72802196fa0e00cf5c6e4acc952d7d20N[.]exe

General

Target

72802196fa0e00cf5c6e4acc952d7d20N.exe
Size

221KB
MD5

72802196fa0e00cf5c6e4acc952d7d20
SHA1

0a380d6a68c9c7b6f6c5f46ac9bad06dc45d73b6
SHA256

39fcac18c7ae576f6aa91b19246c64a36f0bab66f7fef56ab8122f06eb849919
SHA512

04fe19dd74b49dec37dbaee8d4cf33032868961fc9e7d7cf5167dae9101d19861ad13c3a11a83f51a2156e344b62b0b0160fcf4a07fefbfe11af12e1ee15cbb9
SSDEEP

3072:5Irv0Qx3sbmaHfqGYoMyzgRbSwRm57xOYCmoXuihp/JVMIgXBJQ9cF8SR:cvZR+mmFYTy1Rihp/zCQNSR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
72802196fa0e00cf5c6e4acc952d7d20N.exe

Files

72802196fa0e00cf5c6e4acc952d7d20N.exe
.dll windows:6 windows x86 arch:x86

d097cc8bf8981b0c9dc8c184d9104784

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

iccvid.pdb

Imports

msvcrt

_initterm
_amsg_exit
_except_handler4_common
free
malloc
_XcptFilter
_vsnprintf
memcpy
_setjmp3
longjmp
memmove

user32

DialogBoxParamA
EndDialog
SetWindowTextA
SendDlgItemMessageA
LoadBitmapA
BeginPaint
GetDlgItem
GetWindowRect
ScreenToClient
EndPaint
GetDC
ReleaseDC
LoadStringA

kernel32

SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
lstrlenA
GetModuleFileNameA
MultiByteToWideChar
DisableThreadLibraryCalls
DebugBreak
LocalAlloc
GetPrivateProfileIntA
MulDiv
LocalFree

winmm

DefDriverProc

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

gdi32

DeleteObject
GetObjectA
CreateCompatibleDC
SelectObject
BitBlt
DeleteDC
GetSystemPaletteEntries

Exports

Exports

DriverProc

Sections

.text
Size: 67KB - Virtual size: 66KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 142KB - Virtual size: 141KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d097cc8bf8981b0c9dc8c184d9104784

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

user32

kernel32

winmm

version

gdi32

Exports

Exports

Sections

.text Size: 67KB - Virtual size: 66KB

.data Size: 7KB - Virtual size: 7KB

.rsrc Size: 4KB - Virtual size: 3KB

.reloc Size: 142KB - Virtual size: 141KB

.text
Size: 67KB - Virtual size: 66KB

.data
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 4KB - Virtual size: 3KB

.reloc
Size: 142KB - Virtual size: 141KB