86ef578ca5923119e65049f3d26bff7ea41cea12f8c425f06786b406c8dfaf9a[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

86ef578ca5923119e65049f3d26bff7ea41cea12f8c425f06786b406c8dfaf9a.exe
Size

1.5MB
MD5

fc2aa8460ff7dd8a4f121d75116161cf
SHA1

fd3ecd9dcb1de2f141af8053fd0b96eff50ae35e
SHA256

86ef578ca5923119e65049f3d26bff7ea41cea12f8c425f06786b406c8dfaf9a
SHA512

8b34ffa60affb60373703d143517b5387425df25674c959c05a27239228e8993b75b34f027a235ce0dea794a0da9c9f35c1bf613bc8937cdf7639daadc230d56
SSDEEP

49152:7maeeAxhHcKt5188it9LfG6ulQknhekqYmcHwWq:7maeeQc0OnhfG6ulQ0AkqaV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
86ef578ca5923119e65049f3d26bff7ea41cea12f8c425f06786b406c8dfaf9a.exe

Files

86ef578ca5923119e65049f3d26bff7ea41cea12f8c425f06786b406c8dfaf9a.exe
.exe windows:6 windows x86 arch:x86

91607fb48c6a289cd2fa8c6509b8625f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

CreateDirectoryW
SizeofResource
WriteFile
GetShortPathNameW
GetEnvironmentVariableW
GetEnvironmentVariableA
lstrcatA
GetTempPathA
LoadLibraryA
lstrcatW
LockResource
DeleteFileA
LoadResource
FindResourceW
GetProcAddress
ExitProcess
GetTempFileNameA
DecodePointer
FlushFileBuffers
HeapReAlloc
HeapSize
DosDateTimeToFileTime
GetProcessHeap
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
WideCharToMultiByte
SetEndOfFile
SetStdHandle
SetFileAttributesA
CloseHandle
CreateFileA
LocalFileTimeToFileTime
WriteConsoleW
SetFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
LocalFree
GetLastError
RtlUnwind
RaiseException
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ReadFile
GetConsoleMode
ReadConsoleW
CreateFileW
GetFileType
GetConsoleCP
SetFilePointerEx
GetStdHandle
GetModuleFileNameW
GetModuleHandleExW
HeapFree
HeapAlloc
MultiByteToWideChar
LCMapStringW

user32

DefWindowProcW
DestroyWindow
EndDialog
RegisterClassExW
EndPaint
LoadStringW
LoadIconW
LoadCursorW
PostQuitMessage
DialogBoxParamW
BeginPaint

ole32

CoInitializeSecurity
CoInitializeEx
CoCreateInstance
CoUninitialize

oleaut32

VariantInit
SysFreeString
SysAllocString
VariantClear

cabinet

FDICopy
FDIDestroy
FDICreate
FDIIsCabinet

Sections

.text
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

91607fb48c6a289cd2fa8c6509b8625f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

ole32

oleaut32

cabinet

Sections

.text Size: 87KB - Virtual size: 86KB

.rdata Size: 29KB - Virtual size: 28KB

.data Size: 2KB - Virtual size: 5KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 87KB - Virtual size: 86KB

.rdata
Size: 29KB - Virtual size: 28KB

.data
Size: 2KB - Virtual size: 5KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

.reloc
Size: 5KB - Virtual size: 4KB