109406c5a6cfa5f8bc575dce1889f850N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

109406c5a6cfa5f8bc575dce1889f850N.exe
Size

176KB
MD5

109406c5a6cfa5f8bc575dce1889f850
SHA1

3f95ca77720bc7e48fbd9521b4e429c6c0d77c5b
SHA256

acb2aefc8148f67d89412835a8f284f3799887b7ee94395376f01c8affe50268
SHA512

09efe352566962cfc95ae537765191b6be7991e56138b1f865aab203a0c5dad2424d5749b0d1cf21c6e7b4cf0bed35bb27f0b70a2f4a63d95ce0a6e388fc2047
SSDEEP

3072:niGsp/qN1NvC1xkIYtofmhhwkJyd9/4ZpEua/tBarCMSAgY2PdTJ0GSjXuX5DM:Lsp/qN1A/YtofmoSq9wZpY1BarFSPQXy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
109406c5a6cfa5f8bc575dce1889f850N.exe

Files

109406c5a6cfa5f8bc575dce1889f850N.exe
.exe windows:6 windows x86 arch:x86

096cf06f3b5fe4725c35591529370267

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

getaddrinfo

comctl32

InitCommonControlsEx
ImageList_Create
_TrackMouseEvent
ImageList_ReplaceIcon

crypt32

CryptMsgGetParam
CryptMsgClose
CertCloseStore
CertFreeCertificateContext
CertFindCertificateInStore
CryptQueryObject

kernel32

FlushFileBuffers
GetFileAttributesA
SetFilePointerEx
WriteFile
IsDebuggerPresent
EncodePointer
DuplicateHandle
SetHandleInformation
RaiseException
SetUnhandledExceptionFilter
GetLastError
SetLastError
CreatePipe
PeekNamedPipe
QueryPerformanceCounter
HeapAlloc
HeapFree
HeapSize
GetProcessHeap
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
ReleaseMutex
WaitForSingleObject
WaitForSingleObjectEx
CreateMutexA
CreateEventW
Sleep
SignalObjectAndWait
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
GetCurrentProcess
ExitProcess
TerminateProcess
GetExitCodeProcess
SwitchToThread
CreateThread
FindFirstFileExA
GetCurrentThreadId
SetThreadPriority
TerminateThread
TlsAlloc
TlsSetValue
TlsFree
CreateProcessA
GetStartupInfoW
SetPriorityClass
GetThreadTimes
GetSystemTimeAsFileTime
GetLocalTime
GetTickCount
GetVersionExW
GetLogicalProcessorInformation
VirtualAlloc
VirtualProtect
VirtualFree
MapViewOfFile
UnmapViewOfFile
UnregisterWaitEx
CreateTimerQueue
CreateTimerQueueTimer
DeleteTimerQueueTimer
FreeLibraryAndExitThread
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetModuleHandleExW
GetProcAddress
LoadLibraryExW
LoadLibraryA
LoadLibraryW
GetNumaHighestNodeNumber
LocalFree
FindClose
SetThreadAffinityMask
FormatMessageA
CreateSemaphoreA
CreateFileMappingA
RegisterWaitForSingleObject
UnregisterWait
CompareStringW
GetStringTypeW
MultiByteToWideChar
WideCharToMultiByte
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
LCMapStringW
AllocConsole
AttachConsole
GetConsoleCP
GetConsoleMode
WriteConsoleW
DeleteFileA
CreateFileW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
FindNextFileA
SetStdHandle
GetStdHandle
RtlUnwind
GetCurrentThread
GetProcessAffinityMask

user32

KillTimer
EnableWindow
LoadAcceleratorsA
TranslateAcceleratorA
SetMenu
CreateMenu
DestroyMenu
EnableMenuItem
AppendMenuA
ModifyMenuA
TrackPopupMenu
GetMenuItemInfoA
SetActiveWindow
GetDC
ReleaseDC
BeginPaint
EndPaint
InvalidateRect
RedrawWindow
GetPropA
RemovePropA
SetWindowTextA
GetClientRect
GetWindowRect
IsDlgButtonChecked
SetCursor
GetCursorPos
GetSysColor
GetSysColorBrush
FrameRect
GetWindowLongA
SetWindowLongA
GetParent
FindWindowA
LoadCursorA
LoadIconA
DestroyIcon
EnumDisplayMonitors
CheckRadioButton
ShowWindow
DestroyWindow
CreateWindowExA
CallWindowProcA
PostQuitMessage
DefWindowProcA
PostMessageA
SendMessageA
DispatchMessageA
TranslateMessage
GetMessageA
LoadStringA
CheckDlgButton
GetDlgItem
SetTimer
DialogBoxParamA
CreateDialogParamA
IsWindowVisible
MessageBoxA
SetWindowPos

gdi32

Rectangle
SetTextColor
CreateFontIndirectA
GetObjectA
CreateSolidBrush

comdlg32

GetOpenFileNameA

advapi32

InitiateSystemShutdownA
LookupPrivilegeValueA
RegCloseKey
RegOpenKeyExA
RegSetValueExA
AdjustTokenPrivileges

shell32

DragAcceptFiles
DragQueryFileA
SHGetPathFromIDListA
Shell_NotifyIconA
SHBrowseForFolderA
SHGetFolderPathA
SHGetMalloc

ole32

CoInitialize

Sections

.text
Size: 164KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 636B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

096cf06f3b5fe4725c35591529370267

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

comctl32

crypt32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

Sections

.text Size: 164KB - Virtual size: 164KB

.rdata Size: 6KB - Virtual size: 6KB

.data Size: 1024B - Virtual size: 636B

.CRT Size: 512B - Virtual size: 4B

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 164KB - Virtual size: 164KB

.rdata
Size: 6KB - Virtual size: 6KB

.data
Size: 1024B - Virtual size: 636B

.CRT
Size: 512B - Virtual size: 4B

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 2KB - Virtual size: 1KB