5413fa36fb63bdb1649e836c7b7a8860N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

5413fa36fb63bdb1649e836c7b7a8860N.exe
Size

271KB
MD5

5413fa36fb63bdb1649e836c7b7a8860
SHA1

ff94c28a082fbcb38c496ed27757cbb1205b2786
SHA256

d5dbc352263e18bd9bf90c83cc6c342f73ff6a083d263fee38dc19aa8b66c90a
SHA512

ef717a3e1963644a4d5a2187a0616ba572043ba3c6f6760cb6638dba7fed0829dff5366eb488ca731dfc5490033548b20e29fba061929f84c61b928d58232b76
SSDEEP

6144:Avke7sCAjOEOcXoV80Vo3kIX35VGUxhZM3xcXni:Avp7s/q+kIaf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5413fa36fb63bdb1649e836c7b7a8860N.exe

Files

5413fa36fb63bdb1649e836c7b7a8860N.exe
.dll windows:6 windows x64 arch:x64

cdce1872037c59afdb1aa564a5b38f41

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

libx11

XrmQuarkToString
XCreateGlyphCursor
XCreatePixmapCursor
XAllocSizeHints
XCreateFontCursor
XRecolorCursor
XrmSetDatabase
XrmStringToQuark
XCreateWindow
XDestroyWindow
XDrawLine
XDrawArc
XSetForeground
XChangeGC
XFillArc
XInternAtom
XOpenDisplay
XrmQGetResource
XrmPermStringToQuark
XrmGetDatabase
XGetDefault
XCreatePixmapFromBitmapData
XGetWindowAttributes
XGetGCValues
XSetArcMode
XFillRectangles
XFillArcs
XFillRectangle
XSetWMNormalHints
XQueryColors
XSync
XDeleteProperty
XUnloadFont
XChangeProperty
XMapSubwindows
XMapWindow
XrmMergeDatabases
XrmGetFileDatabase
XrmGetResource
XNextRequest
XFindContext
XrmUniqueQuark
XSaveContext
XDeleteContext
XSetSelectionOwner
XFlush
XSetErrorHandler
XSelectInput
XSendEvent
XConvertSelection
XMaxRequestSize
XGetSelectionOwner
XrmQGetSearchList
XrmQGetSearchResource
XConfigureWindow
XClearArea
XFreeFontSet
XScreenNumberOfScreen
XQueryFont
XDisplayOfScreen
XLoadQueryFont
XFreeStringList
XFree
XMatchVisualInfo
XQueryColor
XFreeFont
XLookupColor
XFreeCursor
XAllocNamedColor
XLoadFont
XCreateFontSet
XrmQPutResource
XResourceManagerString
XrmEnumerateDatabase
XrmCombineFileDatabase
XrmCombineDatabase
XScreenResourceString
XrmPutLineResource
XrmGetStringDatabase
XCheckIfEvent
XEventsQueued
XGetKeyboardMapping
XConvertCase
XFreeModifiermap
XGetModifierMapping
XGrabKey
XGrabButton
XUnmapWindow
XmbTextListToTextProperty
XSetCommand
XSetWMProperties
XIconifyWindow
XSetWMIconName
XTranslateCoordinates
XWMGeometry
XSetTransientForHint
XPutBackEvent
XSetWMHints
XChangeWindowAttributes
XSetWMName
XStringToKeysym
XKeysymToString
XRaiseWindow
XWithdrawWindow
XMapRaised
XCreatePixmap
XCreateGC
XFreeGC
XFreePixmap
XFreeColors
XAddExtension
XESetCloseDisplay
XGetAtomName
XInternAtoms
XGetErrorText
XGetErrorDatabaseText
XGetWindowProperty

libxext

XShapeCombineMask

kernel32

RtlCaptureContext
SetErrorMode
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
InitializeSListHead
DisableThreadLibraryCalls
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter

ws2_32

gethostname
__WSAFDIsSet
WSAStartup
select

vcruntime140

memcpy
__std_type_info_destroy_list
memset
__C_specific_handler
strchr
strrchr
memmove
memcmp

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfprintf
__acrt_iob_func
fputs
__stdio_common_vsprintf
fopen
fclose
getc
_getcwd
fgets
__stdio_common_vsscanf

api-ms-win-crt-heap-l1-1-0

free
malloc
calloc
realloc

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-string-l1-1-0

strncmp
strcmp
isxdigit
strncpy
isdigit
_strdup

api-ms-win-crt-filesystem-l1-1-0

_access
_getdrives
_stat64i32

api-ms-win-crt-convert-l1-1-0

atoi

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_cexit
exit
_errno
_seh_filter_dll
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_initterm
_initterm_e

api-ms-win-crt-locale-l1-1-0

setlocale

api-ms-win-crt-time-l1-1-0

_ftime64

Exports

Exports

XmuAddInitializer
XmuAreaOrXor
XmuCallInitializers
XmuCompareISOLatin1
XmuConvertStandardSelection
XmuCreateStippledPixmap
XmuCvtBackingStoreToString
XmuCvtGravityToString
XmuCvtJustifyToString
XmuCvtOrientationToString
XmuCvtShapeStyleToString
XmuCvtStringToBackingStore
XmuCvtStringToBitmap
XmuCvtStringToColorCursor
XmuCvtStringToCursor
XmuCvtStringToGravity
XmuCvtStringToJustify
XmuCvtStringToOrientation
XmuCvtStringToShapeStyle
XmuCvtWidgetToString
XmuDestroyScanlineList
XmuDestroySegmentList
XmuDistinguishablePixels
XmuGetHostname
XmuInternAtom
XmuLocatePixmapFile
XmuNCopyISOLatin1Lowered
XmuNCopyISOLatin1Uppered
XmuNewArea
XmuNewCvtStringToWidget
XmuNewScanline
XmuOptimizeScanline
XmuPrintDefaultErrorMessage
XmuRegisterExternalAgent
XmuReleaseStippledPixmap
XmuReshapeWidget
XmuScanlineOrSegment
XmuScanlineXor
_XA_CHARACTER_POSITION
_XA_COMPOUND_TEXT
_XA_DELETE
_XA_LENGTH
_XA_LIST_LENGTH
_XA_NULL
_XA_SPAN
_XA_TARGETS
_XA_TEXT
_XA_UTF8_STRING
_XEditResCheckMessages

Sections

.text
Size: 193KB - Virtual size: 192KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 49KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 15KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cdce1872037c59afdb1aa564a5b38f41

Headers

DLL Characteristics

File Characteristics

Imports

libx11

libxext

kernel32

ws2_32

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-time-l1-1-0

Exports

Exports

Sections

.text Size: 193KB - Virtual size: 192KB

.rdata Size: 49KB - Virtual size: 48KB

.data Size: 15KB - Virtual size: 28KB

.pdata Size: 10KB - Virtual size: 10KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 193KB - Virtual size: 192KB

.rdata
Size: 49KB - Virtual size: 48KB

.data
Size: 15KB - Virtual size: 28KB

.pdata
Size: 10KB - Virtual size: 10KB

.reloc
Size: 2KB - Virtual size: 2KB