5b6b5c3073dbc7107f150640fdcdef90N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

5b6b5c3073dbc7107f150640fdcdef90N.exe
Size

364KB
MD5

5b6b5c3073dbc7107f150640fdcdef90
SHA1

461532dcaf96bdaf4970f5e0be5e1269f2307692
SHA256

b4fe9aaded3a58300d978eb13b362f59830fef8527ca724150096ab2737f6ef8
SHA512

26dd08d6c9386a3443f0ddd6c78104f23ab724181263f5ac0a0f7ed938d23d747aae53471bcd40fa985af6e07a1e7d6b86b3f807d326a1110e139e16eb7111b1
SSDEEP

6144:eOZrtg/fd1wn1I5V8zG6wke/tLAR6dibaYWKQC1k0Q7LG2K:emrt4l1wy5VHoG9ok0wnK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5b6b5c3073dbc7107f150640fdcdef90N.exe

Files

5b6b5c3073dbc7107f150640fdcdef90N.exe
.exe windows:4 windows x86 arch:x86

96bdc79a7a27a73eae1542162f662d57

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileAttributesA
GetFileSize
GetFileTime
FormatMessageA
RtlUnwind
TerminateProcess
GetCommandLineA
RaiseException
HeapAlloc
HeapFree
HeapReAlloc
GetACP
GetTimeZoneInformation
FreeEnvironmentStringsA
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
SetUnhandledExceptionFilter
LCMapStringW
IsBadWritePtr
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetFullPathNameA
GetVolumeInformationA
GetProfileStringA
FindFirstFileA
FindClose
SetEndOfFile
UnlockFile
LockFile
WriteFile
GetCurrentProcess
DuplicateHandle
SetErrorMode
GetThreadLocale
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalFree
LocalAlloc
SizeofResource
GetLastError
GlobalFlags
MulDiv
SetLastError
CloseHandle
GlobalAlloc
lstrcmpA
GetCurrentThread
MultiByteToWideChar
WideCharToMultiByte
lstrlenA
InterlockedDecrement
InterlockedIncrement
LoadLibraryA
FreeLibrary
GetVersion
lstrcatA
GetCurrentThreadId
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
GetProcAddress
GlobalLock
GlobalUnlock
LockResource
FindResourceA
LoadResource
VirtualAlloc
CreateFileA
GetModuleFileNameA
GetSystemDirectoryA
CreateProcessA
Sleep
DeleteFileA
CopyFileA
ExitProcess
GetModuleFileNameW
CreateFileW
FlushFileBuffers
UnmapViewOfFile
ClearCommBreak
GetTickCount
OpenProcess
GetSystemDirectoryW
UnhandledExceptionFilter
GlobalFree
GetCommState
HeapSize
LCMapStringA
lstrcpynA
GetWindowsDirectoryA
QueryPerformanceCounter
GetStringTypeA
ReadFile
GetEnvironmentStrings
GetStartupInfoA
GetVersionExA
FreeEnvironmentStringsW
SetFilePointer

user32

CopyAcceleratorTableA
SetRect
GetNextDlgGroupItem
MessageBeep
InvalidateRect
CharUpperA
InflateRect
RegisterClipboardFormatA
PostThreadMessageA
PostMessageA
UpdateWindow
SendDlgItemMessageA
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
CopyRect
IsWindowVisible
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
CharNextA
GetSubMenu
GetMenuItemID
GetSysColorBrush
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
GetKeyState
SetWindowsHookExA
CallNextHookEx
GetClassLongA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
GetMessageTime
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowLongA
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindowRect
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
IsWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetDlgItem
IsWindowEnabled
LoadIconA
IsIconic
EnableWindow
SendMessageA
FlashWindow
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DrawFocusRect
AppendMenuA
DrawIcon
FindWindowW
GetSystemMetrics
OpenClipboard
GetMessageA
CreateWindowExA
IsZoomed
GetCursorPos
SetClipboardData
GetSystemMenu
GetWindowLongA
CheckMenuItem
GetMenuItemCount
GetClientRect
RegisterWindowMessageA
DefDlgProcA
IsWindowUnicode
CreateDialogParamW
LoadCursorA
GetDesktopWindow
PtInRect
GetClassNameA
DestroyMenu
GrayStringA
DrawTextA
TabbedTextOutA
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
ClientToScreen
LoadStringA
MapDialogRect
SetWindowContextHelpId
TranslateMessage
ValidateRect
SetCursor
PostQuitMessage
wvsprintfA
GetMenuCheckMarkDimensions
LoadBitmapA
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
EnableMenuItem
GetMessagePos
ShowWindow
IsDialogMessageA
SetWindowTextA
MoveWindow

gdi32

SelectObject
GetStockObject
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
IntersectClipRect
DeleteObject
RestoreDC
GetDeviceCaps
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
PtVisible
RectVisible
TextOutA
Escape
GetTextColor
GetBkColor
DPtoLP
LPtoDP
GetMapMode
PatBlt
SaveDC
DeleteDC
CreateBitmap
GetObjectA
SetBkColor
SetTextColor
GetClipBox
GetCharWidth32W
Polyline
CreateFontW
ExtTextOutA
CreateDIBitmap
GetTextExtentPointA
BitBlt
CreateCompatibleDC
GetCharABCWidthsFloatA

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegCloseKey
RegSetValueExA
RegOpenKeyExA
RegCreateKeyExA

shell32

SHGetSpecialFolderPathA

comctl32

ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleInitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
OleUninitialize

olepro32

ord253

oleaut32

VariantTimeToSystemTime
SysAllocStringLen
SysFreeString
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen
VariantClear

Sections

.text
Size: 192KB - Virtual size: 189KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 16KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

96bdc79a7a27a73eae1542162f662d57

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 192KB - Virtual size: 189KB

.rdata Size: 40KB - Virtual size: 36KB

.data Size: 40KB - Virtual size: 56KB

.rsrc Size: 16KB - Virtual size: 12KB

.text
Size: 192KB - Virtual size: 189KB

.rdata
Size: 40KB - Virtual size: 36KB

.data
Size: 40KB - Virtual size: 56KB

.rsrc
Size: 16KB - Virtual size: 12KB