ed74807eec93c9e34792b3a0afeab950N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

ed74807eec93c9e34792b3a0afeab950N.exe
Size

109KB
MD5

ed74807eec93c9e34792b3a0afeab950
SHA1

530b6496585544e74d64878a4353bb6b3de7cca0
SHA256

6ea699c01968fee0af3fbec24cbe712a7ac925328b7189fc6bee2ee7966d64de
SHA512

951dcc2ae5f633094df47409c26c4df7e1837f12c08e8b43c118f1412cf43732182aa6029f7b7becab4ffabf3fbee8233dc278f4a1b86577b5fb7eba2c300316
SSDEEP

1536:86qZdv4Xs54BBQcaqLmjN/yqxtNsa4kYzYndimJQajVb2mQXyCV92l3go:8NZq9AqLmjN/ZNsYnxVbqF9M3go

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ed74807eec93c9e34792b3a0afeab950N.exe

Files

ed74807eec93c9e34792b3a0afeab950N.exe
.dll windows:4 windows x64 arch:x64

842f8b4dba05061d3c51f671559816f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

libcairo-2

cairo_arc
cairo_close_path
cairo_create
cairo_curve_to
cairo_destroy
cairo_fill
cairo_fill_preserve
cairo_image_surface_create
cairo_line_to
cairo_move_to
cairo_paint
cairo_pattern_add_color_stop_rgba
cairo_pattern_create_radial
cairo_pattern_destroy
cairo_rectangle
cairo_rel_line_to
cairo_restore
cairo_rotate
cairo_save
cairo_select_font_face
cairo_set_font_size
cairo_set_line_cap
cairo_set_line_join
cairo_set_line_width
cairo_set_operator
cairo_set_source
cairo_set_source_rgb
cairo_set_source_rgba
cairo_set_source_surface
cairo_show_text
cairo_stroke
cairo_surface_destroy
cairo_text_extents
cairo_text_path
cairo_translate

libgdk-3-0

gdk_cairo_set_source_pixbuf
gdk_cairo_set_source_rgba
gdk_display_get_default
gdk_display_get_default_seat
gdk_rgba_get_type
gdk_rgba_parse
gdk_seat_get_pointer
gdk_window_create_similar_surface
gdk_window_get_device_position

libgdk_pixbuf-2.0-0

gdk_pixbuf_fill
gdk_pixbuf_get_height
gdk_pixbuf_get_type
gdk_pixbuf_get_width
gdk_pixbuf_loader_close
gdk_pixbuf_loader_get_pixbuf
gdk_pixbuf_loader_new_with_type
gdk_pixbuf_loader_write
gdk_pixbuf_new
gdk_pixbuf_new_from_file
gdk_pixbuf_new_subpixbuf
gdk_pixbuf_scale_simple

libglib-2.0-0

g_build_filename
g_compute_checksum_for_string
g_file_test
g_fopen
g_free
g_get_user_cache_dir
g_getenv
g_hash_table_destroy
g_hash_table_foreach
g_hash_table_foreach_remove
g_hash_table_insert
g_hash_table_lookup
g_hash_table_lookup_extended
g_hash_table_new
g_hash_table_new_full
g_hash_table_remove
g_hash_table_remove_all
g_hash_table_size
g_idle_add
g_intern_static_string
g_log
g_log_default_handler
g_log_set_handler
g_malloc
g_malloc0
g_mkdir_with_parents
g_once_init_enter_pointer
g_once_init_leave_pointer
g_random_int_range
g_realloc
g_return_if_fail_warning
g_slice_alloc
g_slice_free1
g_slist_append
g_slist_delete_link
g_slist_find
g_slist_foreach
g_slist_free
g_slist_insert
g_slist_insert_sorted
g_slist_length
g_slist_nth_data
g_slist_remove
g_snprintf
g_source_remove
g_str_equal
g_str_hash
g_strcmp0
g_strdup
g_strdup_printf
g_strrstr
g_strstr_len

