d07850e92c320ee24048e6a369c108c0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

d07850e92c320ee24048e6a369c108c0N.exe
Size

203KB
MD5

d07850e92c320ee24048e6a369c108c0
SHA1

9c196a11f361c597dfbfd18bcbd0146efd10362e
SHA256

cd4fc6b42d54fe9892c8da62d47cd6923c0d5807a01f0aa56d136e5846b3ecc3
SHA512

d1ec1cb7bcace76fd9553b01bd08efda0fe1bff5953e61fa2c8c82298cad35d32b492d1503ca1834f8de4437f8131eef9ef7e6b1e1285de03f6b2b45ffecdf86
SSDEEP

6144:OEL1lvsWYuOiMnGNuuF8XcfI2MPO7qhnhF9mD:3nksHxyXcfIRhFE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d07850e92c320ee24048e6a369c108c0N.exe

Files

d07850e92c320ee24048e6a369c108c0N.exe
.exe windows:4 windows x86 arch:x86

dec3dee9869bb0d71498fbbf0d597bb9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeResource
MoveFileW
GetLogicalDrives
WinExec
SearchPathW
GetACP
GetModuleHandleA
CreateDirectoryW
CompareStringA
GetEnvironmentStringsA
lstrcmpA
ExpandEnvironmentStringsA
SuspendThread
lstrcmpi
GetHandleInformation
lstrcatA
GetStringTypeW
CreateSemaphoreA
GetProcAddress
EnumTimeFormatsA
GetSystemDefaultLCID
GetNamedPipeInfo
GetCurrentThreadId
GetNumberFormatA
IsBadStringPtrA
GetModuleFileNameA

user32

DrawTextW
GetMessageW
OffsetRect
DialogBoxParamA
SendMessageW
CreateDialogIndirectParamW
LoadBitmapA
SetForegroundWindow
GetDlgItem
MonitorFromPoint
FindWindowW
WaitForInputIdle
CreateWindowExA
MoveWindow
SetWindowTextA
CharUpperA
GetDC
UpdateWindow
UnregisterClassA
GetKeyboardType
ShowWindow
GetClassInfoW
RegisterClassExW
CharNextA
CreateWindowExW
IsDlgButtonChecked
mouse_event
PostMessageA
RegisterClassExA
SetCursorPos
GetMenuItemInfoA
wvsprintfA
CharUpperW
GetCursorPos
GetSystemMetrics
CreateDialogParamA
GetIconInfo
ArrangeIconicWindows
DefWindowProcW
GetClassNameW
GetClassInfoExA

gdi32

BitBlt
GetTextMetricsW
CreateMetaFileW
GetEnhMetaFileA
CreateMetaFileA
EnumFontFamiliesExA
ResizePalette
FlattenPath
CreateFontIndirectW
OffsetClipRgn
GetCharABCWidthsI
SetMapperFlags
RestoreDC
TranslateCharsetInfo
SetBrushOrgEx
GetEnhMetaFileDescriptionA
PtInRegion

advapi32

RegQueryValueW
RegSaveKeyW
RegOpenKeyW
RegRestoreKeyW
RegFlushKey
RegEnumValueA
RegOpenKeyExA
RegCreateKeyExA
RegEnumValueW
RegCreateKeyExW

shlwapi

PathParseIconLocationW
UrlGetLocationW
PathFileExistsW
AssocQueryStringA
UrlCreateFromPathW
PathUndecorateA
StrCmpNIA
PathIsFileSpecW

Sections

.qtJ
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.tc
Size: 3KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.VXtI
Size: 3KB - Virtual size: 205KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.B
Size: 4KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 103KB - Virtual size: 418KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.M
Size: 4KB - Virtual size: 479KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 72KB - Virtual size: 71KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 824B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dec3dee9869bb0d71498fbbf0d597bb9

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

Sections

.qtJ Size: 11KB - Virtual size: 11KB

.tc Size: 3KB - Virtual size: 48KB

.VXtI Size: 3KB - Virtual size: 205KB

.B Size: 4KB - Virtual size: 235KB

.data Size: 103KB - Virtual size: 418KB

.M Size: 4KB - Virtual size: 479KB

.rsrc Size: 72KB - Virtual size: 71KB

.reloc Size: 1024B - Virtual size: 824B

.qtJ
Size: 11KB - Virtual size: 11KB

.tc
Size: 3KB - Virtual size: 48KB

.VXtI
Size: 3KB - Virtual size: 205KB

.B
Size: 4KB - Virtual size: 235KB

.data
Size: 103KB - Virtual size: 418KB

.M
Size: 4KB - Virtual size: 479KB

.rsrc
Size: 72KB - Virtual size: 71KB

.reloc
Size: 1024B - Virtual size: 824B