0002232fa0c6618f5833f09221f87100N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

0002232fa0c6618f5833f09221f87100N.exe
Size

87KB
MD5

0002232fa0c6618f5833f09221f87100
SHA1

6a60bc8e57598a72b07220d937a7ba1a487db4df
SHA256

b33634af40a9772b5c36b77b1493f83fc67918c02dd7d509b754b6d389bb6c2a
SHA512

2dc4b059abe790a4a00d27d6422f6e03c6fa253bb49285afd7704ed1aea51691d5bb7b41cd030a44d6cfbfb60f425d91a44e394808e2fb91fa4663d180cb625c
SSDEEP

1536:IyGaPz4TcV5R09M46W4hVB/VAzt+7zfz4DSf4+oKmveakJaNtPx42MNQ2L+PlwGV:IdaPz4TcV6MR+k7zfu+oKmWaAaNkNnS

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0002232fa0c6618f5833f09221f87100N.exe

Files

0002232fa0c6618f5833f09221f87100N.exe
.exe windows:6 windows x86 arch:x86

3c55102a0a2639a3d4fe91f8c0c3be5b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

manage-bde.pdb

Imports

kernel32

WideCharToMultiByte
GetConsoleOutputCP
WriteConsoleW
GetConsoleMode
GetFileType
GetStdHandle
FormatMessageW
LocalFree
FreeLibrary
LoadLibraryExW
ReadConsoleW
SetConsoleMode
HeapSize
GetFullPathNameW
HeapAlloc
InterlockedCompareExchange
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
InterlockedExchange
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
WriteFile
HeapFree
HeapSetInformation
GetLastError
GetProcessHeap
Sleep
SetThreadPreferredUILanguages

msvcrt

__wgetmainargs
_wsetlocale
__CxxFrameHandler3
_controlfp
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
??1type_info@@UAE@XZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
memset
_wcsicmp
_amsg_exit
_initterm
exit
_XcptFilter
_exit
_cexit
?terminate@@YAXXZ
_callnewh
malloc
_CxxThrowException
memcpy
towupper
wcsncmp
free
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
?what@exception@@UBEPBDXZ
??0exception@@QAE@XZ
_wtoi64
_vsnwprintf

oleaut32

VariantClear
VariantInit
SysStringByteLen
SysAllocString
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayCreate
VariantCopy
SysFreeString
SysStringLen

ole32

CoSetProxyBlanket
CoCreateInstance
CoInitializeSecurity
CoInitializeEx

profapi

ord103

Sections

.text
Size: 54KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

uujbmbh
Size: - Virtual size: 4KB

IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

3c55102a0a2639a3d4fe91f8c0c3be5b

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcrt

oleaut32

ole32

profapi

Sections

.text Size: 54KB - Virtual size: 54KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 29KB - Virtual size: 30KB

uujbmbh Size: - Virtual size: 4KB

.text
Size: 54KB - Virtual size: 54KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 29KB - Virtual size: 30KB

uujbmbh
Size: - Virtual size: 4KB