8dc1b405c69a00e35c68389e33176400N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

8dc1b405c69a00e35c68389e33176400N.exe
Size

315KB
MD5

8dc1b405c69a00e35c68389e33176400
SHA1

5066e5963604c13dd25205a810123e332d300af1
SHA256

96195fda23a55f248575c661c266331f3e3d6ab8616caa7caf8a6c69abc066b4
SHA512

1f9fa10655f6ab1e132d3c776f113c5e3e7500c2084bfb5de462c7070cec89888be7af7d600c4642d93fe11ba13c4dcf3fd74fa26a3d1fd256ab88bb7ec9bfe9
SSDEEP

6144:uDocmo60tpBEO2ZtMamsExlI/S5CihpzThT:n+tp2ZvmsKa/SLTl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8dc1b405c69a00e35c68389e33176400N.exe

Files

8dc1b405c69a00e35c68389e33176400N.exe
.dll regsvr32 windows:6 windows x86 arch:x86

1c658bb71da4737acc0a9e0da3889b4d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dmime.pdb

Imports

ntdll

wcstombs
_allshr
_allmul
_alldiv
memset
memcpy
_CIpow
ord1
_CIsin
_CIsqrt

msvcrt

_XcptFilter
rand
free
malloc
_initterm
time
srand
_purecall
_amsg_exit
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
__CxxFrameHandler3

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
InterlockedExchange
GetModuleFileNameA
lstrlenA
DisableThreadLibraryCalls
CreateThread
CreateEventA
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
InterlockedDecrement
DeleteCriticalSection
CloseHandle
WaitForSingleObject
SetEvent
GetCurrentThreadId
Sleep
SetThreadPriority

winmm

timeGetTime
timeEndPeriod
timeBeginPeriod

advapi32

RegEnumKeyA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegDeleteKeyA
RegOpenKeyExA

ole32

StringFromCLSID
CoTaskMemFree
CoInitialize
CoUninitialize
CoCreateInstance
CreateStreamOnHGlobal

user32

GetForegroundWindow
IsWindow
GetDesktopWindow

dsound

ord11

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 162KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 146KB - Virtual size: 145KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1c658bb71da4737acc0a9e0da3889b4d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

ntdll

msvcrt

kernel32

winmm

advapi32

ole32

user32

dsound

Exports

Exports

Sections

.text Size: 162KB - Virtual size: 162KB

.data Size: 4KB - Virtual size: 14KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 146KB - Virtual size: 145KB

.text
Size: 162KB - Virtual size: 162KB

.data
Size: 4KB - Virtual size: 14KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 146KB - Virtual size: 145KB