9fc863a152e06f85cb2fce69e18a2e30N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

9fc863a152e06f85cb2fce69e18a2e30N.exe
Size

512KB
MD5

9fc863a152e06f85cb2fce69e18a2e30
SHA1

3cdaaa755b8bc2f250bd8aa2f8ee62f9b7188e77
SHA256

7032aac0e8d367d1d1295cb32df6bad0fd0880df664340cc5cead0595fa185dc
SHA512

9aeecb2c6b71943c51a7bc7a8224d614199a0fa92cb2cb330f612ed8c4a74e538123b05fcb2e9481ca51ac967dbe755fa87aa400c9a083233e56ec008a24c5e1
SSDEEP

6144:aJxoQ7KAs5ongfZq/nhgqs4iBN9G4awzqqX2EPzw4RyWL8Wf923f0CrL3TNF/qwe:aJxoQ7Qonqk/mo8o49X2CXL8j53TNpe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9fc863a152e06f85cb2fce69e18a2e30N.exe

Files

9fc863a152e06f85cb2fce69e18a2e30N.exe
.exe windows:6 windows x86 arch:x86

b175eca75804863b15585c791f528962

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSAIoctl
ntohl
socket
inet_pton
getaddrinfo
WSAStartup
htonl
inet_ntop
htons
freeaddrinfo
getsockopt
ioctlsocket
accept
getpeername
getsockname
connect
recvfrom
recv
sendto
WSAGetLastError
bind
closesocket
listen
send
ntohs

bcrypt

BCryptGenRandom

kernel32

IsDebuggerPresent
SetEndOfFile
WriteConsoleW
HeapSize
GetFileAttributesExW
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
GetProcessHeap
GetStringTypeW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetFileSizeEx
DeleteFileW
FlushFileBuffers
SetFilePointerEx
SetStdHandle
HeapReAlloc
Sleep
GetModuleFileNameA
SetUnhandledExceptionFilter
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetCurrentThreadId
DeleteCriticalSection
GetCurrentProcessId
GetLocalTime
QueryPerformanceFrequency
QueryPerformanceCounter
FormatMessageA
FindClose
FindNextFileW
GetLastError
MultiByteToWideChar
WideCharToMultiByte
GetSystemTimeAsFileTime
InitializeSRWLock
InitOnceExecuteOnce
SetLastError
GetHandleInformation
GetTickCount64
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
CloseHandle
ReleaseSRWLockShared
GetQueuedCompletionStatusEx
GetProcAddress
AcquireSRWLockShared
GetModuleHandleW
CreateIoCompletionPort
SetFileCompletionNotificationModes
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
InitializeSListHead
DecodePointer
GetStartupInfoW
RtlUnwind
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
EncodePointer
RaiseException
GetCommandLineA
GetCommandLineW
GetTimeZoneInformation
ExitProcess
GetModuleHandleExW
CreateFileW
GetFileType
ReadFile
GetStdHandle
WriteFile
GetModuleFileNameW
GetConsoleMode
ReadConsoleW
GetConsoleOutputCP
HeapAlloc
HeapFree
CompareStringW
LCMapStringW

Sections

.text
Size: 259KB - Virtual size: 259KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.uniques
Size: 512B - Virtual size: 31B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b175eca75804863b15585c791f528962

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

bcrypt

kernel32

Sections

.text Size: 259KB - Virtual size: 259KB

.rdata Size: 46KB - Virtual size: 45KB

.data Size: 3KB - Virtual size: 15KB

.uniques Size: 512B - Virtual size: 31B

.rsrc Size: 193KB - Virtual size: 193KB

.reloc Size: 9KB - Virtual size: 8KB

.text
Size: 259KB - Virtual size: 259KB

.rdata
Size: 46KB - Virtual size: 45KB

.data
Size: 3KB - Virtual size: 15KB

.uniques
Size: 512B - Virtual size: 31B

.rsrc
Size: 193KB - Virtual size: 193KB

.reloc
Size: 9KB - Virtual size: 8KB