5dcd91db4084c35ea9135caf5a395650N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

5dcd91db4084c35ea9135caf5a395650N.exe
Size

146KB
MD5

5dcd91db4084c35ea9135caf5a395650
SHA1

40f94dddb6fce516a5fe52a9b5f0a6c21a4bbe68
SHA256

7b8cd9afec1ce50656218fc86034b33d5a3207bfb232aa8ae87135b73866c609
SHA512

cf087fa0ccb393f215b31a3027aaa0798cd6068132b2ae37237ab4569ffe959310810c38bb3c3d7646c5168c6cb8b12511db4e78612d62da2c95f0df173b966a
SSDEEP

3072:s0MRt20E9IGe0weuYuSCn8evtwbCAczwWQWVW4PObyBAqDf2L8awmdCrlyqI/:s0MRt2hYehuvtmOOImYr8j

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5dcd91db4084c35ea9135caf5a395650N.exe

Files

5dcd91db4084c35ea9135caf5a395650N.exe
.dll windows:4 windows x86 arch:x86

888ef9cf79ff9c3bef63c71a5a770c48

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

kernel32

DeleteCriticalSection
EnterCriticalSection
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
MultiByteToWideChar
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

__dllonexit
__mb_cur_max
__setusermatherr
_amsg_exit
_errno
_initterm
_iob
_lock
_onexit
_unlock
calloc
fprintf
fputc
free
fwrite
getenv
localeconv
malloc
memcpy
memmove
memset
setlocale
strchr
strerror
strlen
strncmp
abort
vfprintf
wcslen
atoi

libgcc_s_sjlj-1

__divdi3
__moddi3
__udivdi3
__umoddi3

avutil-55

av_audio_fifo_alloc
av_audio_fifo_drain
av_audio_fifo_free
av_audio_fifo_read
av_audio_fifo_size
av_audio_fifo_write
av_default_item_name
av_frame_get_buffer
av_free
av_freep
av_get_bytes_per_sample
av_get_channel_layout_nb_channels
av_get_channel_layout_string
av_get_cpu_flags
av_get_packed_sample_fmt
av_get_planar_sample_fmt
av_get_sample_fmt_name
av_lfg_init
av_log
av_malloc
av_mallocz
av_opt_free
av_opt_set_defaults
av_reduce
av_rescale_rnd
av_sample_fmt_is_planar
av_samples_alloc
av_samples_fill_arrays
av_samples_get_buffer_size
av_samples_set_silence

Exports

Exports

avresample_alloc_context
avresample_available
avresample_build_matrix
avresample_close
avresample_config
avresample_configuration
avresample_convert
avresample_convert_frame
avresample_free
avresample_get_class
avresample_get_delay
avresample_get_matrix
avresample_get_out_samples
avresample_is_open
avresample_license
avresample_open
avresample_read
avresample_set_channel_mapping
avresample_set_compensation
avresample_set_matrix
avresample_version

Sections

.text
Size: 125KB - Virtual size: 125KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 72B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rodata
Size: 512B - Virtual size: 288B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 3KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 718B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 32B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 872B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

888ef9cf79ff9c3bef63c71a5a770c48

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

msvcrt

libgcc_s_sjlj-1

avutil-55

Exports

Exports

Sections

.text Size: 125KB - Virtual size: 125KB

.data Size: 512B - Virtual size: 72B

.rdata Size: 9KB - Virtual size: 9KB

.rodata Size: 512B - Virtual size: 288B

.bss Size: - Virtual size: 3KB

.edata Size: 1024B - Virtual size: 718B

.idata Size: 3KB - Virtual size: 2KB

.CRT Size: 512B - Virtual size: 44B

.tls Size: 512B - Virtual size: 32B

.rsrc Size: 1024B - Virtual size: 872B

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 125KB - Virtual size: 125KB

.data
Size: 512B - Virtual size: 72B

.rdata
Size: 9KB - Virtual size: 9KB

.rodata
Size: 512B - Virtual size: 288B

.bss
Size: - Virtual size: 3KB

.edata
Size: 1024B - Virtual size: 718B

.idata
Size: 3KB - Virtual size: 2KB

.CRT
Size: 512B - Virtual size: 44B

.tls
Size: 512B - Virtual size: 32B

.rsrc
Size: 1024B - Virtual size: 872B

.reloc
Size: 3KB - Virtual size: 2KB