2213c2f86c3c7be884d180b2f200e5c0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2213c2f86c3c7be884d180b2f200e5c0N.exe
Size

3.3MB
MD5

2213c2f86c3c7be884d180b2f200e5c0
SHA1

7906668a34d76d314d9496b8711e6ad7fda83cdf
SHA256

ccf05627925a3f5ae9995aead8261964d3cf04e835fa0c5fda78ab44c9f19815
SHA512

6055fed299f2acc912c86f9963c68b4a3ecccc0be6156eaba73d904efd06e3c4861ade471d33fbe09ae72d4e6f19978131ed3d6d231a6217fd3a996ec5f999ac
SSDEEP

49152:MB0FfKvpm+OxXRszntyhG3nIIDP+Vtis8MLB2fGNdXwgn2bCL:LfKvpm+lYhwwZegn4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2213c2f86c3c7be884d180b2f200e5c0N.exe

Files

2213c2f86c3c7be884d180b2f200e5c0N.exe
.dll windows:6 windows x64 arch:x64

ba28798da2ed6b75d4e119a8918ba0cc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

lmnr_baml.pdb

Imports

api-ms-win-core-synch-l1-2-0

WaitOnAddress
WakeByAddressAll
WakeByAddressSingle

bcryptprimitives

ProcessPrng

python37

PyExc_ImportError
PyObject_SetAttr
Py_IsInitialized
PyObject_GetAttr
PyExc_BaseException
PyUnicode_InternInPlace
PyModule_Create2
PyErr_SetObject
PyErr_SetString
PyException_SetCause
PyException_SetTraceback
PyException_GetTraceback
PyException_GetCause
PyTuple_New
PyErr_Print
PyExc_TypeError
PyGILState_Release
PyGILState_Ensure
PyUnicode_FromStringAndSize
PyErr_PrintEx
PyErr_Fetch
PyErr_NormalizeException
PyList_Append
PyList_New
PyErr_GivenExceptionMatches
PyExc_AttributeError
PyCFunction_NewEx
PyModule_GetNameObject
PyExc_SystemError
PyObject_Str
PyBytes_Size
PyBytes_AsString
PyUnicode_AsEncodedString
PyErr_WriteUnraisable
PyObject_Repr
_Py_NoneStruct
PyErr_Restore
PyUnicode_AsUTF8AndSize
_Py_Dealloc
PyExc_Exception
PyErr_NewExceptionWithDoc

kernel32

IsDebuggerPresent
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
InitializeSListHead
UnhandledExceptionFilter
DisableThreadLibraryCalls
GetCurrentThreadId
QueryPerformanceCounter
GetProcessHeap
HeapAlloc
SetThreadStackGuarantee
GetEnvironmentVariableW
RtlVirtualUnwind
HeapFree
HeapReAlloc
SwitchToThread
CreateThread
CloseHandle
GetSystemInfo
GetLastError
GetCurrentThread
GetStdHandle
GetConsoleMode
RtlLookupFunctionEntry
WaitForSingleObject
RtlCaptureContext
MultiByteToWideChar
WriteConsoleW
GetModuleHandleA
GetProcAddress
SetLastError
GetModuleHandleW
FormatMessageW
GetCurrentDirectoryW
WaitForSingleObjectEx
LoadLibraryA
GetCurrentProcess
lstrlenW
GetCurrentProcessId
CreateMutexA
ReleaseMutex
IsProcessorFeaturePresent

ntdll

RtlNtStatusToDosError
NtWriteFile

vcruntime140

__CxxFrameHandler3
memcpy
memset
memmove
memcmp
_CxxThrowException
__C_specific_handler
__std_type_info_destroy_list

api-ms-win-crt-math-l1-1-0

round

api-ms-win-crt-runtime-l1-1-0

_cexit
_seh_filter_dll
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_initterm_e
_initterm

api-ms-win-crt-heap-l1-1-0

free

Exports

Exports

PyInit_lmnr_baml

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 863KB - Virtual size: 862KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 90KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ba28798da2ed6b75d4e119a8918ba0cc

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

api-ms-win-core-synch-l1-2-0

bcryptprimitives

python37

kernel32

ntdll

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 863KB - Virtual size: 862KB

.data Size: 1024B - Virtual size: 1KB

.pdata Size: 90KB - Virtual size: 89KB

.reloc Size: 22KB - Virtual size: 21KB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 863KB - Virtual size: 862KB

.data
Size: 1024B - Virtual size: 1KB

.pdata
Size: 90KB - Virtual size: 89KB

.reloc
Size: 22KB - Virtual size: 21KB