ce4ae4228fcc23462c4efa1f3801d070N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

ce4ae4228fcc23462c4efa1f3801d070N.exe
Size

352KB
MD5

ce4ae4228fcc23462c4efa1f3801d070
SHA1

022d4aed2995bee980ccb99a36c0c810f2b8cf40
SHA256

c49263aa9d8f726dedb659caaf3c0ab9d12fb2440c2e65b49beaf311aec19eab
SHA512

2b98fe56fa51cd7c4b1b2784912593493d58df4d85ffdeb1edb600c63b3589e2a1d0799ae922597182718505d3804431834c27c91163277bdad7acfc01465e04
SSDEEP

6144:07R0GRT66bXI+xiCkczgVfx7Z7A9RYkGG8OveTBIP/V+sQvMRlkM4RD/qzMfURX:CM6bXj5sP7ZU9ie8OveTaPGMRGM4h/qV

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ce4ae4228fcc23462c4efa1f3801d070N.exe

Files

ce4ae4228fcc23462c4efa1f3801d070N.exe
.dll windows:5 windows x86 arch:x86

5a636e813d79d73b26d922dd935779aa

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

E:\0010_SourceCode\ghe\BrImgPDF\binary\Release\brImageConversion.pdb

Imports

brtpgsplash

TPG_IF_Open
TPG_IF_OutData
TPG_IF_Close
TPG_IF_InImg

kernel32

GetFileType
GetLastError
HeapFree
HeapAlloc
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
GetProcAddress
GetModuleHandleW
ExitProcess
DecodePointer
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
WriteFile
GetStdHandle
GetModuleFileNameW
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
MultiByteToWideChar
SetHandleCount
GetStartupInfoW
Sleep
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetFilePointer
WriteConsoleW
SetStdHandle
HeapReAlloc
HeapSize
LCMapStringW
GetStringTypeW
CreateFileW
CloseHandle

Exports

Exports

ImageScanDestroy
ImageScanDocumentEnd
ImageScanDocumentStart
ImageScanHighCompressionPDF_Create
ImageScanImageEnd
ImageScanImageSet
ImageScanImageStart
ImageScanPdfa_Create
ImageScanSecurePDF_Create
ScanStreamWriterClose

Sections

.text
Size: 204KB - Virtual size: 204KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5a636e813d79d73b26d922dd935779aa

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

brtpgsplash

kernel32

Exports

Exports

Sections

.text Size: 204KB - Virtual size: 204KB

.rdata Size: 48KB - Virtual size: 48KB

.data Size: 9KB - Virtual size: 16KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 7KB

.text
Size: 204KB - Virtual size: 204KB

.rdata
Size: 48KB - Virtual size: 48KB

.data
Size: 9KB - Virtual size: 16KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 7KB