8918ad1418f789155126cca8c551bdb0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

8918ad1418f789155126cca8c551bdb0N.exe
Size

2.4MB
MD5

8918ad1418f789155126cca8c551bdb0
SHA1

eaea6b7a714f49a522b9cc5e8f65fe4106499135
SHA256

b01419d4ba375a461373b104c4c7770082bfb253640937a9d0e053eb1fac6d4a
SHA512

e2e387d9b59588c5c0e6831b67c0a6705bfb98083013d5e842d8520a3d9e957a98ce43164d09f74c2f61f5b33f8c0b31551d9859068ede9b26391b861d3f587f
SSDEEP

49152:NTKPy00QLTksZ9ffnznR7DpOMuDA7UXEKGYaairDMR5cLON/6H78AvauFfQxPTV:R

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8918ad1418f789155126cca8c551bdb0N.exe

Files

8918ad1418f789155126cca8c551bdb0N.exe
.dll windows:6 windows x86 arch:x86

1413b503d5fa7dd821c82f5e0a3c351e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

D:\13.12.2023\Batch\Stellar OST to PST Batch File\Release\Stellar Converter for OST Batch - Italian.pdb

Imports

mfc140u

ord1511
ord2374
ord485
ord2246
ord1513
ord2268

kernel32

IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
InitializeCriticalSectionEx
GetLastError
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetModuleHandleW
GetProcAddress
CloseHandle
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
OutputDebugStringW

vcruntime140

__std_type_info_destroy_list
__CxxFrameHandler3
_except_handler4_common
memset

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-runtime-l1-1-0

_initterm
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm_e

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 436B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1413b503d5fa7dd821c82f5e0a3c351e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

mfc140u

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 3KB - Virtual size: 3KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2.4MB - Virtual size: 2.4MB

.reloc Size: 512B - Virtual size: 436B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 3KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2.4MB - Virtual size: 2.4MB

.reloc
Size: 512B - Virtual size: 436B