9275a4066abe8c50287d8a21438d7370N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

9275a4066abe8c50287d8a21438d7370N.exe
Size

3.5MB
MD5

9275a4066abe8c50287d8a21438d7370
SHA1

81a83de655ed8bc3b82780c732b2e33952d2b424
SHA256

dba58b672b48049fe871a9e2ca8e0149db1e7dec2fa64b4e5e505c247a291384
SHA512

6c6d1237e35bf3733e767b96a627aead6f3d17754b4e7bccc56c01ed69b4bc561760b49ed43b465af18c6da27e3d809bbecb9c0f8c468b668069e9543398f869
SSDEEP

98304:gFGuoZJtiXCtc9bP89+Se3HOU1+jdBM7by6Hh:gFGuoVP87B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9275a4066abe8c50287d8a21438d7370N.exe

Files

9275a4066abe8c50287d8a21438d7370N.exe
.exe windows:4 windows x86 arch:x86

85c7e226c7e1a4750c8eeab4ca888f58

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_AGGRESIVE_WS_TRIM

Imports

comctl32

ImageList_Destroy

kernel32

CreateEventA
CreateFileA
CreateFileW
CreateThread
DeleteCriticalSection
DeleteFileA
DuplicateHandle
ExitProcess
ExitThread
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindResourceA
FindResourceExW
FindResourceW
FlushFileBuffers
FormatMessageA
FreeEnvironmentStringsW
FreeResource
GetACP
GetConsoleCP
GetConsoleMode
GetCPInfo
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentProcessId
GetCurrentThread
GetCurrentThreadId
GetEnvironmentStringsW
GetFileAttributesA
GetFileAttributesExA
GetFileTime
GetFileType
GetFullPathNameA
GetLastError
GetLocaleInfoA
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetNumberFormatA
GetOEMCP
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProfileIntA
GetStdHandle
GetStringTypeW
GetSystemDirectoryW
GetSystemInfo
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
GetThreadLocale
GetTimeZoneInformation
GetVersionExA
GetVolumeInformationA
GetWindowsDirectoryA
GlobalAddAtomA
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomA
GlobalFlags
GlobalFree
GlobalGetAtomNameA
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalSize
GlobalUnlock
HeapAlloc
HeapCreate
HeapFree
HeapReAlloc
GetStartupInfoW
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsProcessorFeaturePresent
IsValidCodePage
LCMapStringW
LoadLibraryExA
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
LockFile
LockResource
lstrcatA
lstrcmpA
lstrcmpiA
lstrcmpW
lstrcpyA
lstrlenA
lstrlenW
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
RaiseException
ReadFile
ResumeThread
SearchPathA
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnlockFile
VirtualAlloc
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WinExec
WriteConsoleW
WriteFile
WritePrivateProfileStringA
LCMapStringA
GetStringTypeA
VirtualFree
HeapDestroy
GetEnvironmentVariableA
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetVersion
GetStartupInfoA
RtlUnwind
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryW
GetProcAddress
FreeLibrary
LoadLibraryA
HeapSize

