1c02f78609ac4fa484f4513cc4f5f720N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

1c02f78609ac4fa484f4513cc4f5f720N.exe
Size

50KB
MD5

1c02f78609ac4fa484f4513cc4f5f720
SHA1

73205258b567d924186ada7d4d604bcb7ade2277
SHA256

75a9c27bdcb8621bc17aa61158c1f1a90d758f2ef53109b100f8794fbc631bb1
SHA512

2d522751ae874cbe7bd15287ecea11f2581cad3e7ff242dd698ef720bc4a36ec57eb816f598c9f1f082f4239c973626cf1e2c1583f2f676d6faa649f3a0a5790
SSDEEP

768:DYE0T5blTGokskFLGUK22J0gbj+hzv0LgC1hifDJbwbQEgQbA7frnLv8:DYPdZGodlUKPbFLT1hGDJMgQb0/v8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1c02f78609ac4fa484f4513cc4f5f720N.exe

Files

1c02f78609ac4fa484f4513cc4f5f720N.exe
.dll windows:4 windows x86 arch:x86

511d4a3ed987fa9acc91db3e78959bca

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
TlsGetValue
VirtualProtect
VirtualQuery

libmingwex-4

__mingw_free

msvcrt

_tzset
__dllonexit
_assert
_errno
_iob
abort
calloc
fflush
fmod
fwrite
gmtime
localtime
malloc
mktime
sprintf
sqrt
vfprintf

agena

agn_checknumber
agn_checkstring
agn_pushboolean
luaL_checkstack
luaL_error
luaL_optinteger
luaL_optnumber
luaL_register
lua_pushboolean
lua_pushnumber
lua_pushstring
sun_acos
sun_atan
sun_atan2
sun_cos
sun_floor
sun_hypot
sun_sin
sun_tan
sun_trunc
tools_auxcdate
tools_maketime
tools_memcpy
tools_streq
tools_streqx

Exports

Exports

luaopen_astro

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

/4
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 340B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 74B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 24B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

511d4a3ed987fa9acc91db3e78959bca

Headers

File Characteristics

Imports

kernel32

libmingwex-4

msvcrt

agena

Exports

Exports

Sections

.text Size: 31KB - Virtual size: 30KB

.data Size: 512B - Virtual size: 324B

.rdata Size: 5KB - Virtual size: 4KB

/4 Size: 5KB - Virtual size: 4KB

.bss Size: - Virtual size: 340B

.edata Size: 512B - Virtual size: 74B

.idata Size: 2KB - Virtual size: 1KB

.CRT Size: 512B - Virtual size: 24B

.tls Size: 512B - Virtual size: 32B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 31KB - Virtual size: 30KB

.data
Size: 512B - Virtual size: 324B

.rdata
Size: 5KB - Virtual size: 4KB

/4
Size: 5KB - Virtual size: 4KB

.bss
Size: - Virtual size: 340B

.edata
Size: 512B - Virtual size: 74B

.idata
Size: 2KB - Virtual size: 1KB

.CRT
Size: 512B - Virtual size: 24B

.tls
Size: 512B - Virtual size: 32B

.reloc
Size: 2KB - Virtual size: 1KB