a58ddb9974c47c584fe85ba53b6d3d00N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

a58ddb9974c47c584fe85ba53b6d3d00N.exe
Size

174KB
MD5

a58ddb9974c47c584fe85ba53b6d3d00
SHA1

326b90b2850b8230851e643dbf9daf3fdb5bb15d
SHA256

96f12a29893b58f74e329fddf36f36565c4c2cc4c3b1a6629fcb955bad60d654
SHA512

71d770bfaa0fdf7630a0d1552e04171e373e93fefa1fdd4a1aa88e647a431aa5f7ed439e5360cbe90b55947e2acd9f0ae5b9022245fd8f10008a7e271655e1df
SSDEEP

3072:h9mspVQc6q2VyhKk+VVofb5hW8Sfb5hW8Sfb5hW8FffEfF5hW8SfF5hW8SfF5hW/:DpVQs2VGccuGGH335RR3w

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
a58ddb9974c47c584fe85ba53b6d3d00N.exe

Files

a58ddb9974c47c584fe85ba53b6d3d00N.exe
.dll windows:6 windows x64 arch:x64

432f89dd7abf20eeccc35cd0e8a4509c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

IsWindow
GetDesktopWindow

msvcp140

?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?uncaught_exception@std@@YA_NXZ

kernel32

LoadLibraryW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
GetSystemDirectoryW
GetVersionExW
FreeLibrary
GetProcAddress
OutputDebugStringA
GetVersion
RtlCaptureContext

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__std_type_info_destroy_list
memset
__std_terminate
memcpy
_purecall
__C_specific_handler
__current_exception
__current_exception_context
__std_exception_copy
__std_exception_destroy
_CxxThrowException

api-ms-win-crt-runtime-l1-1-0

_configure_narrow_argv
_cexit
_errno
_execute_onexit_table
_invalid_parameter_noinfo
terminate
_initterm
_initialize_onexit_table
_seh_filter_dll
_initterm_e
_initialize_narrow_environment

api-ms-win-crt-math-l1-1-0

cos

api-ms-win-crt-string-l1-1-0

strncmp
wcscat_s
strncpy

api-ms-win-crt-stdio-l1-1-0

fflush
__stdio_common_vsscanf
fopen_s
__stdio_common_vfprintf
__acrt_iob_func
__stdio_common_vsprintf

