4524c4a6f8b23b1c051ea14205a72e10N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

4524c4a6f8b23b1c051ea14205a72e10N.exe
Size

1.0MB
MD5

4524c4a6f8b23b1c051ea14205a72e10
SHA1

3b1dd555f27e5e31b60aa10a177a08efa2e212b4
SHA256

a7dcfefe4f8c857f5ed34d6576c2f3939738ca00755b4e49864e46c6a3d6fa6f
SHA512

3376b9b72dbdeae01f4272b86744d87ccea652c1ac9813260c9dbb16dbc73c8f99102d9d1edc29d24050009c59680cc14e61408d0fe944f2767056c9c24c7a56
SSDEEP

24576:C6Hz9RNZnDrb8LgU8S+ooPlHIHWJh9yFMWN:C6T9RPocU8SEIHNiQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4524c4a6f8b23b1c051ea14205a72e10N.exe

Files

4524c4a6f8b23b1c051ea14205a72e10N.exe
.exe windows:6 windows x64 arch:x64

5076b8e4a976f0ec3fab9388e36fc3bb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

Process32NextW
GetSystemTimeAsFileTime
GetModuleHandleA
LoadLibraryA
GetProcAddress
HeapAlloc
HeapFree
ExitProcess

advapi32

FreeSid

shell32

ShellExecuteExW

msvcp140

?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception_context

api-ms-win-crt-runtime-l1-1-0

_register_onexit_function

api-ms-win-crt-heap-l1-1-0

malloc

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-stdio-l1-1-0

_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: - Virtual size: 852B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.i1S
Size: - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.l(v
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.T,h
Size: 1.0MB - Virtual size: 1.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 469B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5076b8e4a976f0ec3fab9388e36fc3bb

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

advapi32

shell32

msvcp140

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: - Virtual size: 11KB

.rdata Size: - Virtual size: 10KB

.data Size: - Virtual size: 1KB

.pdata Size: - Virtual size: 852B

.i1S Size: - Virtual size: 1.5MB

.l(v Size: 512B - Virtual size: 248B

.T,h Size: 1.0MB - Virtual size: 1.0MB

.rsrc Size: 512B - Virtual size: 469B

.reloc Size: 512B - Virtual size: 52B

.text
Size: - Virtual size: 11KB

.rdata
Size: - Virtual size: 10KB

.data
Size: - Virtual size: 1KB

.pdata
Size: - Virtual size: 852B

.i1S
Size: - Virtual size: 1.5MB

.l(v
Size: 512B - Virtual size: 248B

.T,h
Size: 1.0MB - Virtual size: 1.0MB

.rsrc
Size: 512B - Virtual size: 469B

.reloc
Size: 512B - Virtual size: 52B