e135b2144389a20354bed4b9e73648e0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

e135b2144389a20354bed4b9e73648e0N.exe
Size

229KB
MD5

e135b2144389a20354bed4b9e73648e0
SHA1

3914cae1d05f8d3ae740f747a7f4776cc594ebaf
SHA256

d71f8e5feaa7eafd8d4c3e3422e0a5238eb64a35f0e1104608adc856616e115d
SHA512

8f32b05c71b16e8ad18f8f7ac28d8e48c626cfb20ee0b635ca634624c6d69828b2b029fcd1f4a0ac263cc8ed6ec4c4f3e5bca78adc42dcb4c1b4c40f373be0cf
SSDEEP

3072:tY7R4OeqlyGIyM7PVBSPB6enPC1ZhgzMdDwFQqSXW468zE3JENB8fGH:tq6OeKbMRkB6iMhIVvSXW46iE5KkGH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e135b2144389a20354bed4b9e73648e0N.exe

Files

e135b2144389a20354bed4b9e73648e0N.exe
.exe windows:4 windows x86 arch:x86

efca6a734a1f3df4a4963d95f7676a7e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

comctl32

InitCommonControlsEx
SetWindowSubclass

gdi32

BitBlt
ChoosePixelFormat
CreateCompatibleDC
CreateDCW
CreateDIBSection
CreateFontIndirectW
CreateSolidBrush
DeleteDC
DeleteObject
EndDoc
EndPage
GetDeviceCaps
GetObjectW
SelectObject
SetBrushOrgEx
SetPixelFormat
SetStretchBltMode
StartDocW
StartPage
StretchBlt

gdiplus

GdipBitmapGetPixel
GdipBitmapSetPixel
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromStream
GdipCreateFromHDC
GdipCreateHBITMAPFromBitmap
GdipCreateHICONFromBitmap
GdipDeleteGraphics
GdipDisposeImage
GdipDrawImage
GdipDrawImageRect
GdipGetDpiX
GdipGetDpiY
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGetImageHeight
GdipGetImageWidth
GdipSaveImageToFile
GdipSetInterpolationMode
GdiplusShutdown
GdiplusStartup

kernel32

CloseHandle
CompareStringW
CreateFileW
DeleteCriticalSection
EnterCriticalSection
FindClose
FindFirstFileW
FindResourceW
FreeLibrary
GetConsoleMode
GetConsoleScreenBufferInfo
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetFileAttributesW
GetFileSize
GetLargestConsoleWindowSize
GetLastError
GetModuleHandleA
GetModuleHandleW
GetProcAddress
GetProcessHeap
GetProfileStringW
GetStartupInfoA
GetStdHandle
GetSystemTimeAsFileTime
GetTickCount
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
HeapAlloc
HeapFree
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryA
LoadLibraryW
LoadResource
LockResource
MulDiv
MultiByteToWideChar
QueryPerformanceCounter
ReadFile
SetConsoleMode
SetConsoleWindowInfo
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TlsGetValue
UnhandledExceptionFilter
VirtualProtect
VirtualQuery

msvcrt

__getmainargs
__initenv
__lconv_init
__p__acmdln
__p__fmode
__set_app_type
__setusermatherr
_amsg_exit
_cexit
_controlfp
_fmode
_fpreset
_i64tow
_initterm
_iob
_itow
_onexit
_snprintf
_ui64tow
_ultow
abort
calloc
exit
fprintf
fputs
free
fwrite
iswctype
malloc
mbstowcs
memset
memcpy
qsort
realloc
setlocale
signal
strcat
strchr
strcpy
strlen
strncmp
towupper
vfprintf
wcscmp
wcscspn
wcslen
wcsncmp
wcsstr
wcstod
wcstombs

ole32

CreateStreamOnHGlobal

oleaut32

SysAllocString
SysAllocStringLen
SysFreeString
SysStringLen

opengl32

wglCreateContext
wglDeleteContext
wglMakeCurrent

shell32

SHGetPathFromIDListW

shlwapi

PathRemoveBackslashW

user32

AdjustWindowRectEx
BeginPaint
CreateWindowExW
DefWindowProcW
DestroyAcceleratorTable
DestroyWindow
DispatchMessageW
EnableWindow
EndPaint
EnumThreadWindows
FillRect
FindWindowW
GetAsyncKeyState
GetClassInfoExW
GetClassLongW
GetClassNameW
GetClientRect
GetDC
GetDlgCtrlID
GetDlgItem
GetKeyState
GetMenu
GetMessageW
GetNextDlgTabItem
GetParent
GetSystemMetrics
GetWindowLongW
GetWindowPlacement
GetWindowRect
GetWindowThreadProcessId
InvalidateRect
IsDialogMessageW
IsWindow
IsWindowEnabled
IsWindowVisible
LoadCursorW
LoadImageW
MessageBoxW
MoveWindow
PostQuitMessage
RegisterClassExW
ReleaseDC
ScreenToClient
ScrollWindow
SendMessageW
SetClassLongW
SetFocus
SetPropW
SetRect
SetScrollInfo
SetScrollPos
SetScrollRange
SetWindowLongW
SetWindowPos
ShowScrollBar
ShowWindow
SystemParametersInfoW
TranslateAcceleratorW
TranslateMessage
UnregisterClassW
UpdateWindow

version

GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW

Sections

.text
Size: 55KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 22KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 52B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 154KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

efca6a734a1f3df4a4963d95f7676a7e

Headers

File Characteristics

Imports

comctl32

gdi32

gdiplus

kernel32

msvcrt

ole32

oleaut32

opengl32

shell32

shlwapi

user32

version

winspool.drv

Sections

.text Size: 55KB - Virtual size: 55KB

.data Size: 4KB - Virtual size: 4KB

.rdata Size: 6KB - Virtual size: 5KB

.bss Size: - Virtual size: 22KB

.idata Size: 7KB - Virtual size: 6KB

.CRT Size: 512B - Virtual size: 52B

.tls Size: 512B - Virtual size: 8B

.rsrc Size: 154KB - Virtual size: 154KB

.text
Size: 55KB - Virtual size: 55KB

.data
Size: 4KB - Virtual size: 4KB

.rdata
Size: 6KB - Virtual size: 5KB

.bss
Size: - Virtual size: 22KB

.idata
Size: 7KB - Virtual size: 6KB

.CRT
Size: 512B - Virtual size: 52B

.tls
Size: 512B - Virtual size: 8B

.rsrc
Size: 154KB - Virtual size: 154KB