8e57551152eb4d1c393a527cd0fd78c0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

8e57551152eb4d1c393a527cd0fd78c0N.exe
Size

415KB
MD5

8e57551152eb4d1c393a527cd0fd78c0
SHA1

207f30ea27199e3cfe0a57194e92d88958709317
SHA256

7e26331bd51a27b7fe7ca3528eb03d5f4f67cd82bd17e9558e38a38ac028f7d9
SHA512

4f137c632b5ff9a0136f17e6fc56cebb9833bf574a988e59e98065a6e521a0bac12c03f998ea04f94ffd34f9d7f84447ae8abf6ea6460093972ee8590732b9df
SSDEEP

6144:33cjHkHcIqQIK4UEOM3T9QC8nnQKZDvvOcFGuYT:33cj0b4Uk3unnvZGB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8e57551152eb4d1c393a527cd0fd78c0N.exe

Files

8e57551152eb4d1c393a527cd0fd78c0N.exe
.exe windows:4 windows x86 arch:x86

2c771abbd388435a4acc7f0163ff55d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntA
HeapAlloc
GetCurrentDirectoryA
SetEnvironmentVariableA
CompareStringW
HeapReAlloc
CloseHandle
FlushFileBuffers
CompareStringA
LoadLibraryA
GetProcAddress
SetStdHandle
GetLastError
WriteFile
SetFilePointer
GetFileType
GetStdHandle
RtlUnwind
GetOEMCP
GetACP
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
GetCPInfo
FreeEnvironmentStringsA
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetStringTypeA
LCMapStringW
GetStringTypeW
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
TerminateProcess
ExitProcess
GetCurrentProcess
VirtualFree
HeapCreate
VirtualAlloc
GetModuleFileNameA
WritePrivateProfileStringA
GetFullPathNameA
GetDriveTypeA
GetVersion
GetCommandLineA
HeapDestroy
HeapFree
GetSystemTime
GetTimeZoneInformation
GetModuleHandleA
GetStartupInfoA
GetLocalTime

user32

SetWindowPos
SetWindowRgn
GetMessageA
DispatchMessageA
TranslateMessage
SetTimer
UpdateWindow
ShowWindow
CreateWindowExA
GetClientRect
GetWindowRect
RegisterClassExA
AdjustWindowRect
GetSystemMetrics
SetCapture
ReleaseCapture
MessageBoxA
SetCursor
GetDlgItemTextA
SendMessageA
SendDlgItemMessageA
GetDlgItem
CreateDialogParamA
SetDlgItemTextA
IsDialogMessageA
MoveWindow
InvalidateRect
InvalidateRgn
ReleaseDC
GetWindowDC
LoadBitmapA
KillTimer
LoadMenuA
GetSubMenu
EndPaint
PostQuitMessage
BeginPaint
DestroyWindow
ClientToScreen
TrackPopupMenu
LoadCursorA
DefWindowProcA
LoadIconA

gdi32

CreateBitmap
CreateCompatibleBitmap
CreateDCA
SelectObject
CombineRgn
DeleteObject
DeleteDC
CreateCompatibleDC
BitBlt
GetObjectA
GetDIBits
StretchBlt
SetBkColor
SetTextColor
CreateRectRgn

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1023B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2c771abbd388435a4acc7f0163ff55d9

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 39KB - Virtual size: 38KB

.rdata Size: 1024B - Virtual size: 1023B

.data Size: 17KB - Virtual size: 23KB

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 157KB - Virtual size: 156KB

.text
Size: 39KB - Virtual size: 38KB

.rdata
Size: 1024B - Virtual size: 1023B

.data
Size: 17KB - Virtual size: 23KB

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 157KB - Virtual size: 156KB