857108e822836a2de4f9998bfd60f7f0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

857108e822836a2de4f9998bfd60f7f0N.exe
Size

56KB
MD5

857108e822836a2de4f9998bfd60f7f0
SHA1

c9bef6705cba8307601d5c8a3cadbc4c1bf7d3ec
SHA256

f9cc33012135930d1aba8c44cf71a3bb4b8e45477d2149b865761e1ef85d72a2
SHA512

7f8257bb19ad02fbaf03e6d12f38c2b7cbf02bb9eb33d0c5a30eca992e5b605a91fed5c7749603117089cdaa329c0da7f60f27b3030778d66caa8bc480f57160
SSDEEP

384:I7c9MrKn0i04v8Jk7S8svm6m7x1kbX7mWd0RGLuGS9F/hp5uOHyLRlqfcivmCoo4:Ig98YK4v8Jk7S8svmlkbrIkDR4A

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
857108e822836a2de4f9998bfd60f7f0N.exe

Files

857108e822836a2de4f9998bfd60f7f0N.exe
.dll windows:4 windows x86 arch:x86

c6e754a7cf6761f0ac925ab236b6aba8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DisableThreadLibraryCalls
GetModuleHandleW
GetProcAddress
GetTickCount
HeapAlloc
HeapReAlloc
IsBadStringPtrW
RaiseException

ntdll

_vsnprintf

ucrtbase

__acrt_iob_func
__stdio_common_vsprintf
_strdup
free
fwrite
getenv
memmove
strchr
strcmp
strcspn
strlen

Exports

Exports

SLCallServer
SLClose
SLConsumeRight
SLDepositMigrationBlob
SLDepositOfflineConfirmationId
SLDepositOfflineConfirmationIdEx
SLDepositStoreToken
SLFireEvent
SLGatherMigrationBlob
SLGatherMigrationBlobEx
SLGenerateOfflineInstallationId
SLGenerateOfflineInstallationIdEx
SLGetActiveLicenseInfo
SLGetApplicationInformation
SLGetApplicationPolicy
SLGetAuthenticationResult
SLGetEncryptedPIDEx
SLGetGenuineInformation
SLGetInstalledProductKeyIds
SLGetLicense
SLGetLicenseFileId
SLGetLicenseInformation
SLGetLicensingStatusInformation
SLGetPKeyId
SLGetPKeyInformation
SLGetPolicyInformation
SLGetPolicyInformationDWORD
SLGetProductSkuInformation
SLGetSLIDList
SLGetServiceInformation
SLInstallLicense
SLInstallProofOfPurchase
SLInstallProofOfPurchaseEx
SLIsGenuineLocalEx
SLLoadApplicationPolicies
SLOpen
SLPersistApplicationPolicies
SLPersistRTSPayloadOverride
SLReArm
SLRegisterEvent
SLRegisterPlugin
SLSetAuthenticationData
SLSetCurrentProductKey
SLSetGenuineInformation
SLUninstallLicense
SLUninstallProofOfPurchase
SLUnloadApplicationPolicies
SLUnregisterEvent
SLUnregisterPlugin
SLpAuthenticateGenuineTicketResponse
SLpBeginGenuineTicketTransaction
SLpClearActivationInProgress
SLpDepositDownlevelGenuineTicket
SLpDepositTokenActivationResponse
SLpGenerateTokenActivationChallenge
SLpGetGenuineBlob
SLpGetGenuineLocal
SLpGetLicenseAcquisitionInfo
SLpGetMSPidInformation
SLpGetMachineUGUID
SLpGetTokenActivationGrantInfo
SLpIAActivateProduct
SLpIsCurrentInstalledProductKeyDefaultKey
SLpProcessVMPipeMessage
SLpSetActivationInProgress
SLpTriggerServiceWorker
SLpVLActivateProduct

Sections

.text
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 80B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rodata
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 4KB - Virtual size: 572B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 160B

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 4KB - Virtual size: 708B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 608B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c6e754a7cf6761f0ac925ab236b6aba8

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

ntdll

ucrtbase

Exports

Exports

Sections

.text Size: 8KB - Virtual size: 6KB

.data Size: 4KB - Virtual size: 80B

.rodata Size: 4KB - Virtual size: 1KB

.rdata Size: 4KB - Virtual size: 572B

.eh_fram Size: 4KB - Virtual size: 2KB

.bss Size: - Virtual size: 160B

.edata Size: 4KB - Virtual size: 2KB

.idata Size: 4KB - Virtual size: 708B

.reloc Size: 4KB - Virtual size: 608B

.text
Size: 8KB - Virtual size: 6KB

.data
Size: 4KB - Virtual size: 80B

.rodata
Size: 4KB - Virtual size: 1KB

.rdata
Size: 4KB - Virtual size: 572B

.eh_fram
Size: 4KB - Virtual size: 2KB

.bss
Size: - Virtual size: 160B

.edata
Size: 4KB - Virtual size: 2KB

.idata
Size: 4KB - Virtual size: 708B

.reloc
Size: 4KB - Virtual size: 608B