77181c5af104d160a15f1885a7bfc300N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

77181c5af104d160a15f1885a7bfc300N.exe
Size

1.6MB
MD5

77181c5af104d160a15f1885a7bfc300
SHA1

923d62ed2f2dfc5bc02462160be9342606229ec6
SHA256

ffef9842912ac5bc351c545fab23073dd2e5529150b2333fd245a61838ee3075
SHA512

02fcdfa058ca1aecae405b8d2bb2d82715ee97578e1c7dd5995f964c941b5a4372813c55212d0612f5041fcab1df0a5c372fe8a8d3929fd207ba5a5b32897ba1
SSDEEP

24576:D/MpOqco+K3GEkeexuAAkjdl9MUjqCJ0MhM1Sk+GPmY:DaOfo+K3GEkfAg4MhM1Sk+GPm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
77181c5af104d160a15f1885a7bfc300N.exe

Files

77181c5af104d160a15f1885a7bfc300N.exe
.dll windows:4 windows x86 arch:x86

4efd7dca39b4942c3b930c036cf081f4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

msvcrt

_pctype
__mb_cur_max
fread
fgetpos
fseek
realloc
strtol
strchr
strrchr
strncat
ctime
fopen
vfprintf
fclose
toupper
_getpid
wcslen
_iob
fprintf
sscanf
_mbsupr
_beginthreadex
strncpy
sprintf
_putenv
_adjust_fdiv
malloc
_initterm
free
memmove
srand
rand
atoi
getenv
_fcvt
time
atol
memset
_isctype
memcpy
_stricmp

kernel32

RaiseException
GetPrivateProfileIntA
GetPrivateProfileStringA
QueryDosDeviceA
DefineDosDeviceA
lstrcmpA
lstrlenA
WideCharToMultiByte
MultiByteToWideChar
ResetEvent
WaitForMultipleObjects
OpenEventA
FlushViewOfFile
IsBadReadPtr
GetModuleHandleA
GetSystemDirectoryW
GetSystemWindowsDirectoryW
Sleep
DisableThreadLibraryCalls
UnmapViewOfFile
GetTempPathA
CreateFileMappingA
OpenFileMappingA
MapViewOfFile
ReleaseMutex
TerminateThread
GetExitCodeThread
CreateMutexA
SetEvent
GetVersionExA
CreateEventA
GlobalUnlock
OpenFile
GlobalAlloc
GetCurrentProcess
GetCurrentThread
InitializeCriticalSection
GetTickCount
GlobalFree
EnterCriticalSection
GlobalLock
GetOverlappedResult
LeaveCriticalSection
ReleaseSemaphore
OpenSemaphoreA
CreateSemaphoreA
WaitForSingleObject
SearchPathA
GetFileSize
DeviceIoControl
LocalFree
LocalAlloc
WriteFile
GetVersion
GetLocalTime
ReadFile
CloseHandle
FindNextFileA
CreateFileA
SystemTimeToFileTime
GetSystemTime
FindClose
FindFirstFileA
GetProcAddress
SetErrorMode
GetLastError
FreeLibrary
LoadLibraryA
GetModuleFileNameA
GetEnvironmentVariableA
GetCurrentProcessId
InterlockedExchange

Exports

Exports

cype_FuncionPrincipal
cypebat_FuncionPrincipal

Sections

.text
Size: 1016KB - Virtual size: 1016KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CONST
Size: 4KB - Virtual size: 80B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 103KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 404KB - Virtual size: 683KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 88KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4efd7dca39b4942c3b930c036cf081f4

Headers

File Characteristics

Imports

msvcrt

kernel32

Exports

Exports

Sections

.text Size: 1016KB - Virtual size: 1016KB

CONST Size: 4KB - Virtual size: 80B

.rdata Size: 104KB - Virtual size: 103KB

.data Size: 404KB - Virtual size: 683KB

.reloc Size: 88KB - Virtual size: 85KB

.text
Size: 1016KB - Virtual size: 1016KB

CONST
Size: 4KB - Virtual size: 80B

.rdata
Size: 104KB - Virtual size: 103KB

.data
Size: 404KB - Virtual size: 683KB

.reloc
Size: 88KB - Virtual size: 85KB