19c351b3b6cc49700c1cec08566c12f0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

19c351b3b6cc49700c1cec08566c12f0N.exe
Size

1.0MB
MD5

19c351b3b6cc49700c1cec08566c12f0
SHA1

805fb0da75d1c52d10f73c77903832d061453472
SHA256

f91e46ac04f9dc2653e804f254ea71491ce0240631ecc39b43be1f3b145498f3
SHA512

1c38b36d7bdb013ee01ee315e4384e961b2dace17d8218ab57104c35924e6367f127ed60075d759caf4b205639f179293f884d721929a5409ae8ecb8c3c6a7b6
SSDEEP

24576:CYDlbbTcbWK6wDBAUZLY9fWVfCl8KupGavkg3NyI:dSbPnDBAUZLYRuA8KupGaXn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
19c351b3b6cc49700c1cec08566c12f0N.exe

Files

19c351b3b6cc49700c1cec08566c12f0N.exe
.dll windows:6 windows x64 arch:x64

b9bf85e5add3ffb8c1947a14aad98af5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\vcpkg\buildtrees\libiconv\x64-windows-rel\lib\.libs\iconv-2.pdb

Imports

kernel32

GetACP
GetModuleFileNameA
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent

vcruntime140

memcpy
strrchr
strchr
__C_specific_handler
__std_type_info_destroy_list
memset

api-ms-win-crt-runtime-l1-1-0

abort
_errno
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_execute_onexit_table
_cexit

api-ms-win-crt-heap-l1-1-0

malloc
free

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-locale-l1-1-0

setlocale

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsprintf

api-ms-win-crt-string-l1-1-0

strcmp
strncmp
_strdup

Exports

Exports

?_OptionsStorage@?1??__local_stdio_printf_options@@9@9
DllMain
_libiconv_version
iconv_canonicalize
libiconv
libiconv_close
libiconv_open
libiconv_open_into
libiconv_relocate
libiconv_relocate2
libiconv_set_relocation_prefix
libiconvctl
libiconvlist
locale_charset

Sections

.text
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 939KB - Virtual size: 938KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b9bf85e5add3ffb8c1947a14aad98af5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

Exports

Exports

Sections

.text Size: 105KB - Virtual size: 104KB

.rdata Size: 939KB - Virtual size: 938KB

.data Size: 512B - Virtual size: 2KB

.pdata Size: 3KB - Virtual size: 2KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 1024B - Virtual size: 920B

.text
Size: 105KB - Virtual size: 104KB

.rdata
Size: 939KB - Virtual size: 938KB

.data
Size: 512B - Virtual size: 2KB

.pdata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 1024B - Virtual size: 920B