46cf5e2d26068ce9d2c60cc59b2f15c0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

46cf5e2d26068ce9d2c60cc59b2f15c0N.exe
Size

232KB
MD5

46cf5e2d26068ce9d2c60cc59b2f15c0
SHA1

22388123fc2e383eecc1b7cdab4bc436be4640c7
SHA256

1b8c178f2d4353e2e7c68c0978e5676f8b605e84de694973d9f97aa03a6bb58e
SHA512

54d51b77b510a6d99cb771010a2525d0c84ee38ce2b74bc8355f1d91d88c64ec773d3d91db5eb374fc157c835c225c47b6e7fb2a3d1a1d128b74178e57a4d6f6
SSDEEP

3072:DX3O7kL9dEjTnciu0jKHHquXxJRK33yrd74xUl8APvpKHDpCEtXC:LOgxATn5qNnW3D9APvUBXC

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
46cf5e2d26068ce9d2c60cc59b2f15c0N.exe

Files

46cf5e2d26068ce9d2c60cc59b2f15c0N.exe
.dll regsvr32 windows:4 windows x86 arch:x86

74f49d39a11087f91530e91d68997e24

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

comctl32

CreateToolbarEx
ImageList_Create
ImageList_ReplaceIcon
ImageList_Destroy

shlwapi

StrToIntExA
SHDeleteKeyA
SHDeleteValueA
StrToIntA
StrTrimA

wininet

InternetConnectA
InternetOpenA
InternetQueryDataAvailable
InternetReadFile
InternetOpenUrlA
HttpOpenRequestA
HttpSendRequestA
InternetCloseHandle
HttpQueryInfoA

ws2_32

gethostbyname
gethostname
WSAStartup
WSACleanup

kernel32

LoadLibraryA
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
IsBadCodePtr
IsBadReadPtr
UnhandledExceptionFilter
GetEnvironmentStringsW
InterlockedDecrement
InterlockedExchange
GetACP
GetLocaleInfoA
GetThreadLocale
GetVersionExA
RaiseException
InitializeCriticalSection
DeleteCriticalSection
ReleaseMutex
lstrlenA
CloseHandle
ReadFile
GetFileSize
CreateFileA
WriteFile
CreateDirectoryA
DeleteFileA
GetModuleFileNameA
WideCharToMultiByte
WinExec
GetLastError
GetFileAttributesA
FindClose
FindNextFileA
FindFirstFileA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
WaitForSingleObject
CreateMutexA
GetSystemTimeAsFileTime
GetTempFileNameA
GetTempPathA
MultiByteToWideChar
TerminateThread
CreateThread
MoveFileA
SetStdHandle
SetFilePointer
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
LCMapStringW
LCMapStringA
GetSystemInfo
VirtualProtect
HeapSize
GetCurrentProcess
TerminateProcess
ExitProcess
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
VirtualQuery
SetUnhandledExceptionFilter
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleA
GetProcAddress
TlsGetValue
TlsSetValue
TlsFree
SetLastError
TlsAlloc
GetCommandLineA
GetCurrentThreadId
GetTimeZoneInformation
HeapAlloc
HeapReAlloc
HeapFree
RtlUnwind
lstrlenW
LocalFree
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
Sleep

user32

GetClassInfoA
GetClientRect
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindowThreadProcessId
SetWinEventHook
UnhookWinEvent
InsertMenuItemA
CreatePopupMenu
MoveWindow
RegisterClassA
DestroyCursor
SetWindowTextA
LoadMenuA
GetSubMenu
DeleteMenu
ClientToScreen
TrackPopupMenu
DestroyMenu
GetActiveWindow
MapWindowPoints
GetClassInfoExA
RegisterClassExA
CreateWindowExA
DefWindowProcA
KillTimer
SetTimer
wsprintfA
SetForegroundWindow
GetParent
IsWindow
GetDesktopWindow
GetWindow
GetClassNameA
MessageBoxA
IsWindowVisible
LoadStringA
EnableWindow
SetWindowPos
SetActiveWindow
CreateDialogParamA
GetWindowLongA
UpdateWindow
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
PeekMessageA
ShowWindow
SetWindowLongA
DestroyWindow
LoadIconA
GetFocus
GetKeyState
GetNextDlgTabItem
SetFocus
PostMessageA
GetCursorPos
ScreenToClient
ChildWindowFromPoint
SetCursor
LoadCursorA
GetDlgItem
SendMessageA
GetWindowTextA
SetMenuItemInfoA

gdi32

SetWindowOrgEx
GetObjectA
OffsetWindowOrgEx
CreateFontIndirectA

mpr

WNetGetUserA

advapi32

RegQueryValueExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegEnumKeyExA
RegOpenKeyExA

shell32

SHBrowseForFolderA
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA

ole32

CoCreateGuid
StringFromIID
CoTaskMemFree
CoCreateInstance
CLSIDFromProgID

oleaut32

SysAllocString
SysFreeString
SafeArrayUnaccessData
SafeArrayAccessData
VariantClear
VariantInit
VariantChangeType
SysAllocStringLen
SafeArrayDestroy
CreateErrorInfo
SafeArrayCreateVector
VariantCopy
VarBstrCmp

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
SetHideClientHWND

Sections

.text
Size: 148KB - Virtual size: 144KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

74f49d39a11087f91530e91d68997e24

Headers

File Characteristics

Imports

comctl32

shlwapi

wininet

ws2_32

kernel32

user32

gdi32

mpr

advapi32

shell32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 148KB - Virtual size: 144KB

.rdata Size: 28KB - Virtual size: 25KB

.data Size: 8KB - Virtual size: 14KB

.rsrc Size: 32KB - Virtual size: 29KB

.reloc Size: 12KB - Virtual size: 10KB

.text
Size: 148KB - Virtual size: 144KB

.rdata
Size: 28KB - Virtual size: 25KB

.data
Size: 8KB - Virtual size: 14KB

.rsrc
Size: 32KB - Virtual size: 29KB

.reloc
Size: 12KB - Virtual size: 10KB