59e384242d8ab01a04d3cd2055864fe0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

59e384242d8ab01a04d3cd2055864fe0N.exe
Size

100KB
MD5

59e384242d8ab01a04d3cd2055864fe0
SHA1

c6f1f767fbd51fe44b59ed5d958b97a984091494
SHA256

31ad7482d33cb56c89d3cdc9f95ec4ca95c07eee845f19fb47450ca983c14222
SHA512

6217f9c68944bbba075653687389d3c66c97957c4ce92e8003fdfff33d22b9895289674b9ae2bf9e2999ceed13f67c9f2f50d2168333a6d24afc554e3bc09162
SSDEEP

1536:LcnV3hZo1lH8WdxXUdV3HJd3ICS4AiC81/O5TWLl59rN:LuxZ08WcTkkCAG56L3tN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
59e384242d8ab01a04d3cd2055864fe0N.exe

Files

59e384242d8ab01a04d3cd2055864fe0N.exe
.exe windows:5 windows x86 arch:x86

6fab4b23ae171e96b4199c029b109a84

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

DestroyWindow
UpdateWindow
SendDlgItemMessageA
SetWindowTextA
EndDialog
GetDlgItem
GetWindowTextA
SendMessageA
GetDesktopWindow
GetWindowRect
GetClientRect
SetWindowPos
DialogBoxParamA
MessageBoxA
wsprintfA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA

kernel32

HeapFree
HeapSize
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
MultiByteToWideChar
UnmapViewOfFile
GetSystemInfo
MapViewOfFile
DeleteFileA
CopyFileA
SetEndOfFile
SetFilePointer
FlushViewOfFile
GetLocalTime
GetTempPathA
GetFileSize
GetVersionExA
CloseHandle
OpenSemaphoreA
LocalFree
OpenFileMappingA
lstrcatA
lstrcpyA
LocalAlloc
lstrlenA
OpenEventA
CreateEventA
CreateFileMappingA
CreateFileA
GetProcAddress
GetModuleHandleA
CreateThread
Sleep
CreateProcessA
GetModuleFileNameA
SetFileAttributesA
GetFileAttributesA
GetLastError
CreateDirectoryA
GetTickCount
WritePrivateProfileSectionA
GetPrivateProfileSectionA
GetWindowsDirectoryA
GetShortPathNameA
MoveFileExA
SetEvent
LoadLibraryA
GetCommandLineA
GetStartupInfoA
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
LCMapStringA

Sections

.text
Size: 62KB - Virtual size: 61KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6fab4b23ae171e96b4199c029b109a84

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

kernel32

Sections

.text Size: 62KB - Virtual size: 61KB

.rdata Size: 19KB - Virtual size: 19KB

.data Size: 4KB - Virtual size: 7KB

.rsrc Size: 6KB - Virtual size: 5KB

.text
Size: 62KB - Virtual size: 61KB

.rdata
Size: 19KB - Virtual size: 19KB

.data
Size: 4KB - Virtual size: 7KB

.rsrc
Size: 6KB - Virtual size: 5KB