90ec5acd4d27cc00b3e3097abc7b0b80N[.]exe

General

Target

90ec5acd4d27cc00b3e3097abc7b0b80N.exe
Size

13KB
MD5

90ec5acd4d27cc00b3e3097abc7b0b80
SHA1

59a4576165594f23d5732612b0383208bc156937
SHA256

a9f8e78dc23ca3da7a0e886eb88031e9db963251a91aa12e09e14f8fb0ee0842
SHA512

7423bc66f96c6525b1ef544075d7f9e2a5026f79488fc22d49ae1394101294df6986a1e45e8db535019a81f723a2c63e88706c5286ec1c82bd52b34f6feaf800
SSDEEP

192:sTocIGEMPXsB2lm5dvpakXOKIdmFEzxj9RVzAV7rXnwJEGqcVMC8XmhWYQAW4hJ:sTFIGE2lmakXq39RVWHwFrV9WYQAW2J

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90ec5acd4d27cc00b3e3097abc7b0b80N.exe

Files

90ec5acd4d27cc00b3e3097abc7b0b80N.exe
.exe windows:6 windows x86 arch:x86

1ed089b25b508fbc104b7965dc397603

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

pathping.pdb

Imports

kernel32

FormatMessageA
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleA
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
HeapSetInformation
SetThreadUILanguage
LocalAlloc
LocalFree
SleepEx
GetLastError
GetTickCount
GetCurrentThreadId

msvcrt

?terminate@@YAXXZ
_except_handler4_common
_controlfp
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_XcptFilter
_exit
_cexit
__getmainargs
memset
memcpy
strtoul
exit
_write
_setmode

iphlpapi

IcmpSendEcho2
IcmpParseReplies
Icmp6SendEcho2
IcmpCloseHandle
Icmp6CreateFile
IcmpCreateFile
Icmp6ParseReplies

user32

CharToOemBuffA

ws2_32

closesocket
WSACleanup
WSAIoctl
freeaddrinfo
getnameinfo
inet_addr
WSAStartup
socket
getaddrinfo

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 512B - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1ed089b25b508fbc104b7965dc397603

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcrt

iphlpapi

user32

ws2_32

Sections

.text Size: 8KB - Virtual size: 7KB

.data Size: 512B - Virtual size: 39KB

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 1024B - Virtual size: 4KB

.text
Size: 8KB - Virtual size: 7KB

.data
Size: 512B - Virtual size: 39KB

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 1024B - Virtual size: 4KB