ad0a3a7a3b7cef5274f297f40e550f50N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

ad0a3a7a3b7cef5274f297f40e550f50N.exe
Size

6.2MB
MD5

ad0a3a7a3b7cef5274f297f40e550f50
SHA1

e320847e4563c30eba2ad2c0b8b6478f5a2ce19d
SHA256

5d4dddf5325ee2d736898eba1ce2a9327d83b0c832e33a81b6be79eed482fb2f
SHA512

a209314bc815f52f72890ba2bd062d9c9397e8d5abfb6c746fc862e1bd81efc5aad9a469ceb620e24be00211936446e7d2b8832fe8137767ecfbef48b2b51246
SSDEEP

98304:DoMFN3zedDkw5MhE5oqweRzsXff2jI6jGkHCS+Rhu1vO4rMJk4v63MM4XK9C6Fxc:EMD6FkUCoREf2kkiS2wGOQksS3Faix

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ad0a3a7a3b7cef5274f297f40e550f50N.exe

Files

ad0a3a7a3b7cef5274f297f40e550f50N.exe
.dll windows:6 windows x86 arch:x86

5eb06563b904b5b2c7d26cf883c94f02

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
GetProcAddress
GetModuleHandleW
TlsGetValue
TlsAlloc
TerminateProcess
Sleep
EnumSystemLocalesW
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
RaiseException
GetCurrentThreadId
HeapReAlloc
HeapFree
GetLastError
LeaveCriticalSection
EnterCriticalSection
DecodePointer
EncodePointer
WideCharToMultiByte
IsDebuggerPresent
GetProcessHeap
ExitProcess
GetModuleHandleExW
HeapSize
GetStdHandle
GetFileType
GetModuleFileNameA
GetCurrentProcessId
GetSystemTimeAsFileTime
GetOEMCP
WriteFile
GetConsoleCP
ReadFile
SetFilePointerEx
LoadLibraryExW
OutputDebugStringW
CreateFileW
GetModuleFileNameW
GlobalAlloc
LCMapStringW
GetSystemTime
GetStringTypeW
GetLocalTime
SetLastError
FlushFileBuffers
GlobalUnlock
GetTimeZoneInformation
GetTimeFormatW
CreateEventA
TlsSetValue
GetCurrentThread
GetCurrentProcess
GetCPInfo
GetSystemDefaultLangID
CreateThread
TlsFree
CloseHandle
DeleteCriticalSection
RtlUnwind
UnhandledExceptionFilter
IsDBCSLeadByteEx
FindFirstFileA
GetStartupInfoW
MultiByteToWideChar
GetEnvironmentVariableA
WriteConsoleW
CreateProcessA
MulDiv
GetSystemTimeAdjustment
GetConsoleMode
GetCommandLineA
SetCommState
GetTickCount
ConnectNamedPipe
WaitForSingleObject
GlobalLock
GetEnvironmentStringsW
QueryPerformanceCounter
DeleteFileA
LocalFree
GetVersionExA
GetCurrentDirectoryA
FreeEnvironmentStringsW
SetStdHandle
IsValidCodePage
GetACP
GetProcessTimes
ReadConsoleW
InitializeSListHead
InitializeCriticalSectionAndSpinCount
HeapAlloc