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

api-ms-win-crt-environment-l1-1-0

_dupenv_s

Exports

Exports

Java_com_sun_prism_d3d_D3DContext_nBlit
Java_com_sun_prism_d3d_D3DContext_nBuildNativeGeometryInt
Java_com_sun_prism_d3d_D3DContext_nBuildNativeGeometryShort
Java_com_sun_prism_d3d_D3DContext_nCreateD3DMesh
Java_com_sun_prism_d3d_D3DContext_nCreateD3DMeshView
Java_com_sun_prism_d3d_D3DContext_nCreateD3DPhongMaterial
Java_com_sun_prism_d3d_D3DContext_nDrawIndexedQuads
Java_com_sun_prism_d3d_D3DContext_nGetFrameStats
Java_com_sun_prism_d3d_D3DContext_nIsRTTVolatile
Java_com_sun_prism_d3d_D3DContext_nReleaseD3DMesh
Java_com_sun_prism_d3d_D3DContext_nReleaseD3DMeshView
Java_com_sun_prism_d3d_D3DContext_nReleaseD3DPhongMaterial
Java_com_sun_prism_d3d_D3DContext_nRenderMeshView
Java_com_sun_prism_d3d_D3DContext_nResetClipRect
Java_com_sun_prism_d3d_D3DContext_nResetTransform
Java_com_sun_prism_d3d_D3DContext_nSetAmbientLight
Java_com_sun_prism_d3d_D3DContext_nSetBlendEnabled
Java_com_sun_prism_d3d_D3DContext_nSetCameraPosition
Java_com_sun_prism_d3d_D3DContext_nSetClipRect
Java_com_sun_prism_d3d_D3DContext_nSetCullingMode
Java_com_sun_prism_d3d_D3DContext_nSetDeviceParametersFor2D
Java_com_sun_prism_d3d_D3DContext_nSetDeviceParametersFor3D
Java_com_sun_prism_d3d_D3DContext_nSetDiffuseColor
Java_com_sun_prism_d3d_D3DContext_nSetLight
Java_com_sun_prism_d3d_D3DContext_nSetMap
Java_com_sun_prism_d3d_D3DContext_nSetMaterial
Java_com_sun_prism_d3d_D3DContext_nSetProjViewMatrix
Java_com_sun_prism_d3d_D3DContext_nSetRenderTarget
Java_com_sun_prism_d3d_D3DContext_nSetSpecularColor
Java_com_sun_prism_d3d_D3DContext_nSetTexture
Java_com_sun_prism_d3d_D3DContext_nSetTransform
Java_com_sun_prism_d3d_D3DContext_nSetWireframe
Java_com_sun_prism_d3d_D3DContext_nSetWorldTransform
Java_com_sun_prism_d3d_D3DContext_nSetWorldTransformToIdentity
Java_com_sun_prism_d3d_D3DGraphics_nClear
Java_com_sun_prism_d3d_D3DPipeline_nDispose
Java_com_sun_prism_d3d_D3DPipeline_nGetAdapterCount
Java_com_sun_prism_d3d_D3DPipeline_nGetAdapterOrdinal
Java_com_sun_prism_d3d_D3DPipeline_nGetDriverInformation
Java_com_sun_prism_d3d_D3DPipeline_nGetErrorMessage
Java_com_sun_prism_d3d_D3DPipeline_nGetMaxSampleSupport
Java_com_sun_prism_d3d_D3DPipeline_nInit
Java_com_sun_prism_d3d_D3DResourceFactory_nCreateSwapChain
Java_com_sun_prism_d3d_D3DResourceFactory_nCreateTexture
Java_com_sun_prism_d3d_D3DResourceFactory_nGetContext
Java_com_sun_prism_d3d_D3DResourceFactory_nGetDevice
Java_com_sun_prism_d3d_D3DResourceFactory_nGetMaximumTextureSize
Java_com_sun_prism_d3d_D3DResourceFactory_nGetNativeTextureObject
Java_com_sun_prism_d3d_D3DResourceFactory_nGetTextureHeight
Java_com_sun_prism_d3d_D3DResourceFactory_nGetTextureWidth
Java_com_sun_prism_d3d_D3DResourceFactory_nIsDefaultPool
Java_com_sun_prism_d3d_D3DResourceFactory_nReadPixelsB
Java_com_sun_prism_d3d_D3DResourceFactory_nReadPixelsI
Java_com_sun_prism_d3d_D3DResourceFactory_nReleaseResource
Java_com_sun_prism_d3d_D3DResourceFactory_nResetDevice
Java_com_sun_prism_d3d_D3DResourceFactory_nTestCooperativeLevel
Java_com_sun_prism_d3d_D3DResourceFactory_nUpdateTextureB
Java_com_sun_prism_d3d_D3DResourceFactory_nUpdateTextureF
Java_com_sun_prism_d3d_D3DResourceFactory_nUpdateTextureI
Java_com_sun_prism_d3d_D3DShader_disable
Java_com_sun_prism_d3d_D3DShader_enable
Java_com_sun_prism_d3d_D3DShader_init
Java_com_sun_prism_d3d_D3DShader_nGetRegister
Java_com_sun_prism_d3d_D3DShader_setConstantsF
Java_com_sun_prism_d3d_D3DShader_setConstantsI
Java_com_sun_prism_d3d_D3DSwapChain_nPresent

Sections

.text
Size: 43KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 123KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 888B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

432f89dd7abf20eeccc35cd0e8a4509c

Headers

DLL Characteristics

File Characteristics

Imports

user32

msvcp140

kernel32

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-environment-l1-1-0

Exports

Exports

Sections

.text Size: 43KB - Virtual size: 43KB

.rdata Size: 123KB - Virtual size: 123KB

.data Size: 1024B - Virtual size: 2KB

.pdata Size: 3KB - Virtual size: 3KB

.rsrc Size: 1024B - Virtual size: 888B

.reloc Size: 512B - Virtual size: 276B

.text
Size: 43KB - Virtual size: 43KB

.rdata
Size: 123KB - Virtual size: 123KB

.data
Size: 1024B - Virtual size: 2KB

.pdata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 1024B - Virtual size: 888B

.reloc
Size: 512B - Virtual size: 276B