d51f32009e24321cde2a860b08365710N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

d51f32009e24321cde2a860b08365710N.exe
Size

1.8MB
MD5

d51f32009e24321cde2a860b08365710
SHA1

9e962378ece284faffac2968b192ce95fd1b6056
SHA256

4df7a5a6f1b0878f4d1bab4ce525ba9ef8d2689eef47d4ee873f03d9161676a8
SHA512

d0d63bf3add85c70d70546c5301e3c46d66ec25555028859500e5cf11e87e16979be80a31b8b9b4e608296525c068eed8f25fe2faa4b328eccec0c7063edc105
SSDEEP

49152:2PKdrrNDS5lSiPKxHbLfUzxzKakOElMaFLkoHc:ogNDS5lScsak7K

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d51f32009e24321cde2a860b08365710N.exe

Files

d51f32009e24321cde2a860b08365710N.exe
.exe windows:5 windows x86 arch:x86

6081abd02e06ad157363bbec38866d39

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

ngen.pdb

Imports

mscoree

GetRequestedRuntimeInfo
GetRequestedRuntimeVersion
CorBindToRuntimeEx
GetCORVersion
LoadLibraryShim
GetRealProcAddress
CorGetSvc
GetCORSystemDirectory

msvcr80

_vsnprintf
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
?terminate@@YAXXZ
_except_handler4_common
_decode_pointer
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_encode_pointer
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
__winitenv
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
free
malloc
_putws
_flushall
wcstoul
towupper
memmove
_vsnprintf_s
_errno
wcsncpy_s
wcscpy_s
strcpy_s
wcsncmp
strncmp
_vsnwprintf_s
strchr
_CxxThrowException
_wtoi
_wcsicmp
tolower
_wcsnicmp
exit
_purecall
memset
wcscat_s
__CxxFrameHandler3
memcpy
_vswprintf_c_l

advapi32

RegQueryValueExW
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegCloseKey

kernel32

GetEnvironmentVariableW
GetEnvironmentVariableA
GetCurrentDirectoryW
GetCurrentDirectoryA
GetFileAttributesExW
GetFileAttributesExA
GetFileAttributesW
GetFileAttributesA
CreateEventW
CreateEventA
CreateMutexW
LocalAlloc
FormatMessageA
FormatMessageW
CreateProcessA
CreateProcessW
DebugBreak
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
ReleaseSemaphore
TlsSetValue
TlsAlloc
TlsFree
HeapAlloc
GetProcessHeap
HeapFree
WaitForSingleObjectEx
ReleaseMutex
SleepEx
VirtualAlloc
VirtualFree
VirtualQuery
VirtualProtect
HeapCreate
HeapDestroy
HeapValidate
InterlockedExchange
Sleep
SetUnhandledExceptionFilter
GetTickCount
UnhandledExceptionFilter
IsDebuggerPresent
GetModuleFileNameA
CloseHandle
WaitForSingleObject
GetCurrentProcessId
GetLocalTime
WriteFile
GetStdHandle
RaiseException
GetConsoleOutputCP
SetErrorMode
SetLastError
GetLastError
TlsGetValue
InterlockedCompareExchange
GetModuleHandleA
FreeLibrary
InterlockedIncrement
InterlockedDecrement
lstrlenW
GetCurrentProcess
LocalFree
MultiByteToWideChar
IsDBCSLeadByte
GetCPInfo
GetACP
GetCurrentThreadId
QueryPerformanceCounter
GetSystemTimeAsFileTime
SetFilePointer
GetVersionExA
GetModuleHandleW
WideCharToMultiByte
TerminateProcess
LoadLibraryExA
LoadLibraryExW
GetFullPathNameA
GetFullPathNameW
CreateMutexA
GetModuleFileNameW
CreateFileA
CreateFileW
CopyFileA
DeleteFileA
MoveFileExW
CreateSemaphoreA
CreateSemaphoreW
LCMapStringA
LCMapStringW
GetVersionExW
OutputDebugStringA
OutputDebugStringW

oleaut32

SetErrorInfo
SysAllocString
SysFreeString

user32

LoadStringA
LoadStringW

Sections

.text
Size: 87KB - Virtual size: 86KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6081abd02e06ad157363bbec38866d39

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mscoree

msvcr80

advapi32

kernel32

oleaut32

user32

Sections

.text Size: 87KB - Virtual size: 86KB

.data Size: 512B - Virtual size: 2KB

.rsrc Size: 2KB - Virtual size: 1KB

.text
Size: 87KB - Virtual size: 86KB

.data
Size: 512B - Virtual size: 2KB

.rsrc
Size: 2KB - Virtual size: 1KB