3cff24824196797d0b47f10cd6f6ac10N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

3cff24824196797d0b47f10cd6f6ac10N.exe
Size

95KB
MD5

3cff24824196797d0b47f10cd6f6ac10
SHA1

97025fb059fe2ee1eee7238a6383f01066bac578
SHA256

9d2094d61c873a7ddac936c8fe11fccf70d0c23f9624a002c9444ab0f3f26519
SHA512

b2c68cbec48de3fb541d7e0798c0c627fe7ab1964a9b7f0aa5d37109743c70ed3c789fe95c7b6825af6afac2d732ae8b99d4253a52fd82ee5db5e4fb3d22cca7
SSDEEP

1536:ZdEEnCW/Tvg7FkFeozCG0kvQu9oe7ofzHVDkOunB8GGbCXzdKMBDYlhkT:ZdEECCNIjGQuREzVDkOunLdp8kT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
3cff24824196797d0b47f10cd6f6ac10N.exe

Files

3cff24824196797d0b47f10cd6f6ac10N.exe
.exe windows:5 windows x86 arch:x86

9da9c383b08b52f091a1ce8697c9eeb2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ole32

OleSaveToStream
CreateBindCtx
CoGetMarshalSizeMax
CreateILockBytesOnHGlobal
OleBuildVersion
GetHGlobalFromILockBytes
OleCreateLinkFromDataEx
StgIsStorageILockBytes

version

VerQueryValueW
VerFindFileW

kernel32

SetLastError
CreateFileW
SetStdHandle
WriteConsoleW
CloseHandle
HeapSize
IsProcessorFeaturePresent
SetFilePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
EnterCriticalSection
LeaveCriticalSection
DecodePointer
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
TerminateProcess
GetCurrentProcess
GetProcAddress
GetModuleHandleW
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameW
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
GetLastError
InterlockedDecrement
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
HeapAlloc
LoadLibraryW
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
MultiByteToWideChar
GetStringTypeW

Sections

.text
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

BSS
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 41KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9da9c383b08b52f091a1ce8697c9eeb2

Headers

DLL Characteristics

File Characteristics

Imports

ole32

version

kernel32

Sections

.text Size: 28KB - Virtual size: 27KB

BSS Size: 512B - Virtual size: 100B

.rdata Size: 11KB - Virtual size: 11KB

.data Size: 8KB - Virtual size: 112KB

.rsrc Size: 41KB - Virtual size: 41KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 28KB - Virtual size: 27KB

BSS
Size: 512B - Virtual size: 100B

.rdata
Size: 11KB - Virtual size: 11KB

.data
Size: 8KB - Virtual size: 112KB

.rsrc
Size: 41KB - Virtual size: 41KB

.reloc
Size: 5KB - Virtual size: 4KB