d3876e22fe5be28da4cfeee82f254840N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

d3876e22fe5be28da4cfeee82f254840N.exe
Size

204KB
MD5

d3876e22fe5be28da4cfeee82f254840
SHA1

28213c48ece11122f82bb240e2605f01280aaff5
SHA256

9eeddf6efc604cd1e62f778df05118927b2b04505e562efef5f140d2932bbac9
SHA512

383b686ea6ed5f45df06ddc35d4d5ff7aaae118be6d06fb6b7c7b6d6a63574f3f68add3087ce6ee6017f24455266a9d7df378d3e794d93023ed5f4ddb20fb23b
SSDEEP

3072:4dGaTPrrIGvvyy8dHSi+OcGMrOpOVKdOyMbkrWRdg+E2uEPczTinJhV+p9GEVFU/:6GazIc6TVBMrOpzeJEsuirSGEMpgE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3876e22fe5be28da4cfeee82f254840N.exe

Files

d3876e22fe5be28da4cfeee82f254840N.exe
.exe windows:4 windows x86 arch:x86

e12f72e7fe59535708698b4de0340a02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
GetWindowsDirectoryW
SetErrorMode
CreateFileMappingA
GetComputerNameA
QueryPerformanceCounter
GetModuleFileNameA
SetPriorityClass
lstrcpyn
GetFileType
InitializeCriticalSection
GetLogicalDrives
GetProcessHeap
GetNumberFormatA
LocalAlloc
CreateEventW
GetTimeFormatA
GetVersionExW
GetProcessHeaps
CopyFileExW
GetHandleInformation
GlobalGetAtomNameA
FlushFileBuffers
CreateNamedPipeW
CopyFileA
GetCurrentDirectoryA
OpenWaitableTimerW
GetCommandLineW
lstrlen
CopyFileExA
FreeLibrary
SetComputerNameW
GetProcAddress
EnumCalendarInfoA
FindAtomA
GetModuleHandleW
CreatePipe
OpenProcess
CreateMailslotW
BeginUpdateResourceW
IsDebuggerPresent
GetVersionExA
GetEnvironmentStringsW
GetModuleHandleA

user32

GetSysColorBrush
RegisterClassExW
GetWindowLongA
SetMenu
ArrangeIconicWindows
DialogBoxParamW
LoadIconW
CreateIcon
CharNextA
GetMessageW
LoadImageA
TrackPopupMenuEx
mouse_event
GetParent
OpenClipboard
LoadIconW
GetIconInfo
CheckRadioButton
GetIconInfo
GetWindowTextW
OffsetRect
SetWindowPos
GetMenuStringW
CopyRect
EnumWindows
SetFocus
SetDlgItemInt
GetSystemMetrics
GetWindowTextLengthA
GetCapture
GetMenuItemCount
EnumDesktopsA
DestroyCursor
GetClassInfoExA
UpdateLayeredWindow
MonitorFromWindow
FrameRect
EnumChildWindows
FindWindowA
LoadBitmapW
RegisterClassExA
CloseWindow
IsMenu
MessageBeep
AdjustWindowRect
EnumDesktopWindows
DeleteMenu
MonitorFromRect
IsWindow

gdi32

ExtFloodFill
ExtEscape
EqualRgn
CopyEnhMetaFileW
SetPixelFormat
ResetDCW
CreatePolygonRgn
CreateDCA
SetTextJustification
GetKerningPairsA
GetDCPenColor
SetPaletteEntries
AbortPath
CreatePolyPolygonRgn
GetBkMode

advapi32

RegOpenKeyA
RegQueryValueW
RegReplaceKeyW
RegCreateKeyExW
RegRestoreKeyA

oleaut32

CreateDispTypeInfo

opengl32

glColor3iv

winspool.drv

SetPortW
AddPortExW
ScheduleJob
PrinterProperties
XcvDataW
FindNextPrinterChangeNotification
EnumPrintProcessorDatatypesW
SetPortA
ResetPrinterW

oledlg

OleUIInsertObjectA

wsock32

WSARecvEx
WSASetBlockingHook
shutdown

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.oqngCF
Size: 1KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.N
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.LUV
Size: 1024B - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.GOTYM
Size: 2KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.AGbvFQ
Size: 2KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kkPQAu
Size: 512B - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e12f72e7fe59535708698b4de0340a02

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

oleaut32

opengl32

winspool.drv

oledlg

wsock32

Sections

.text Size: 12KB - Virtual size: 12KB

.oqngCF Size: 1KB - Virtual size: 19KB

.N Size: 4KB - Virtual size: 15KB

.LUV Size: 1024B - Virtual size: 31KB

.GOTYM Size: 2KB - Virtual size: 21KB

.data Size: 10KB - Virtual size: 9KB

.AGbvFQ Size: 2KB - Virtual size: 9KB

.kkPQAu Size: 512B - Virtual size: 253KB

.rsrc Size: 168KB - Virtual size: 168KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 12KB

.oqngCF
Size: 1KB - Virtual size: 19KB

.N
Size: 4KB - Virtual size: 15KB

.LUV
Size: 1024B - Virtual size: 31KB

.GOTYM
Size: 2KB - Virtual size: 21KB

.data
Size: 10KB - Virtual size: 9KB

.AGbvFQ
Size: 2KB - Virtual size: 9KB

.kkPQAu
Size: 512B - Virtual size: 253KB

.rsrc
Size: 168KB - Virtual size: 168KB

.reloc
Size: 1KB - Virtual size: 1KB