81d2f7cae309a6cb1f3f23fcabc29160N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

81d2f7cae309a6cb1f3f23fcabc29160N.exe
Size

68KB
MD5

81d2f7cae309a6cb1f3f23fcabc29160
SHA1

14257a9eb9da4e141a8b604b3430f48d0d085c81
SHA256

3c9da3b74c84735bb613a8f15882f9664c9b6838cba7877ba41fe4b4d628e277
SHA512

d9a62c34d6e39d53137ba2599f52534f1f9b45126db5f6cce41aa7c6b25ca4ec9f7a0e7e41b58ddff0edb070d1cbeaa1bd17901e7e08b157d3da8ff702c40cdd
SSDEEP

1536:NNLB0yi+9X1T1sVFdB3hI8MTesmIwaoTokm:NNLB0s99WPfhTyRwaoTov

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
81d2f7cae309a6cb1f3f23fcabc29160N.exe

Files

81d2f7cae309a6cb1f3f23fcabc29160N.exe
.dll windows:4 windows x86 arch:x86

6085a86e0ec3699453b0ce98cc02cc97

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

IsBadWritePtr
LocalAlloc
LocalFree
GetLastError
SetLastError
lstrcpyA
LoadLibraryA
GetProcAddress
FreeLibrary
HeapFree
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
HeapAlloc
VirtualAlloc
HeapReAlloc
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
WideCharToMultiByte
TerminateProcess
GetCurrentProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
TlsGetValue
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
GetCPInfo
GetACP
GetOEMCP
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

user32

MessageBoxA

advapi32

CryptDestroyKey
RegOpenKeyExA
RegEnumKeyExA
RegEnumValueA
RegCloseKey
CryptHashSessionKey
CryptDeriveKey
CryptDuplicateKey
CryptDuplicateHash
CryptSetHashParam
CryptCreateHash
CryptDestroyHash
CryptAcquireContextA
CryptSetProvParam
CryptHashData
CryptEncrypt
CryptGetHashParam
CryptReleaseContext
CryptImportKey
CryptGenKey
CryptDecrypt
CryptExportKey
CryptGetProvParam
CryptSetKeyParam
CryptGetKeyParam
CryptGenRandom

Exports

Exports

HD_CPAcquireContext
HD_CPCreateHash
HD_CPDecrypt
HD_CPDeriveKey
HD_CPDestroyHash
HD_CPDestroyKey
HD_CPDuplicateHash
HD_CPDuplicateKey
HD_CPEncrypt
HD_CPExportKey
HD_CPGenKey
HD_CPGenRandom
HD_CPGetHashParam
HD_CPGetKeyParam
HD_CPGetProvParam
HD_CPGetUserKey
HD_CPHashData
HD_CPHashSessionKey
HD_CPImportKey
HD_CPReleaseContext
HD_CPSetHashParam
HD_CPSetKeyParam
HD_CPSetProvParam
HD_CPSignHash
HD_CPVerifySignature

Sections

.text
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 920B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6085a86e0ec3699453b0ce98cc02cc97

Headers

File Characteristics

Imports

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 32KB - Virtual size: 31KB

.rdata Size: 8KB - Virtual size: 4KB

.data Size: 16KB - Virtual size: 16KB

.rsrc Size: 4KB - Virtual size: 920B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 32KB - Virtual size: 31KB

.rdata
Size: 8KB - Virtual size: 4KB

.data
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 4KB - Virtual size: 920B

.reloc
Size: 4KB - Virtual size: 3KB