libgobject-2.0-0

g_boxed_copy
g_boxed_type_register_static
g_cclosure_marshal_VOID__BOXED
g_cclosure_marshal_VOID__INT
g_cclosure_marshal_VOID__VOID
g_object_class_install_property
g_object_get
g_object_new
g_object_notify
g_object_ref
g_object_set
g_object_set_property
g_object_unref
g_param_spec_boolean
g_param_spec_boxed
g_param_spec_float
g_param_spec_int
g_param_spec_object
g_param_spec_pointer
g_param_spec_string
g_param_spec_uint
g_signal_connect_data
g_signal_emit
g_signal_emit_by_name
g_signal_new
g_type_add_interface_static
g_type_check_instance_is_a
g_type_class_add_private
g_type_class_adjust_private_offset
g_type_class_peek_parent
g_type_instance_get_private
g_type_interface_peek
g_type_name
g_type_register_static
g_type_register_static_simple
g_value_dup_boxed
g_value_dup_object
g_value_dup_string
g_value_get_boolean
g_value_get_boxed
g_value_get_float
g_value_get_int
g_value_get_pointer
g_value_get_string
g_value_get_uint
g_value_init
g_value_set_boolean
g_value_set_boxed
g_value_set_float
g_value_set_int
g_value_set_object
g_value_set_pointer
g_value_set_string
g_value_set_uint
g_value_take_boxed

libgtk-3-0

gtk_drawing_area_get_type
gtk_widget_add_events
gtk_widget_get_allocated_height
gtk_widget_get_allocated_width
gtk_widget_get_allocation
gtk_widget_get_toplevel
gtk_widget_get_window
gtk_widget_queue_draw
gtk_widget_queue_draw_area
gtk_widget_set_can_focus
gtk_window_fullscreen
gtk_window_unfullscreen

libintl-8

DllMain

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetLastError
GetModuleHandleW
GetProcAddress
InitializeCriticalSection
IsProcessorFeaturePresent
LeaveCriticalSection
LoadLibraryW
Sleep
TerminateProcess
TlsGetValue
VirtualProtect
VirtualQuery

msvcrt

__iob_func
__setusermatherr
_amsg_exit
_errno
_initterm
_lock
_unlock
_write
abort
acos
asin
calloc
fclose
free
fwrite
ldexp
log
malloc
memmove
realloc
strcmp
strcpy
strlen
strncmp
strrchr
tanh
vfprintf

libsoup-2.4-1

_SOUP_METHOD_GET
soup_message_headers_append
soup_message_new
soup_session_abort
soup_session_cancel_message
soup_session_new_with_options
soup_session_queue_message
soup_session_requeue_message
soup_uri_get_type
soup_uri_new

