ed5c086f90c82e755393dd4d183d8323[.]exe

Resubmissions

09-08-2024 16:03

240809-thb9dswerh 10

24-02-2021 17:21

210224-vr75z6bg5n 10

Sharing

Copy URL

Twitter E-mail

General

Target

ed5c086f90c82e755393dd4d183d8323.exe
Size

369KB
MD5

ed5c086f90c82e755393dd4d183d8323
SHA1

50900629dd2d2e39d67e8fa098e2460e2d899139
SHA256

c7af3849210fbedaa9447012d804ccb362d66a34e7d636ea1b97d0a8115f022c
SHA512

7345707c182898eb134250dd3de5870a36c45a522a363d7c9b06df72b9fe81785c4c448d8efb2a748a5b578783d6282ce499d03f2ce8d624e408f5bde18c328e
SSDEEP

6144:SP+ESgo6HYAkY4u1gXwztMaKjNBl/wO+tLL5A8ybLUxjwi:C+soU7kY4u1Mwz7KjYtLL5AVb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed5c086f90c82e755393dd4d183d8323.exe

Files

ed5c086f90c82e755393dd4d183d8323.exe
.exe windows:5 windows x86 arch:x86

f074981cf2b942ed95800de63bf609f8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_ISOLATION
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
_llseek
SetEndOfFile
SetUnhandledExceptionFilter
InterlockedIncrement
_lclose
GetProcessPriorityBoost
LocalFlags
FindNextVolumeMountPointA
ReadConsoleW
SetCommState
GetPriorityClass
ActivateActCtx
GlobalAlloc
LoadLibraryW
GetConsoleMode
CopyFileW
GetPrivateProfileStructW
LeaveCriticalSection
WritePrivateProfileStructW
TerminateProcess
IsDBCSLeadByte
ReadFile
lstrcatA
GetBinaryTypeW
GetACP
lstrlenW
DisconnectNamedPipe
GetNamedPipeHandleStateW
GetStdHandle
SetLastError
GetProcAddress
GetTapeStatus
MoveFileW
SetComputerNameA
LoadLibraryA
BuildCommDCBAndTimeoutsW
SetConsoleDisplayMode
SetCurrentDirectoryW
PostQueuedCompletionStatus
AddAtomA
SetEnvironmentVariableA
EnumResourceNamesA
RequestWakeupLatency
GetCurrentDirectoryA
EnumDateFormatsW
OpenSemaphoreW
GetVersionExA
lstrcpyW
CopyFileExA
GetLastError
MoveFileA
GetCurrentProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
RaiseException
RtlUnwind
EnterCriticalSection
SetHandleCount
GetFileType
DeleteCriticalSection
HeapAlloc
HeapFree
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
GetCurrentThreadId
InterlockedDecrement
Sleep
HeapSize
ExitProcess
WriteFile
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetCPInfo
GetOEMCP
IsValidCodePage
MultiByteToWideChar
VirtualAlloc
HeapReAlloc
SetFilePointer
GetConsoleCP
GetModuleHandleA
FlushFileBuffers
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CloseHandle
CreateFileA

Exports

Exports

_asdga@4
_letter@12
_wedding@4
_weewgg@8
_welcome@4
_yongfeng@4

Sections

.text
Size: 319KB - Virtual size: 319KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 193B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

f074981cf2b942ed95800de63bf609f8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 319KB - Virtual size: 319KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 17KB - Virtual size: 4.0MB

.tls Size: 512B - Virtual size: 193B

.rsrc Size: 19KB - Virtual size: 18KB

.text
Size: 319KB - Virtual size: 319KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 17KB - Virtual size: 4.0MB

.tls
Size: 512B - Virtual size: 193B

.rsrc
Size: 19KB - Virtual size: 18KB