7a46ce0296176a3f70cba4b4ef7882a0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

7a46ce0296176a3f70cba4b4ef7882a0N.exe
Size

938KB
MD5

7a46ce0296176a3f70cba4b4ef7882a0
SHA1

d6724f85a4552d598b75a9cfc7bb25d56a3dbfdc
SHA256

6a58201c11ca53dd0a62100725efdb08987d3d6c7f0de22d7ee8c306ce356620
SHA512

ba396a6a109e165e9e1b2ae8d96b9b86efe1bf5e5a6b9fa6787aaf425326a6efe5b051bf3017795caa4517cbdad2e2ce3f4fbd9d13ab7a0037b908d79c405858
SSDEEP

12288:YQAy6TTgqvY7JLulyirytykkNLfofwBI+qvAS1trrzyMIr0x+SeaEg:YyMTe7J63NLQHrrEr0x+RaEg

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7a46ce0296176a3f70cba4b4ef7882a0N.exe

Files

7a46ce0296176a3f70cba4b4ef7882a0N.exe
.dll windows:6 windows x86 arch:x86

05e23b9ad763da31a67e8df30a4cae14

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d3dim700.pdb

Imports

msvcrt

_onexit
_lock
__dllonexit
_unlock
_except_handler4_common
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_amsg_exit
_initterm
free
malloc
_XcptFilter
_CIcos
_CIsqrt
_ftol2
fopen
fclose
fflush
fseek
ftell
fwrite
_purecall
memcpy
??2@YAPAXI@Z
_CIexp
_CIpow
_ftol2_sse
_vsnprintf
exp
__CxxFrameHandler3
_CxxThrowException
??3@YAXPAX@Z
memset

user32

IntersectRect
IsRectEmpty

advapi32

RegCreateKeyA
RegSetValueExA
RegOpenKeyExA
RegOpenKeyA
RegQueryValueExA
RegCloseKey

ddraw

ReleaseDDThreadLock
CompleteCreateSysmemSurface
D3DParseUnknownCommand
DDInternalUnlock
DDInternalLock
AcquireDDThreadLock

kernel32

QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
LoadLibraryA
GetProcAddress
GetTickCount
GetModuleHandleA
GetModuleFileNameA
GetSystemInfo
GetVersionExA
GetCurrentProcessId
FreeLibrary
GetCurrentThreadId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
LocalAlloc
LocalFree
LocalReAlloc
VirtualAlloc
VirtualFree
DisableThreadLibraryCalls

Exports

Exports

CreateTexture
D3DBreakVBLock
D3DFree
D3DMalloc
D3DRealloc
D3DTextureUpdate
DestroyTexture
Direct3DCreate
Direct3DCreateDevice
Direct3D_HALCleanUp
FlushD3DDevices
GetLOD
GetPriority
PaletteAssociateNotify
PaletteUpdateNotify
SetLOD
SetPriority
SurfaceFlipNotify

Sections

.text
Size: 759KB - Virtual size: 759KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 22KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 154KB - Virtual size: 153KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

05e23b9ad763da31a67e8df30a4cae14

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

user32

advapi32

ddraw

kernel32

Exports

Exports

Sections

.text Size: 759KB - Virtual size: 759KB

.data Size: 22KB - Virtual size: 29KB

.rsrc Size: 2KB - Virtual size: 1KB

.reloc Size: 154KB - Virtual size: 153KB

.text
Size: 759KB - Virtual size: 759KB

.data
Size: 22KB - Virtual size: 29KB

.rsrc
Size: 2KB - Virtual size: 1KB

.reloc
Size: 154KB - Virtual size: 153KB