Exports

Exports

deg2rad
lat2pixel
latlon2zoom
lon2pixel
osd_check_dpad
osd_check_zoom
osd_draw_bbox
osd_latitude_str
osd_longitude_str
osd_render_centered_text
osd_render_crosshair_shape
osd_render_dpad
osd_render_gps
osd_render_zoom
osd_shape
osd_shape_shadow
osm_gps_map_convert_geographic_to_screen
osm_gps_map_convert_screen_to_geographic
osm_gps_map_download_cancel_all
osm_gps_map_download_maps
osm_gps_map_get_bbox
osm_gps_map_get_default_cache_directory
osm_gps_map_get_event_location
osm_gps_map_get_scale
osm_gps_map_get_type
osm_gps_map_gps_add
osm_gps_map_gps_clear
osm_gps_map_gps_get_track
osm_gps_map_image_add
osm_gps_map_image_add_with_alignment
osm_gps_map_image_add_with_alignment_z
osm_gps_map_image_add_z
osm_gps_map_image_draw
osm_gps_map_image_get_point
osm_gps_map_image_get_rotation
osm_gps_map_image_get_type
osm_gps_map_image_get_zorder
osm_gps_map_image_new
osm_gps_map_image_remove
osm_gps_map_image_remove_all
osm_gps_map_image_set_rotation
osm_gps_map_in_circle
osm_gps_map_layer_add
osm_gps_map_layer_busy
osm_gps_map_layer_button_press
osm_gps_map_layer_draw
osm_gps_map_layer_get_type
osm_gps_map_layer_remove
osm_gps_map_layer_remove_all
osm_gps_map_layer_render
osm_gps_map_map_redraw
osm_gps_map_map_redraw_idle
osm_gps_map_new
osm_gps_map_osd_get_type
osm_gps_map_osd_new
osm_gps_map_point_copy
osm_gps_map_point_free
osm_gps_map_point_get_degrees
osm_gps_map_point_get_radians
osm_gps_map_point_get_type
osm_gps_map_point_get_user_data
osm_gps_map_point_new_degrees
osm_gps_map_point_new_degrees_with_user_data
osm_gps_map_point_new_radians
osm_gps_map_point_new_radians_with_user_data
osm_gps_map_point_set_degrees
osm_gps_map_point_set_radians
osm_gps_map_point_set_user_data
osm_gps_map_polygon_add
osm_gps_map_polygon_get_track
osm_gps_map_polygon_get_type
osm_gps_map_polygon_new
osm_gps_map_polygon_remove
osm_gps_map_polygon_remove_all
osm_gps_map_scroll
osm_gps_map_set_center
osm_gps_map_set_center_and_zoom
osm_gps_map_set_keyboard_shortcut
osm_gps_map_set_zoom
osm_gps_map_set_zoom_offset
osm_gps_map_source_get_copyright
osm_gps_map_source_get_friendly_name
osm_gps_map_source_get_image_format
osm_gps_map_source_get_max_zoom
osm_gps_map_source_get_min_zoom
osm_gps_map_source_get_repo_uri
osm_gps_map_source_is_valid
osm_gps_map_track_add
osm_gps_map_track_add_point
osm_gps_map_track_get_color
osm_gps_map_track_get_length
osm_gps_map_track_get_point
osm_gps_map_track_get_points
osm_gps_map_track_get_type
osm_gps_map_track_insert_point
osm_gps_map_track_n_points
osm_gps_map_track_new
osm_gps_map_track_remove
osm_gps_map_track_remove_all
osm_gps_map_track_remove_point
osm_gps_map_track_set_color
osm_gps_map_zoom_fit_bbox
osm_gps_map_zoom_in
osm_gps_map_zoom_out
pixel2lat
pixel2lon
rad2deg

Sections

.text
Size: 63KB - Virtual size: 63KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 160B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 512B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 132B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

842f8b4dba05061d3c51f671559816f5

Headers

DLL Characteristics

File Characteristics

Imports

libcairo-2

libgdk-3-0

libgdk_pixbuf-2.0-0

libglib-2.0-0

libgobject-2.0-0

libgtk-3-0

libintl-8

kernel32

msvcrt

libsoup-2.4-1

Exports

Exports

Sections

.text Size: 63KB - Virtual size: 63KB

.data Size: 512B - Virtual size: 160B

.rdata Size: 13KB - Virtual size: 12KB

.pdata Size: 3KB - Virtual size: 2KB

.xdata Size: 3KB - Virtual size: 2KB

.bss Size: - Virtual size: 512B

.edata Size: 4KB - Virtual size: 3KB

.idata Size: 10KB - Virtual size: 9KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 512B - Virtual size: 132B

.text
Size: 63KB - Virtual size: 63KB

.data
Size: 512B - Virtual size: 160B

.rdata
Size: 13KB - Virtual size: 12KB

.pdata
Size: 3KB - Virtual size: 2KB

.xdata
Size: 3KB - Virtual size: 2KB

.bss
Size: - Virtual size: 512B

.edata
Size: 4KB - Virtual size: 3KB

.idata
Size: 10KB - Virtual size: 9KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 132B