c921940b6cecf47f49a44066d9416f00N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

c921940b6cecf47f49a44066d9416f00N.exe
Size

125KB
MD5

c921940b6cecf47f49a44066d9416f00
SHA1

c7399ac484855783432bef991cb79a6719d3d738
SHA256

2aad2e627183a42b2e1d54406d21d56d77813231a16b67c5ab1b70f3d9387cce
SHA512

be6baa82604b61132df577906e7d8db27619636af9a1d08fbf814ceba9db48404bf0be29e5f57ef6b332a57eb1c1e184101b5adbf606f03f74dda6875e8ce545
SSDEEP

768:DCz83dWuU1g/p685vkbLUVkviRE7VsrCr7SGYhwtEE37NH/tq+rVI6y:+iW6UlbLjf8CrOfitEqNVlVI6y

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c921940b6cecf47f49a44066d9416f00N.exe

Files

c921940b6cecf47f49a44066d9416f00N.exe
.exe windows:4 windows x86 arch:x86

84a4d5bf68e62b329a5272a7f393f44b

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LeaveCriticalSection
TlsFree
CloseHandle
WriteFile
HeapDestroy
IsProcessorFeaturePresent
SetThreadPriority
GetFileAttributesA
QueryPerformanceFrequency
GetFileSize
ReadFile
GetOverlappedResult
InterlockedIncrement
GetModuleFileNameA
lstrlenA
UnmapViewOfFile
FindNextFileA
CreateFileMappingA
IsValidLocale
GetCurrentThread
HeapFree
SetEndOfFile
GetTickCount
GlobalAlloc
DeleteFileA
InitializeCriticalSection
LoadLibraryA
CreateThread
GetExitCodeThread
GlobalFree
MapViewOfFile
ExpandEnvironmentStringsA
VirtualQuery
ReadProcessMemory
GetDriveTypeA
GetVersionExA
DebugBreak
CreateFileA
GetModuleHandleA
RemoveDirectoryA
CreateDirectoryA
TlsAlloc
ResetEvent
WaitForSingleObject
EnterCriticalSection
GetSystemInfo
WaitForSingleObjectEx
GetCurrentProcessId
CreateMutexA
UnhandledExceptionFilter
HeapAlloc
ReadFileEx
FreeLibrary
VirtualFree
VirtualAlloc
ReleaseMutex
LCMapStringW
ReleaseSemaphore
TlsGetValue
GetUserDefaultLangID
SetFilePointer
FindFirstFileA
lstrcpyA
WriteFileEx
GetProcessHeap
CreateSemaphoreA
GetSystemDefaultLangID
OutputDebugStringA
MoveFileA
QueryPerformanceCounter
HeapCreate
FlushFileBuffers
GetCurrentThreadId
SleepEx
GetProcAddress
CopyFileA
FindClose
GetDiskFreeSpaceA
WaitForMultipleObjectsEx
GlobalMemoryStatus
DeleteCriticalSection
SetEvent
GetLocalTime
TlsSetValue
CreateEventA
TerminateProcess
Sleep
GetLastError
GetCurrentProcess
lstrcmpA

winmm

auxSetVolume

advapi32

InitializeSecurityDescriptor
RegSetValueExA
SetSecurityDescriptorDacl
RegQueryValueExA
RegisterEventSourceA
RegCreateKeyExA
RegDeleteKeyA
RegDeleteValueA
ReportEventA
DeregisterEventSource
RegCloseKey
RegOpenKeyExA

msvcrt

strncpy
fclose
_strnicmp
swprintf
strtok
malloc
_purecall
_makepath
strchr
_ultoa
__dllonexit
vprintf
printf
_vsnprintf
toupper
fflush
isprint
memmove
free
strtoul
fopen
_beginthread
_snprintf
_adjust_fdiv
vsprintf
_stricmp
rand
atol
_beep
strpbrk
_chdir
exit
_ltoa
_initterm
_except_handler3
sprintf
_iob
_onexit
_itoa
fprintf
_strupr
wcslen

Sections

.textbss
Size: 39KB - Virtual size: 240KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.text
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 80KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

84a4d5bf68e62b329a5272a7f393f44b

Headers

File Characteristics

Imports

kernel32

winmm

advapi32

msvcrt

Sections

.textbss Size: 39KB - Virtual size: 240KB

.text Size: 512B - Virtual size: 472B

.idata Size: 4KB - Virtual size: 3KB

.rdata Size: 512B - Virtual size: 32B

.reloc Size: 80KB - Virtual size: 156KB

.textbss
Size: 39KB - Virtual size: 240KB

.text
Size: 512B - Virtual size: 472B

.idata
Size: 4KB - Virtual size: 3KB

.rdata
Size: 512B - Virtual size: 32B

.reloc
Size: 80KB - Virtual size: 156KB