4c2414570f81642862cd868d9b645550N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

4c2414570f81642862cd868d9b645550N.exe
Size

1.8MB
MD5

4c2414570f81642862cd868d9b645550
SHA1

6da1d867218f591b7ce3e8c09232b30010127997
SHA256

40d14c0351325496c63a82b60acd12fd339c685b0db075281fdc8269072fa9c1
SHA512

2b0831770deab0b31d129af92f80bb813df663bb4efbac99366133130f88c39c6afd00efb77d26d6ebfeac5e97e337c19932c382ec9e08fe424a7ff7b3a82566
SSDEEP

12288:tQAi6TTgqvY7JTulyirytyqkNLfOlwBI+LvAS1trezyMIr0ANTE5:JiMTe7JiBNL2ErrRr0ANo5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c2414570f81642862cd868d9b645550N.exe

Files

4c2414570f81642862cd868d9b645550N.exe
.dll windows:6 windows x86 arch:x86

05e23b9ad763da31a67e8df30a4cae14

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d3dim700.pdb

Imports

msvcrt

_onexit
_lock
__dllonexit
_unlock
_except_handler4_common
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_amsg_exit
_initterm
free
malloc
_XcptFilter
_CIcos
_CIsqrt
_ftol2
fopen
fclose
fflush
fseek
ftell
fwrite
_purecall
memcpy
??2@YAPAXI@Z
_CIexp
_CIpow
_ftol2_sse
_vsnprintf
exp
__CxxFrameHandler3
_CxxThrowException
??3@YAXPAX@Z
memset

user32

IntersectRect
IsRectEmpty

advapi32

RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey

ddraw

ReleaseDDThreadLock
CompleteCreateSysmemSurface
D3DParseUnknownCommand
DDInternalUnlock
DDInternalLock
AcquireDDThreadLock

kernel32

QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
LoadLibraryA
GetProcAddress
GetTickCount
GetModuleHandleA
GetModuleFileNameA
GetSystemInfo
GetVersionExA
GetCurrentProcessId
FreeLibrary
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LocalAlloc
LocalFree
LocalReAlloc
VirtualAlloc
VirtualFree
DisableThreadLibraryCalls

Exports

Exports

CreateTexture
D3DBreakVBLock
D3DFree
D3DMalloc
D3DRealloc
D3DTextureUpdate
DestroyTexture
Direct3DCreate
Direct3DCreateDevice
Direct3D_HALCleanUp
FlushD3DDevices
GetLOD
GetPriority
PaletteAssociateNotify
PaletteUpdateNotify
SetLOD
SetPriority
SurfaceFlipNotify

Sections

.text
Size: 759KB - Virtual size: 759KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

05e23b9ad763da31a67e8df30a4cae14

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

user32

advapi32

ddraw

kernel32

Exports

Exports

Sections

.text Size: 759KB - Virtual size: 759KB

.data Size: 22KB - Virtual size: 29KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 154KB - Virtual size: 153KB

.text
Size: 759KB - Virtual size: 759KB

.data
Size: 22KB - Virtual size: 29KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 154KB - Virtual size: 153KB