54c27ee0b758cd94404f5cf2f08619b0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

54c27ee0b758cd94404f5cf2f08619b0N.exe
Size

470KB
MD5

54c27ee0b758cd94404f5cf2f08619b0
SHA1

44fb688ac1ea918af409f99f7c6e7876ddf1aac5
SHA256

f7d11835635f1d42999ca16ea7e3b99825ccc22985a9ba563fc8f6291eb6bdfa
SHA512

0269a9963f3295876c4e91f769527c3c5b4cc804bd18bf5f649693372cd76e81ceb6431858bfeba961d3b35e10d6a3914d844e18c1f3dfd880a2840dee169874
SSDEEP

12288:4z+f+0PtNQ5vmC7xsR8Q7U1QJshfOWdl:4CG0PctmC7xsR8Q7U1QuYWdl

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54c27ee0b758cd94404f5cf2f08619b0N.exe

Files

54c27ee0b758cd94404f5cf2f08619b0N.exe
.dll windows:4 windows x64 arch:x64

923d671854e21a0b0d149c9443819fa9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\__autobuild\jmde\fx\reaeq\Release64\reaeq.pdb

Imports

kernel32

CreateFileA
CloseHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetPrivateProfileIntA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
Sleep
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlVirtualUnwind
RtlPcToFileHeader
RaiseException
SetLastError
TlsFree
TlsAlloc
TlsGetValue
GetModuleFileNameA
GetStdHandle
WriteFile
InitializeCriticalSection
GetModuleHandleA
GetProcAddress
DeleteCriticalSection
WritePrivateProfileStringA
GetTickCount
EnterCriticalSection
LeaveCriticalSection
FormatMessageA
LoadLibraryA
GetThreadLocale
GetLastError
HeapFree
HeapReAlloc
HeapAlloc
RtlLookupFunctionEntry
RtlUnwindEx
GetCurrentThreadId
TlsSetValue
GetCommandLineA
GetVersionExA
GetProcessHeap
HeapSetInformation
HeapCreate
HeapDestroy
HeapSize
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
ExitProcess

user32

RegisterClassA
RegisterWindowMessageA
DefWindowProcA
ReleaseCapture
SetCapture
SetWindowLongA
GetClassNameA
BeginPaint
GetWindow
EndPaint
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
EnumChildWindows
InvalidateRgn
GetDlgItemTextA
IsDlgButtonChecked
ShowWindow
GetClientRect
SetWindowPos
WindowFromPoint
CheckDlgButton
SendDlgItemMessageA
PostMessageA
SetTimer
SetWindowLongPtrA
GetWindowLongPtrA
UnregisterClassA
SetDlgItemTextA
GetCursorPos
ClientToScreen
LoadMenuA
GetSubMenu
CheckMenuItem
EnableMenuItem
GetFocus
TrackPopupMenu
DestroyMenu
LoadCursorA
SetCursor
wsprintfA
GetSysColor
OffsetRect
GetDlgItem
SendMessageA
GetAsyncKeyState
InvalidateRect
DestroyWindow
CreateDialogParamA
GetWindowLongA
IsWindowVisible
GetParent
GetWindowRect
ScreenToClient

gdi32

BitBlt
CreateSolidBrush
FillRgn
RectInRegion
CreateRectRgnIndirect
CombineRgn
DeleteObject
CreateFontIndirectA

Exports

Exports

VSTPluginMain

Sections

.text
Size: 310KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data1
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.trace
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

923d671854e21a0b0d149c9443819fa9

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 310KB - Virtual size: 310KB

.rdata Size: 110KB - Virtual size: 110KB

.data Size: 10KB - Virtual size: 28KB

.pdata Size: 7KB - Virtual size: 6KB

.data1 Size: 7KB - Virtual size: 7KB

.trace Size: 13KB - Virtual size: 12KB

.rsrc Size: 3KB - Virtual size: 2KB

.reloc Size: 7KB - Virtual size: 6KB

.text
Size: 310KB - Virtual size: 310KB

.rdata
Size: 110KB - Virtual size: 110KB

.data
Size: 10KB - Virtual size: 28KB

.pdata
Size: 7KB - Virtual size: 6KB

.data1
Size: 7KB - Virtual size: 7KB

.trace
Size: 13KB - Virtual size: 12KB

.rsrc
Size: 3KB - Virtual size: 2KB

.reloc
Size: 7KB - Virtual size: 6KB