2b0114bf2f501aa6609db7abc2c32be0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2b0114bf2f501aa6609db7abc2c32be0N.exe
Size

4.1MB
MD5

2b0114bf2f501aa6609db7abc2c32be0
SHA1

b3f5f0dd0e74630b00d2d2cdb2edf780233321d7
SHA256

6cae057323bdde78ac08e8fa9c5ecae894106145d765d384db6ae5d6f54d6185
SHA512

67ecb64b32d4172a5c41e02226c3845668e6b8390c43078004e9b8a15ff65a9bf06ec39d26abf9871a79d59f8bd3b303ff05f4494901d7b9df2c3c3548b9ed63
SSDEEP

98304:cByNpsGejg6THx/2N/MuGdz+AffP0YMq/IZJ8n20xFUWZy:c8Yzl2JMuGt+WnzxFf8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2b0114bf2f501aa6609db7abc2c32be0N.exe

Files

2b0114bf2f501aa6609db7abc2c32be0N.exe
.exe windows:5 windows x86 arch:x86

10622746b67e8f4c4cd89dfdab69afd3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_AGGRESIVE_WS_TRIM

Imports

setupapi

SetupDiGetDeviceRegistryPropertyW
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW

kernel32

GetFileTime
GetLastError
GetLocaleInfoW
GetLocalTime
GetLogicalDriveStringsW
GetModuleFileNameW
GetModuleHandleW
GetPrivateProfileIntW
GetProcAddress
GetProcessHeap
GetShortPathNameW
GetStartupInfoW
GetSystemDirectoryW
GetSystemInfo
GetSystemTime
GetSystemTimeAsFileTime
GetTempPathW
GetThreadContext
GetThreadPriority
GetUserDefaultLangID
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFree
GlobalGetAtomNameW
GlobalHandle
GlobalLock
GlobalSize
GlobalUnlock
HeapAlloc
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
IsProcessorFeaturePresent
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LockResource
lstrlenA
lstrlenW
MapViewOfFile
MoveFileW
MulDiv
MultiByteToWideChar
OutputDebugStringW
GetFileSize
RaiseException
ReadFile
RemoveDirectoryW
ResetEvent
ResumeThread
SetEndOfFile
SetErrorMode
SetEvent
SetFileAttributesW
SetFilePointer
SetLastError
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
SystemTimeToFileTime
TerminateProcess
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualProtect
VirtualQuery
WaitForSingleObjectEx
WideCharToMultiByte
WriteFile
LCMapStringA
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
VirtualFree
HeapCreate
GetVersionExA
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetFileAttributesW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
ExitProcess
GetVersion
GetStartupInfoA
GetModuleHandleA
RtlUnwind
GetExitCodeThread
GetEnvironmentVariableW
GetDriveTypeW
GetDiskFreeSpaceW
GetCurrentThreadId
GetCurrentThread
GetCurrentProcessId
GetCurrentProcess
GetComputerNameA
FormatMessageW
FlushInstructionCache
FlushFileBuffers
FindResourceW
FindResourceExW
FindNextFileW
FindFirstFileW
FindClose
FileTimeToSystemTime
ExpandEnvironmentStringsW
DisconnectNamedPipe
DeviceIoControl
DeleteFileW
DeleteCriticalSection
CreateFileW
CreateFileMappingW
CreateProcessA
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
LoadLibraryA
GetTimeZoneInformation
GetSystemDefaultLCID
lstrcpyW
QueryPerformanceCounter
LCMapStringW

user32

PostMessageW
PeekMessageW
OpenClipboard
OffsetRect
OemToCharBuffA
MsgWaitForMultipleObjects
MessageBeep
MapWindowPoints
LoadIconW
LoadCursorW
KillTimer
RedrawWindow
IsRectEmpty
IsChild
InvalidateRect
IntersectRect
InsertMenuW
InflateRect
GetWindowThreadProcessId
RegisterWindowMessageW
RemoveMenu
GetSysColor
MessageBoxA
GetWindowRect
GetWindowLongW
SendMessageTimeoutW
SendMessageW
SetClipboardData
SetCursor
SetForegroundWindow
SetRectEmpty
SetTimer
ShowWindow
SystemParametersInfoW
TranslateMessage
UpdateWindow
IsWindowEnabled
GetSystemMenu
GetNextDlgTabItem
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetClassNameW
GetClassInfoW
FrameRect
FindWindowExW
EnableWindow
EmptyClipboard
DispatchMessageW
DestroyAcceleratorTable
DeleteMenu
DefWindowProcW
CreateMenu
CopyRect
CloseClipboard
GetClientRect

gdi32

SetBrushOrgEx
SetBkColor
SelectObject
GetStockObject
LineTo
MoveToEx

advapi32

AllocateAndInitializeSid
SetSecurityDescriptorOwner
SetSecurityDescriptorGroup
SetSecurityDescriptorDacl
CopySid
DuplicateToken
FreeSid
GetAclInformation
GetFileSecurityW
GetLengthSid
GetSecurityDescriptorControl
GetSecurityDescriptorDacl
GetSecurityDescriptorGroup
GetSecurityDescriptorLength
GetSecurityDescriptorOwner
GetSecurityDescriptorSacl
GetSidLengthRequired
GetSidSubAuthority
GetTokenInformation
ImpersonateSelf
InitializeAcl
InitializeSecurityDescriptor
IsValidSecurityDescriptor
IsValidSid
MakeAbsoluteSD
MakeSelfRelativeSD
MapGenericMask
OpenProcessToken
OpenThreadToken
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
RevertToSelf

shell32

StrCmpNIW

ole32

OleRun

oleaut32

VariantInit

shlwapi

PathSkipRootW
PathRemoveFileSpecW
PathIsURLW
PathIsUNCW
PathStripToRootW
PathIsUNCServerShareW
PathIsRootW
PathIsRelativeW
PathIsDirectoryW
PathFindFileNameW
PathIsUNCServerW
StrToIntW

Sections

.text
Size: 2.4MB - Virtual size: 2.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 4.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 548KB - Virtual size: 547KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss8
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

10622746b67e8f4c4cd89dfdab69afd3

Headers

File Characteristics

Imports

setupapi

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

Sections

.text Size: 2.4MB - Virtual size: 2.4MB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 12KB - Virtual size: 4.0MB

.rsrc Size: 548KB - Virtual size: 547KB

.bss8 Size: 1.2MB - Virtual size: 1.2MB

.text
Size: 2.4MB - Virtual size: 2.4MB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 12KB - Virtual size: 4.0MB

.rsrc
Size: 548KB - Virtual size: 547KB

.bss8
Size: 1.2MB - Virtual size: 1.2MB