user32

SetWindowPlacement
SetCursor
ScreenToClient
MapDialogRect
TrackPopupMenu
ShowCaret
RegisterWindowMessageA
InsertMenuItemW
GetQueueStatus
GetWindowPlacement
GetWindowTextA
CheckMenuRadioItem
SetWindowLongA
BringWindowToTop
GetDlgItem
EndDialog
RedrawWindow
CheckDlgButton
EnableScrollBar
AppendMenuA
DeferWindowPos
BeginDeferWindowPos
GetSystemMetrics
ValidateRgn
EnableWindow
EndMenu
GetCaretBlinkTime
ToUnicode
MoveWindow
ShowOwnedPopups
EndPaint
ClientToScreen
GetSystemMenu
PostQuitMessage
IsIconic
SetKeyboardState
KillTimer
MsgWaitForMultipleObjects
DrawIconEx
DeleteMenu
LoadIconA
CreateIconIndirect
PeekMessageW
ReleaseDC
ScrollWindow
DefWindowProcA
SetMenu
IsDlgButtonChecked
CreateCaret
DispatchMessageA
DefDlgProcA
UnhookWindowsHookEx
ScrollWindowEx
SetWindowTextA
DestroyIcon
ValidateRect
CheckMenuItem
TranslateMDISysAccel
ToAsciiEx
SetWindowRgn
HideCaret
CreateDialogParamA
ChangeDisplaySettingsW
GetParent
GetWindowTextLengthA
WaitMessage
GetScrollInfo
AppendMenuW
SetScrollPos
DrawStateW
DestroyCursor
IsWindow
CheckRadioButton
SystemParametersInfoA
FindWindowA
GetMessageTime

gdi32

GetPaletteEntries
CreateCompatibleDC
CombineRgn
RectInRegion
CreateCompatibleBitmap
Rectangle
ExtTextOutW
OffsetRgn
ExtCreateRegion
GetCharWidth32W
GetCurrentPositionEx
GetCharABCWidthsW
GetSystemPaletteEntries
ExtSelectClipRgn
EndDoc
GetStockObject
SetWinMetaFileBits
MoveToEx
GetWindowOrgEx
LineTo
SetWindowExtEx
StretchBlt
GetRgnBox
GetEnhMetaFileHeader
PtInRegion
PolyPolyline
UnrealizeObject
SetMapMode
RealizePalette
GetBkColor
CreateBitmapIndirect
GetCharWidth32A
GetClipBox
GetTextMetricsA
ExtTextOutA
RestoreDC
CreateSolidBrush
EnumFontsA
IntersectClipRect
CreatePen
EnumFontFamiliesA
GetTextExtentExPointA
CreateRectRgnIndirect
EnumFontFamiliesExA
DeleteObject
CopyEnhMetaFileA
CreateFontIndirectA
GetDeviceCaps
CreateFontA
Pie
Arc
SetPaletteEntries
SetDIBColorTable
SetBkColor
DeleteDC
GetCharacterPlacementW
MaskBlt
ExtFloodFill
SetMetaFileBitsEx
TranslateCharsetInfo
BitBlt
PlayEnhMetaFile
ExtCreatePen
PolyPolygon

advapi32

RegDeleteValueA
RegCreateKeyExA
RegCreateKeyA
GetLengthSid
InitializeSecurityDescriptor
EqualSid
RegSetValueExA
RegEnumKeyA
RegQueryValueExA
SetSecurityDescriptorOwner

Sections

.text
Size: 517KB - Virtual size: 517KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

vdejmg
Size: 1024B - Virtual size: 784B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

dbfvrudc
Size: 512B - Virtual size: 224B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

sogbt
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

oteny
Size: 5.6MB - Virtual size: 5.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5eb06563b904b5b2c7d26cf883c94f02

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 517KB - Virtual size: 517KB

.data Size: 7KB - Virtual size: 15KB

.idata Size: 6KB - Virtual size: 6KB

vdejmg Size: 1024B - Virtual size: 784B

dbfvrudc Size: 512B - Virtual size: 224B

sogbt Size: 512B - Virtual size: 32B

oteny Size: 5.6MB - Virtual size: 5.6MB

.reloc Size: 12KB - Virtual size: 11KB

.text
Size: 517KB - Virtual size: 517KB

.data
Size: 7KB - Virtual size: 15KB

.idata
Size: 6KB - Virtual size: 6KB

vdejmg
Size: 1024B - Virtual size: 784B

dbfvrudc
Size: 512B - Virtual size: 224B

sogbt
Size: 512B - Virtual size: 32B

oteny
Size: 5.6MB - Virtual size: 5.6MB

.reloc
Size: 12KB - Virtual size: 11KB