1fbfa951aa20e5e517917edc04e31af0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

1fbfa951aa20e5e517917edc04e31af0N.exe
Size

144KB
MD5

1fbfa951aa20e5e517917edc04e31af0
SHA1

60feaac7e287fdd7038ffb41213cc44ad071bf46
SHA256

6f7064f3f34300b49e950981d6ef853d4a1e480b597f1085ae8069f1ceea8b1c
SHA512

e5af9e2e8fa4c00f3a0acc608f316b38e029597d63aedebe7ac4740e133219e31df81fed1d3738d1f4731aaaca6f2bdd527263d978d6061a314c20f4628e862b
SSDEEP

3072:dzH162E3hparQl+OZccBlksZsYKJ86cwX0:dzH1M3hG0WcBWs2Yo8uX0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1fbfa951aa20e5e517917edc04e31af0N.exe

Files

1fbfa951aa20e5e517917edc04e31af0N.exe
.exe windows:4 windows x86 arch:x86

e445a73d17282df830d2bd077eab74d1

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17

kernel32

WriteFile
lstrlenA
GetModuleFileNameA
CreateFileA
RemoveDirectoryA
SetEndOfFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetThreadPriority
CloseHandle
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LoadLibraryA
FlushFileBuffers
SetStdHandle
SetFilePointer
VirtualQuery
CreateProcessA
GetCurrentThread
GetCurrentProcess
SetPriorityClass
ResumeThread
FindFirstFileA
SetFileAttributesA
DeleteFileA
FindNextFileA
FindClose
GetModuleHandleA
RaiseException
RtlUnwind
HeapFree
ExitThread
TlsSetValue
TlsGetValue
GetLastError
CreateThread
GetStartupInfoA
GetCommandLineA
GetVersionExA
ExitProcess
HeapReAlloc
HeapAlloc
SetUnhandledExceptionFilter
TlsFree
SetLastError
GetCurrentThreadId
TlsAlloc
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
GetFileAttributesA
GetProcAddress
TerminateProcess
UnhandledExceptionFilter
HeapSize
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
ReadFile
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
MultiByteToWideChar
LCMapStringW
IsBadReadPtr
IsBadCodePtr
GetACP
GetOEMCP
GetCPInfo
InitializeCriticalSection

user32

DialogBoxParamA
ShowWindow
GetDC
GetWindowRect
ScreenToClient
DrawTextExA
ReleaseDC
MoveWindow
SystemParametersInfoA
GetClientRect
GetWindowLongA
AdjustWindowRect
BeginPaint
LoadIconA
DrawIcon
EndPaint
GetWindowTextA
EnumChildWindows
GetDlgItem
SendMessageA
EndDialog
SetTimer
SetWindowTextA
wsprintfA
MessageBoxA

gdi32

SelectObject

advapi32

RegCloseKey
RegQueryInfoKeyA
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyA
RegEnumValueA
RegDeleteValueA
RegEnumKeyExA
RegDeleteKeyA

Sections

.text
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 16KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 116KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e445a73d17282df830d2bd077eab74d1

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

advapi32

Sections

.text Size: 88KB - Virtual size: 88KB

.rdata Size: 16KB - Virtual size: 14KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 28KB - Virtual size: 116KB

.text
Size: 88KB - Virtual size: 88KB

.rdata
Size: 16KB - Virtual size: 14KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 28KB - Virtual size: 116KB