932cff381f280858a3be1f4e03348810N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

932cff381f280858a3be1f4e03348810N.exe
Size

223KB
MD5

932cff381f280858a3be1f4e03348810
SHA1

1dc5497b5e805b0dd38414077b974378f56931d4
SHA256

1061a45f07b875a8c4c50358f79b8845d4ec243e38c83912b392333beb9b5c5c
SHA512

f4a011a3b8c6a907e0747efa0bb6ec309d837c75e32949467bac76d8b08156adc49f3cf8e2b8d7ba2c2dc135f875c3e411eb31396678a472d1a0ca409a063eb0
SSDEEP

6144:yj4Hc7aW2VDRZRWgj0N3zTzvKnWXAGiPF4:yj4rlV9jWgGD3vKnWXXu4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
932cff381f280858a3be1f4e03348810N.exe

Files

932cff381f280858a3be1f4e03348810N.exe
.exe windows:4 windows x86 arch:x86

8ee9d7204f3401d740ca7a69ab9f32a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

LookupAccountSidW
LogonUserW
CryptGenKey
CryptHashData
RegSaveKeyW
CreateServiceA
CryptDuplicateHash

gdi32

SelectClipPath
CreateMetaFileW
SetICMProfileA
GetDIBits
GetLogColorSpaceA
ResetDCW

wininet

InternetHangUp
CreateUrlCacheEntryW
CommitUrlCacheEntryA
GopherFindFirstFileA
InternetGoOnlineA
InternetCombineUrlW
FtpGetFileA
InternetGetConnectedStateExA
InternetTimeToSystemTimeW
InternetQueryOptionA
SetUrlCacheEntryGroup
InternetCreateUrlA
FindFirstUrlCacheGroup
CreateUrlCacheContainerA
InternetSecurityProtocolToStringA
IncrementUrlCacheHeaderData
GopherGetLocatorTypeW
InternetGetCookieW
IsUrlCacheEntryExpiredW
InternetSetDialStateA
HttpEndRequestW
HttpCheckDavCompliance
DeleteUrlCacheContainerA
FindNextUrlCacheEntryA
FtpSetCurrentDirectoryW

shell32

SHInvokePrinterCommandA
SHQueryRecycleBinW
SHFileOperationA

kernel32

LCMapStringW
SetThreadLocale
GetLocaleInfoW
VirtualAlloc
TlsAlloc
FreeEnvironmentStringsA
GetModuleFileNameA
FindAtomW
GetStdHandle
InitializeCriticalSection
LoadLibraryA
GetStartupInfoA
TerminateProcess
SetEnvironmentVariableA
WideCharToMultiByte
EnterCriticalSection
RtlUnwind
GlobalFindAtomA
WriteFile
HeapReAlloc
GetVersion
GetSystemTimeAsFileTime
GetModuleHandleA
GetFileType
GetStringTypeW
WaitForSingleObjectEx
ExitProcess
FileTimeToDosDateTime
GetThreadLocale
SetHandleCount
GetLastError
GetCurrentProcessId
lstrcmpiW
GetACP
VirtualQuery
FillConsoleOutputAttribute
IsBadWritePtr
TlsSetValue
TlsFree
GetCurrentThreadId
HeapCreate
SetLastError
GetEnvironmentStringsW
GetCompressedFileSizeA
GetEnvironmentStrings
GetCPInfo
GetCommandLineA
SystemTimeToTzSpecificLocalTime
InterlockedExchange
LCMapStringA
GetCurrentThread
UnhandledExceptionFilter
GetProcAddress
GetNamedPipeHandleStateW
lstrcmpW
QueryPerformanceCounter
GetStringTypeA
HeapAlloc
TlsGetValue
MultiByteToWideChar
VirtualFree
GetOEMCP
GetCurrentProcess
LeaveCriticalSection
GetTickCount
FreeEnvironmentStringsW
DeleteCriticalSection
HeapFree
HeapDestroy

Sections

.text
Size: 102KB - Virtual size: 101KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 104KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8ee9d7204f3401d740ca7a69ab9f32a3

Headers

File Characteristics

Imports

advapi32

gdi32

wininet

shell32

kernel32

Sections

.text Size: 102KB - Virtual size: 101KB

.data Size: 105KB - Virtual size: 104KB

.rsrc Size: 15KB - Virtual size: 15KB

.text
Size: 102KB - Virtual size: 101KB

.data
Size: 105KB - Virtual size: 104KB

.rsrc
Size: 15KB - Virtual size: 15KB