5de0eef38d5fa811c8867dc907141f80N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

5de0eef38d5fa811c8867dc907141f80N.exe
Size

201KB
MD5

5de0eef38d5fa811c8867dc907141f80
SHA1

5bdc2625bc43c0de407483a2849aa6c4289004e1
SHA256

bff02afaee4749c46860d5510eb7445a6ef0afc5404f4f94f0d23ca4684e07b9
SHA512

88fbf6a61c7a784460bb5db2a7d142a7a19959355789413dcfbceb0069011dca819acf49e833d0c97ad63f6f75b01478c0f2964ff6fbfaa26a7aaf820e7b6ca6
SSDEEP

3072:a6CulfiwBcIDjQQTT+FB48xHGA2Q2oRsf9C/9m40LevCPAo:aqIy8Of98kfLevCI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5de0eef38d5fa811c8867dc907141f80N.exe

Files

5de0eef38d5fa811c8867dc907141f80N.exe
.dll windows:6 windows x86 arch:x86

f49f3910c3ff661cad0ba0324e48c2ce

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetModuleFileNameA
GetPrivateProfileSectionNamesA
OutputDebugStringA
GetPrivateProfileSectionA
GetFileAttributesA
DisableThreadLibraryCalls
GetSystemDirectoryA
LoadLibraryA
GetProcAddress
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
CloseHandle

msvcp140

??1facet@locale@std@@MAE@XZ
??0facet@locale@std@@IAE@I@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
??Bid@locale@std@@QAEIXZ
??1_Facet_base@std@@UAE@XZ
?_Getcoll@_Locinfo@std@@QBE?AU_Collvec@@XZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_function_call@std@@YAXXZ
?tolower@?$ctype@D@std@@QBEDD@Z
?tolower@?$ctype@D@std@@QBEPBDPADPBD@Z
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
??_7_Facet_base@std@@6B@
_Strxfrm
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Xbad_alloc@std@@YAXXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xregex_error@std@@YAXW4error_type@regex_constants@1@@Z
_Strcoll
??_7facet@locale@std@@6B@
?id@?$collate@D@std@@2V0locale@2@A
?id@?$ctype@D@std@@2V0locale@2@A

d3d9

Direct3DCreate9

d3dx9_43

D3DXLoadSurfaceFromSurface
D3DXAssembleShader
D3DXDisassembleShader

vcruntime140

__std_type_info_destroy_list
_except_handler4_common
memset
_CxxThrowException
__std_exception_copy
__std_exception_destroy
__CxxFrameHandler3
memchr
memcpy
memmove
strchr

api-ms-win-crt-string-l1-1-0

strcat_s
strncpy_s
_strnicmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf_s
__stdio_common_vsprintf
__stdio_common_vsnprintf_s

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initialize_onexit_table
_invalid_parameter_noinfo_noreturn
_initterm_e
_register_onexit_function
_initterm
_cexit
_crt_atexit
_execute_onexit_table

api-ms-win-crt-filesystem-l1-1-0

_splitpath_s

api-ms-win-crt-convert-l1-1-0

strtol
atof
strtoul
atoi

api-ms-win-crt-heap-l1-1-0

malloc
realloc
_callnewh
free

api-ms-win-crt-math-l1-1-0

_except1

Exports

Exports

DebugSetMute
Direct3D8EnableMaximizedWindowedModeShim
Direct3DCreate8
ValidatePixelShader
ValidateVertexShader

Sections

.text
Size: 166KB - Virtual size: 165KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f49f3910c3ff661cad0ba0324e48c2ce

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcp140

d3d9

d3dx9_43

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 166KB - Virtual size: 165KB

.rdata Size: 24KB - Virtual size: 23KB

.data Size: 2KB - Virtual size: 3KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 166KB - Virtual size: 165KB

.rdata
Size: 24KB - Virtual size: 23KB

.data
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 7KB - Virtual size: 6KB