b3ecceb97aceb06c38c19a9f78758940N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

b3ecceb97aceb06c38c19a9f78758940N.exe
Size

315KB
MD5

b3ecceb97aceb06c38c19a9f78758940
SHA1

47c12667efaf4cabf03d96e76b0afd01164edc14
SHA256

cea9878991784e5eb0493b15c1fc8cde46bb0c0c0d1d195a6cd3199f7213d684
SHA512

8d76724dd41d20121d19e2ea86f242907d12bdd16f1be8030788f2b358fb11af4484407ad88d409b251654f2f217a5d2b0e75b078733cd1cf06bcd1b3ebca98f
SSDEEP

6144:kdocmoX0orBEO2ZtMyysvxTOimiwteihpN0jKyV:Lroz2ZzyspdmiwxAK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b3ecceb97aceb06c38c19a9f78758940N.exe

Files

b3ecceb97aceb06c38c19a9f78758940N.exe
.dll regsvr32 windows:6 windows x86 arch:x86

1c658bb71da4737acc0a9e0da3889b4d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dmime.pdb

Imports

ntdll

wcstombs
_allshr
_allmul
_alldiv
memset
memcpy
_CIpow
ord1
_CIsin
_CIsqrt

msvcrt

_XcptFilter
rand
free
malloc
_initterm
time
srand
_purecall
_amsg_exit
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
__CxxFrameHandler3

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
GetModuleFileNameA
lstrlenA
DisableThreadLibraryCalls
CreateThread
CreateEventA
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
InterlockedDecrement
DeleteCriticalSection
CloseHandle
WaitForSingleObject
SetEvent
GetCurrentThreadId
Sleep
SetThreadPriority

winmm

timeGetTime
timeEndPeriod
timeBeginPeriod

advapi32

RegEnumKeyA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
RegOpenKeyExA

ole32

StringFromCLSID
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
CreateStreamOnHGlobal

user32

GetForegroundWindow
IsWindow
GetDesktopWindow

dsound

ord11

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1c658bb71da4737acc0a9e0da3889b4d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ntdll

msvcrt

kernel32

winmm

advapi32

ole32

user32

dsound

Exports

Exports

Sections

.text Size: 162KB - Virtual size: 162KB

.data Size: 4KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 146KB - Virtual size: 145KB

.text
Size: 162KB - Virtual size: 162KB

.data
Size: 4KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 146KB - Virtual size: 145KB