fda926d51388012bc10a5a5d7a155080N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

fda926d51388012bc10a5a5d7a155080N.exe
Size

51KB
MD5

fda926d51388012bc10a5a5d7a155080
SHA1

cdddab23461550b3da9ebc0616985226d9696e36
SHA256

0f35426df2546268f7f3743c1023516726af3193e98ef7edae174f4a6dfd3147
SHA512

788cf962a0bc752d361cc1cbca2467d1dc914412fed69a03eaca8f2f83faff32c3032e649dec1a479c2e20fbf056b31013b8c226fc7810ea48bf3d7e6ee5fbce
SSDEEP

1536:FL3M+gs4QkuCaNkna5/sVAuMYkigWqe5Rpefa4xrZ:FgjjQkuClyYkizq/y4xrZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fda926d51388012bc10a5a5d7a155080N.exe

Files

fda926d51388012bc10a5a5d7a155080N.exe
.exe windows:6 windows x64 arch:x64

c3a7f89091bd66b18dc3480701eccab1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcp140

?_Xinvalid_argument@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

memcpy
memmove
memset
__current_exception
__current_exception_context
__C_specific_handler
_CxxThrowException
memcmp
__std_exception_copy
__std_exception_destroy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-runtime-l1-1-0

_exit
_register_onexit_function
_register_thread_local_exe_atexit_callback
_crt_atexit
_c_exit
_initterm_e
_cexit
_initterm
__p___argv
_seh_filter_exe
_set_app_type
_invalid_parameter_noinfo_noreturn
_get_initial_narrow_environment
_initialize_narrow_environment
terminate
__p___argc
_errno
exit
_wassert
_configure_narrow_argv
_initialize_onexit_table

api-ms-win-crt-stdio-l1-1-0

__p__commode
__acrt_iob_func
_set_fmode
__stdio_common_vfprintf

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-convert-l1-1-0

strtoul

api-ms-win-crt-heap-l1-1-0

malloc
_set_new_mode
_callnewh
free

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

kernel32

GetCurrentProcessId
RtlLookupFunctionEntry
RtlVirtualUnwind
GetModuleHandleW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
RtlCaptureContext
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter

Sections

.text
Size: 34KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c3a7f89091bd66b18dc3480701eccab1

Headers

DLL Characteristics

File Characteristics

Imports

msvcp140

vcruntime140

vcruntime140_1

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

kernel32

Sections

.text Size: 34KB - Virtual size: 34KB

.rdata Size: 12KB - Virtual size: 12KB

.data Size: 512B - Virtual size: 1KB

.pdata Size: 2KB - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 512B - Virtual size: 100B

.text
Size: 34KB - Virtual size: 34KB

.rdata
Size: 12KB - Virtual size: 12KB

.data
Size: 512B - Virtual size: 1KB

.pdata
Size: 2KB - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 512B - Virtual size: 100B