user32

DrawFocusRect
DrawFrameControl
DrawIcon
DrawIconEx
DrawMenuBar
DrawStateA
DrawTextA
DrawTextExA
EmptyClipboard
EnableMenuItem
EnableScrollBar
EnableWindow
EndDialog
EqualRect
FillRect
DrawEdge
GetActiveWindow
GetAsyncKeyState
GetCapture
GetClassInfoA
GetClassInfoExA
GetClassLongA
GetClassNameA
GetClientRect
GetCursorPos
GetDC
GetDesktopWindow
GetDlgCtrlID
GetDlgItem
GetDoubleClickTime
GetFocus
GetForegroundWindow
GetIconInfo
GetKeyboardState
GetKeyNameTextA
UnpackDDElParam
ReuseDDElParam
GetLastActivePopup
GetMenuCheckMarkDimensions
GetMenuDefaultItem
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoA
GetMenuState
GetMenuStringA
GetMessageA
GetMessagePos
GetMessageTime
GetNextDlgGroupItem
GetNextDlgTabItem
GetParent
GetPropA
GetScrollInfo
GetScrollPos
GetScrollRange
GetSubMenu
GetSysColorBrush
GetSystemMenu
GetSystemMetrics
GetTopWindow
GetUpdateRect
GetWindowDC
GetWindowLongA
GetWindowPlacement
GetWindowRect
GetWindowRgn
GetWindowTextA
GetWindowTextLengthA
GetWindowThreadProcessId
GrayStringA
HideCaret
InflateRect
InsertMenuA
InsertMenuItemA
IntersectRect
InvalidateRect
InvalidateRgn
InvertRect
IsCharLowerA
IsChild
IsClipboardFormatAvailable
IsDialogMessageA
IsIconic
IsMenu
IsRectEmpty
IsWindowEnabled
IsWindowVisible
IsZoomed
KillTimer
LoadAcceleratorsA
LoadAcceleratorsW
LoadBitmapW
LoadCursorA
LoadCursorW
LoadIconA
LoadIconW
LoadImageA
LoadImageW
LoadMenuA
LoadMenuW
LockWindowUpdate
MapDialogRect
MapVirtualKeyA
MapVirtualKeyExA
MapWindowPoints
MessageBeep
MessageBoxA
ModifyMenuA
MoveWindow
OffsetRect
OpenClipboard
PeekMessageA
PostMessageA
PostQuitMessage
PostThreadMessageA
PtInRect
RedrawWindow
RegisterClassA
RegisterClipboardFormatA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
RemoveMenu
RemovePropA
ScreenToClient
ScrollWindow
SendDlgItemMessageA
SendMessageA
SetActiveWindow
SetCapture
SetClassLongA
SetClipboardData
SetCursor
SetCursorPos
SetDlgItemTextA
SetFocus
SetForegroundWindow
SetMenuDefaultItem
SetMenuItemBitmaps
SetParent
SetPropA
SetRectEmpty
SetScrollInfo
SetScrollPos
SetScrollRange
SetTimer
SetWindowContextHelpId
SetWindowLongA
SetWindowPlacement
SetWindowPos
SetWindowRgn
SetWindowsHookExA
SetWindowTextA
ShowOwnedPopups
ShowScrollBar
ShowWindow
SubtractRect
SystemParametersInfoA
TabbedTextOutA
ToAsciiEx
TrackPopupMenu
TranslateAcceleratorA
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnionRect
UnregisterClassA
UpdateWindow
ValidateRect
WaitMessage
WinHelpA
VkKeyScanA
GetKeyboardLayout
GetKeyState
DispatchMessageA
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyAcceleratorTable
DeleteMenu
DefWindowProcA
DefMDIChildProcA
DefFrameProcA
CreateWindowExA
CreatePopupMenu
CreateMenu
CreateDialogIndirectParamA
CreateAcceleratorTableA
CopyRect
CopyImage
CopyIcon
CopyAcceleratorTableA
CloseClipboard
ClientToScreen
CheckMenuItem
CheckDlgButton
CharUpperBuffA
CharUpperA
CharNextA
CallWindowProcA
FrameRect

comdlg32

CommDlgExtendedError

advapi32

RegDeleteKeyA
RegSetValueExA
RegDeleteValueA
RegEnumKeyA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExA
RegQueryValueA
RegQueryValueExA

Sections

.text
Size: 756KB - Virtual size: 754KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.nhead7
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 732KB - Virtual size: 732KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ohead7
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

85c7e226c7e1a4750c8eeab4ca888f58

Headers

File Characteristics

Imports

comctl32

kernel32

user32

comdlg32

advapi32

Sections

.text Size: 756KB - Virtual size: 754KB

.nhead7 Size: 12KB - Virtual size: 10KB

.data Size: 16KB - Virtual size: 21KB

.rsrc Size: 732KB - Virtual size: 732KB

.ohead7 Size: 2.1MB - Virtual size: 2.1MB

.text
Size: 756KB - Virtual size: 754KB

.nhead7
Size: 12KB - Virtual size: 10KB

.data
Size: 16KB - Virtual size: 21KB

.rsrc
Size: 732KB - Virtual size: 732KB

.ohead7
Size: 2.1MB - Virtual size: 2.1MB