66eefa6c073ad14fcae58236ce3499c0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

66eefa6c073ad14fcae58236ce3499c0N.exe
Size

788KB
MD5

66eefa6c073ad14fcae58236ce3499c0
SHA1

7650506dedc82c9a0c38233e019f53b9a450bdbe
SHA256

e02cc52164c72e90402431eebf068c1850ce6c49c6165a3d099d2903634872bc
SHA512

2d2a0d470a3236e6e80f5c6e1dbe4f3a6aed331ae23fa11b9a3ed88cba34b2302894dfb528ccc50b145b89fe86fc3b0094e593c664d0c74b276a089ac7b0c55a
SSDEEP

24576:wvwCOcWtSpwZV8rfBLL6gsONYNQQpk48NruvBThxr:zrAymfckBr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66eefa6c073ad14fcae58236ce3499c0N.exe

Files

66eefa6c073ad14fcae58236ce3499c0N.exe
.exe windows:6 windows x86 arch:x86

9bdd9a59eb8d1bbad4c1e0b3dca2d857

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

pdbstr.pdb

Imports

kernel32

LCMapStringW
VirtualAlloc
GetSystemInfo
GetVersion
LocalFree
LocalAlloc
FlushViewOfFile
MapViewOfFileEx
SetFilePointer
UnmapViewOfFile
InitializeCriticalSectionAndSpinCount
MultiByteToWideChar
EnterCriticalSection
DeleteCriticalSection
GetFileType
CreateFileW
CreateFileMappingW
DeviceIoControl
DeleteFileW
InterlockedDecrement
InterlockedIncrement
VirtualFree
SetLastError
CopyFileW
GetFileAttributesW
SetFileAttributesW
WideCharToMultiByte
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
RtlUnwind
OutputDebugStringA
InterlockedCompareExchange
Sleep
InterlockedExchange
GetLastError
CreateFileA
GetFileSize
ReadFile
CloseHandle
GetFileAttributesA
LoadLibraryA
GetProcAddress
LeaveCriticalSection
FreeLibrary

msvcrt

_snprintf
_itoa
wctomb
ferror
__pioinfo
_read
_fileno
_lseeki64
_write
_isatty
__badioinfo
isleadbyte
mbtowc
_onexit
_lock
__dllonexit
_unlock
_controlfp
?terminate@@YAXXZ
malloc
memmove
memcpy
memset
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
__getmainargs
_iob
__mb_cur_max
strchr
wcschr
_errno
??2@YAPAXI@Z
??3@YAXPAX@Z
printf
calloc
fopen
fputs
fclose
puts
free
wcsrchr
_purecall
time
_wfullpath
strstr
bsearch
_wcsicmp
qsort
_wcsnicmp
_wcsdup
_stricmp
_get_osfhandle
_chsize
_close
_open_osfhandle
_memicmp
_mbscmp
wcsncmp
iswdigit
__unDName
wcstol
strncmp
_wsopen

rpcrt4

UuidCreate

Sections

.text
Size: 459KB - Virtual size: 458KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 1016B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 322KB - Virtual size: 324KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9bdd9a59eb8d1bbad4c1e0b3dca2d857

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcrt

rpcrt4

Sections

.text Size: 459KB - Virtual size: 458KB

.data Size: 5KB - Virtual size: 8KB

.rsrc Size: 1024B - Virtual size: 1016B

.reloc Size: 322KB - Virtual size: 324KB

.text
Size: 459KB - Virtual size: 458KB

.data
Size: 5KB - Virtual size: 8KB

.rsrc
Size: 1024B - Virtual size: 1016B

.reloc
Size: 322KB - Virtual size: 324KB