsingExceptionInfoWithBuildId
CheckMilesUse
CreateInterface
OPENSSL_Applink
Steam_BConnected
Steam_BGetCallback
Steam_BLoggedOn
Steam_BReleaseSteamPipe
Steam_ConnectToGlobalUser
Steam_CreateGlobalUser
Steam_CreateLocalUser
Steam_CreateSteamPipe
Steam_FreeLastCallback
Steam_GSBLoggedOn
Steam_GSBSecure
Steam_GSGetSteam2GetEncryptionKeyToSendToNewClient
Steam_GSGetSteamID
Steam_GSLogOff
Steam_GSLogOn
Steam_GSRemoveUserConnect
Steam_GSSendSteam2UserConnect
Steam_GSSendSteam3UserConnect
Steam_GSSendUserDisconnect
Steam_GSSendUserStatusResponse
Steam_GSSetServerType
Steam_GSSetSpawnCount
Steam_GSUpdateStatus
Steam_GetAPICallResult
Steam_GetGSHandle
Steam_InitiateGameConnection
Steam_LogOff
Steam_LogOn
Steam_ReleaseUser
Steam_SetLocalIPBinding
Steam_TerminateGameConnection

Sections

.text
Size: 128KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5fb0674c7d61848de66230f38c6fb6bf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

wininet

urlmon

msvcr110

msvcp110

Exports

Exports

Sections

.text Size: 128KB - Virtual size: 128KB

.rdata Size: 115KB - Virtual size: 114KB

.data Size: 7KB - Virtual size: 12KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 30KB - Virtual size: 30KB

.text
Size: 128KB - Virtual size: 128KB

.rdata
Size: 115KB - Virtual size: 114KB

.data
Size: 7KB - Virtual size: 12KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 30KB - Virtual size: 30KB