9b8cdc982e5060fa0a848e3a93662600N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

9b8cdc982e5060fa0a848e3a93662600N.exe
Size

177KB
MD5

9b8cdc982e5060fa0a848e3a93662600
SHA1

2ea23d7828325a9b2777caa1fdb4e313802b9c26
SHA256

aed769ae531f4d4027d1741c33507b4dc8fbf5eec18ba40160e647ca1a3d3bfa
SHA512

c5e9f99040bf2bf8967f879063b6aa306fea284cf2eebf0a534191b395631a7f8cb91e83f2ab73eb6b69431c302ab7fdd6ec103a7d81d4237802eb0372be330b
SSDEEP

3072:tX9S/FyHssqUJszRbS0Y3OIYfYCmopOihpmKqIFXBJhyc8mLjqqz:tX9SN4FTJuL7KihpmKhVGi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9b8cdc982e5060fa0a848e3a93662600N.exe

Files

9b8cdc982e5060fa0a848e3a93662600N.exe
.dll windows:10 windows x86 arch:x86

6757d44f7f6536e43496c43bd121b306

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

FXSEXT32.pdb

Imports

msvcrt

_except_handler4_common
_initterm
_callnewh
_amsg_exit
free
_XcptFilter
wcsrchr
wcschr
_wcsnset
_stricmp
_wsplitpath_s
_vsnwprintf
malloc
_wcsicmp
__CxxFrameHandler3
iswalpha
wcsncmp
memset

fxsapi

FaxClose
FaxConnectFaxServerW
FaxGetReceiptsOptions
FaxGetPersonalCoverPagesOption

kernel32

SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
HeapFree
SetLastError
HeapAlloc
GetProcessHeap
UnhandledExceptionFilter
ExpandEnvironmentStringsW
CloseHandle
LoadLibraryW
GetProcAddress
FreeLibrary
CreateDirectoryW
GetFileAttributesW
Sleep
GetComputerNameW
GetLocaleInfoEx
GetUserPreferredUILanguages
OutputDebugStringW
GetVersionExW
CreateFileW
GetFileType
DisableThreadLibraryCalls
GetModuleFileNameW
GetLastError
FindClose
FindNextFileW
FindFirstFileW
ReadFile

advapi32

GetTraceLoggerHandle
GetTraceEnableLevel
RegCreateKeyExW
RegisterTraceGuidsW
UnregisterTraceGuids
TraceMessage
RegCloseKey
RegQueryValueExW
RegSetValueExW
RegOpenKeyExW
GetTraceEnableFlags

user32

EnableWindow
GetWindowContextHelpId
CheckDlgButton
GetDlgItem
IsDlgButtonChecked
LoadStringW
EndDialog
SendMessageW
DialogBoxParamW
EnableMenuItem
AppendMenuW
MessageBeep
WinHelpW
MessageBoxW

mapi32

ord140
ord139
ord17
ord13
ord75

winspool.drv

OpenPrinterW
GetPrinterW
EnumPrintersW
ClosePrinter

shell32

SHSetLocalizedName
SHGetFolderPathW
SHGetFolderPathAndSubDirW

Exports

Exports

ExchEntryPoint

Sections

.text
Size: 28KB - Virtual size: 28KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 142KB - Virtual size: 142KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6757d44f7f6536e43496c43bd121b306

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

fxsapi

kernel32

advapi32

user32

mapi32

winspool.drv

shell32

Exports

Exports

Sections

.text Size: 28KB - Virtual size: 28KB

.data Size: 512B - Virtual size: 1024B

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 142KB - Virtual size: 142KB

.text
Size: 28KB - Virtual size: 28KB

.data
Size: 512B - Virtual size: 1024B

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 142KB - Virtual size: 142KB