d6a514f158169b05d51d57e3ce816f00N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

d6a514f158169b05d51d57e3ce816f00N.exe
Size

193KB
MD5

d6a514f158169b05d51d57e3ce816f00
SHA1

ca90d4812db2454c0bd6ca9fd2b3b6eb4b015c47
SHA256

13b96870d314fd9df0f637baab9e143fa4451c492ba3d9cc166effceb24b9b40
SHA512

b62226945445350c87d7784f6a182216d6540afc4f90366d183f166b986117b711b8e97e4bb7b15318ab0dc6f5c60d7f764301a1ca0311cbf4b2fc71464a9048
SSDEEP

3072:OliDQu7uPcRhDLAdUmMQjMeEjKjKq/QGvs/ZTiWWlyjAuR2urjV:oilaPGSUmbwKtsRuWHs4V

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d6a514f158169b05d51d57e3ce816f00N.exe

Files

d6a514f158169b05d51d57e3ce816f00N.exe
.dll windows:5 windows x86 arch:x86

ab12fe0b1c55247804e603d2d293c1e8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

ActivateActCtx
AssignProcessToJobObject
CloseHandle
CreateIoCompletionPort
CreateJobObjectW
CreateMutexW
DeactivateActCtx
DelayLoadFailureHook
ExpandEnvironmentStringsW
GetCurrentProcess
GetFileAttributesW
GetLocaleInfoW
GetModuleFileNameW
GetModuleHandleExA
GetPrivateProfileStringW
GetProcAddress
GetProcessTimes
GetStartupInfoW
GetSystemWindowsDirectoryW
GetThreadPriority
GetTickCount
GetTimeFormatW
GetUserDefaultLCID
GetWindowsDirectoryW
GlobalGetAtomNameW
HeapAlloc
HeapDestroy
HeapReAlloc
InitializeCriticalSection
InterlockedCompareExchange
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
LoadLibraryA
LocalAlloc
LocalFree
MoveFileW
MulDiv
OpenProcess
QueryPerformanceCounter
ReleaseMutex
ResumeThread
SetErrorMode
SetEvent
SetLastError
SetUnhandledExceptionFilter
Sleep
lstrcmpW
lstrcmpiA
lstrcmpiW
lstrcpyW
lstrcpynW

ole32

CoCreateInstance
CoMarshalInterThreadInterfaceInStream
CoRevokeClassObject
CoUninitialize
DoDragDrop
OleInitialize
OleUninitialize
RevokeDragDrop

shlwapi

PathCombineW
PathFindExtensionW
PathFindFileNameW
PathGetArgsW
PathIsNetworkPathW
PathParseIconLocationW
PathQuoteSpacesW
PathRemoveArgsW
PathRemoveBlanksW
PathRemoveFileSpecW
SHGetValueW
SHOpenRegStream2W
SHRegCloseUSKey
SHRegCreateUSKeyW
SHRegGetUSValueW
StrCatBuffW
StrChrW
StrCmpIW
StrCmpNW
StrCmpW
StrCpyNW
StrRetToBufW
wnsprintfW

user32

AdjustWindowRectEx
AppendMenuW
BeginPaint
BringWindowToTop
CascadeWindows
CharNextA
CharUpperBuffW
ChildWindowFromPoint
ChildWindowFromPointEx
CloseDesktop
CreatePopupMenu
CreateWindowExW
DestroyWindow
DialogBoxParamW
DispatchMessageW
DrawFocusRect
DrawTextW
EndPaint
EnumDisplayDevicesW
EnumDisplayMonitors
EnumWindows
EqualRect
FillRect
GetAncestor
GetAsyncKeyState
GetClassNameW
GetCursorPos
GetDC
GetDCEx
GetDesktopWindow
GetDlgItemInt
GetFocus
GetIconInfo
GetKeyState
GetMenuItemCount
GetMenuState
GetMonitorInfoW
GetNextDlgTabItem
GetParent
GetSysColor
GetSysColorBrush
GetSystemMenu
GetWindow
GetWindowThreadProcessId
InflateRect
InsertMenuW
InternalGetWindowText
InvalidateRect
IsChild
IsDlgButtonChecked
IsRectEmpty
IsWindow
IsWindowVisible
IsZoomed
KillTimer
LoadBitmapW
LoadCursorW
LoadMenuW
LoadStringW
MapWindowPoints
MessageBeep
MessageBoxW
MonitorFromPoint
MonitorFromRect
MoveWindow
MsgWaitForMultipleObjects
PeekMessageW
PostMessageW
PostQuitMessage
PrintWindow
PtInRect
RegisterClipboardFormatW
RegisterWindowMessageW
RemoveMenu
ScreenToClient
SendMessageCallbackW
SendNotifyMessageW
SetCapture
SetCursorPos
SetFocus
SetMenuDefaultItem
SetMenuItemInfoW
SetPropW
SetTimer
SetWindowLongA
SetWindowPos
SetWindowTextW
SubtractRect
SystemParametersInfoW
TileWindows
UnregisterHotKey
UpdateWindow
WindowFromPoint

winmm

mixerClose
mixerGetLineControlsW
waveOutGetNumDevs

Sections

.textbss
Size: - Virtual size: 212KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 181KB - Virtual size: 181KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 512B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 200B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ab12fe0b1c55247804e603d2d293c1e8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ole32

shlwapi

user32

winmm

Sections

.textbss Size: - Virtual size: 212KB

.text Size: 5KB - Virtual size: 5KB

.rdata Size: 5KB - Virtual size: 5KB

.data Size: 181KB - Virtual size: 181KB

.rsrc Size: 512B - Virtual size: 512B

.reloc Size: 200B - Virtual size: 4KB

.textbss
Size: - Virtual size: 212KB

.text
Size: 5KB - Virtual size: 5KB

.rdata
Size: 5KB - Virtual size: 5KB

.data
Size: 181KB - Virtual size: 181KB

.rsrc
Size: 512B - Virtual size: 512B

.reloc
Size: 200B - Virtual size: 4KB