6a54e99e905012e94feebd980cef5800N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

6a54e99e905012e94feebd980cef5800N.exe
Size

118KB
MD5

6a54e99e905012e94feebd980cef5800
SHA1

d79682ea79fd948f8a5407e388e8ce9d70a33855
SHA256

97dd2bb91d96138a06fb652b17ad9d1c5fb3dc9789ca77cf68c4f5a03d6e26ca
SHA512

e4580f9f4c17cf8d264e5ebb4444661092ee14fa3e879f2ce67b5c02c2bf1577d5f35fd1b098373386180e5379bae3d76a0e86636a5304cef218fda882000dc7
SSDEEP

3072:n4SGPfQnUPoJx14twVCqM0k/wz2E929gD/Et7GNGzyI:LGwnUPoLuyVCqM9/wbjXIzyI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6a54e99e905012e94feebd980cef5800N.exe

Files

6a54e99e905012e94feebd980cef5800N.exe
.dll windows:4 windows x86 arch:x86

15688c1a1293f08cfbc2b349ffe9daf7

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

d:\P4V\temp_inoue\GD2_sources\GX_Works2\Branch\12.5th\SOURCE\GD2MainFrm\GD2MainFrmGuide_RC\Release\GD2MainFrmGuide_RC.pdb

Imports

mfc71u

ord2239
ord3942
ord4562
ord5226
ord5209
ord5562
ord2531
ord2725
ord2829
ord4301
ord2708
ord2832
ord2534
ord2640
ord2527
ord3712
ord3713
ord3703
ord2638
ord3943
ord4475
ord5222
ord3327
ord566
ord757
ord3824
ord764
ord315
ord1033
ord765
ord1197
ord1199
ord1093
ord371
ord1115
ord1192
ord1168
ord1170
ord314
ord1200
ord1079
ord1087
ord5220
ord2925
ord1911
ord3826
ord5378
ord6215
ord5096
ord1007
ord3800
ord5579
ord2009
ord2054
ord4320
ord6274
ord3795
ord6272
ord4008
ord4032
ord4255
ord3677
ord1162
ord581

msvcr71

?terminate@@YAXXZ
??1type_info@@UAE@XZ
__CppXcptFilter
_adjust_fdiv
malloc
_initterm
__security_error_handler
_onexit
__dllonexit
free
_except_handler3
__CxxFrameHandler
??2@YAPAXI@Z
memset

kernel32

GetVersionExA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ExitProcess
DeleteCriticalSection
InitializeCriticalSection
LocalAlloc
LocalFree

Sections

.text
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 746B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

15688c1a1293f08cfbc2b349ffe9daf7

Headers

File Characteristics

PDB Paths

Imports

mfc71u

msvcr71

kernel32

Sections

.text Size: 3KB - Virtual size: 2KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 8KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 746B

.text Size: 108KB - Virtual size: 108KB

.text
Size: 3KB - Virtual size: 2KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 8KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 746B

.text
Size: 108KB - Virtual size: 108KB