aa18ead397d932619db25c5d739ec2e0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

aa18ead397d932619db25c5d739ec2e0N.exe
Size

405KB
MD5

aa18ead397d932619db25c5d739ec2e0
SHA1

fd1ebdf8780e323e7c34617c1ad133553f67c270
SHA256

349d6bad105bf5b978f18412fcf7006f0dc4db6099c29bc76013b64ed6945173
SHA512

143b34bb52da4e222625b61c479b530c9e9bf7de4a78be7edd328a06fdaaa1797b71c2c000389bebdfa33e810bd307adbd8a39778bb2a8f9a385c61bd309c870
SSDEEP

6144:+LsQpbWVr9nZt88CdzxabpxOZspcYzw4nYlOeXE/Jvp72C3rU:Asu8nt88CTP2YavkC3Q

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
aa18ead397d932619db25c5d739ec2e0N.exe

Files

aa18ead397d932619db25c5d739ec2e0N.exe
.exe windows:6 windows x86 arch:x86

dcaa67c30c0052d0418038afe253caf6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

c:\Spot\house\Receive\sharp\Old\Loudmine.pdb

Imports

kernel32

GetVolumeInformationA
CreateProcessA
SetEndOfFile
HeapSize
LoadLibraryA
DeleteFileA
ReadConsoleW
SetStdHandle
FindNextFileA
FindFirstFileExA
SetFileAttributesA
GetEnvironmentVariableA
CreateFileW
GetStartupInfoA
CreateEventA
GetTickCount
FileTimeToSystemTime
CloseHandle
Sleep
EnterCriticalSection
InitializeCriticalSection
GetVersion
WriteConsoleW
FindClose
GetCommandLineW
GetCommandLineA
WideCharToMultiByte
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
SetEvent
ResetEvent
WaitForSingleObjectEx
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RaiseException
RtlUnwind
GetLastError
FreeLibrary
LoadLibraryExW
GetModuleFileNameW
HeapAlloc
HeapFree
HeapReAlloc
ExitProcess
GetModuleHandleExW
GetStdHandle
WriteFile
GetModuleFileNameA
GetACP
GetFileType
ReadFile
GetConsoleCP
GetConsoleMode
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
FlushFileBuffers
SetFilePointerEx
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcAddress

user32

DispatchMessageA
RegisterClassExA
IsWindowEnabled
CheckMenuItem
GetWindowTextLengthA
SystemParametersInfoA
LoadImageA
CheckMenuRadioItem
GetClassNameA
ClientToScreen

gdi32

TextOutA
RectVisible
SetViewportOrgEx

comctl32

ImageList_DragShowNolock
ImageList_ReplaceIcon
ImageList_DragMove

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA
ChooseColorA

ole32

CoUninitialize
CoRevokeClassObject
OleInitialize
OleUninitialize
CoInitialize

advapi32

SystemFunction036

Sections

.text
Size: 212KB - Virtual size: 212KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 58KB - Virtual size: 58KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 1024B - Virtual size: 600B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 123KB - Virtual size: 122KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dcaa67c30c0052d0418038afe253caf6

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

comctl32

comdlg32

ole32

advapi32

Sections

.text Size: 212KB - Virtual size: 212KB

.rdata Size: 58KB - Virtual size: 58KB

.data Size: 9KB - Virtual size: 39KB

.gfids Size: 1024B - Virtual size: 600B

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 123KB - Virtual size: 122KB

.text
Size: 212KB - Virtual size: 212KB

.rdata
Size: 58KB - Virtual size: 58KB

.data
Size: 9KB - Virtual size: 39KB

.gfids
Size: 1024B - Virtual size: 600B

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 123KB - Virtual size: 122KB