450efec6376091d25a1a35bafeee0240N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

450efec6376091d25a1a35bafeee0240N.exe
Size

173KB
MD5

450efec6376091d25a1a35bafeee0240
SHA1

af3606791798308f142aae5c30e8d13f1436eacc
SHA256

03b51338426e73ee6de9aa09da34aac570ebbae0190ffc134976cec633780466
SHA512

1b54b0ae78518c91a94e725f1bee4fa5e1500bee921fe72ed1505f4c4bbba3ddedfea4bdde1ca7e5388473d551d2cec81b28e97b23eeb84d94caf4da7697698c
SSDEEP

3072:PhEJsN6YGWdgOaqHqNDnGOb+ahXNqJohePnq45L844lZw1d1/gEdB:5mYGWANDGOb+asEwv5LIGv1YEdB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
450efec6376091d25a1a35bafeee0240N.exe

Files

450efec6376091d25a1a35bafeee0240N.exe
.exe windows:6 windows x86 arch:x86

95bb6171e0663e22baf8d57d4da6007d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

iexpress.pdb

Imports

kernel32

WritePrivateProfileSectionA
GetFullPathNameA
GetPrivateProfileSectionA
SetFileAttributesA
GetFileAttributesA
CreateDirectoryA
GetSystemInfo
GetShortPathNameA
WriteFile
DeleteFileA
ReadFile
FormatMessageA
GetLastError
GetExitCodeProcess
CreateProcessA
GetUserDefaultUILanguage
CopyFileA
_llseek
_lread
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
GetFileInformationByHandle
GlobalAlloc
GlobalFree
GlobalUnlock
GlobalLock
SetLastError
_lwrite
FreeResource
LockResource
CompareStringA
SizeofResource
FindResourceExA
GetTickCount
_lclose
MoveFileA
GetTempPathA
GetTempFileNameA
EnumResourceLanguagesA
EnumResourceNamesA
FreeLibrary
EnumResourceTypesA
LoadLibraryExA
GetCurrentDirectoryA
GetSystemTime
MultiByteToWideChar
WideCharToMultiByte
lstrcmpiA
LocalAlloc
GetModuleFileNameA
GetVersionExA
lstrlenA
WritePrivateProfileStringA
GetPrivateProfileIntA
FindFirstFileA
FindClose
GetPrivateProfileStringA
lstrcmpA
CreateFileA
CloseHandle
LocalFree
GetModuleHandleW
InterlockedExchange
Sleep
InterlockedCompareExchange
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
IsDBCSLeadByte
GetProcAddress
LoadResource
GetVersion

gdi32

GetStockObject
DeleteObject
GetDeviceCaps
GetObjectA
CreateFontIndirectA
CreateFontIndirectW

user32

GetWindowRect
CheckRadioButton
CharPrevA
CheckDlgButton
IsDlgButtonChecked
GetDlgItemTextA
SetDlgItemTextA
PostMessageA
SetFocus
MessageBeep
MessageBoxA
GetSystemMetrics
SendDlgItemMessageA
CharNextA
GetDC
ReleaseDC
SendMessageA
LoadStringA
MsgWaitForMultipleObjects
DispatchMessageA
PeekMessageA
GetParent
GetDlgItem
EnableWindow
CallWindowProcA
GetWindowLongA
SetWindowLongA
ShowWindow
SystemParametersInfoW

msvcrt

__set_app_type
__p__fmode
__setusermatherr
_amsg_exit
_initterm
_acmdln
_controlfp
_except_handler4_common
__p__commode
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
memcpy
wcsncmp
mbstowcs
malloc
free
_splitpath_s
memcpy_s
_itoa
strtok
toupper
_itoa_s
strtoul
strchr
memset
_vsnprintf
?terminate@@YAXXZ

comctl32

CreatePropertySheetPageA
DestroyPropertySheetPage
PropertySheetA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

imagehlp

CheckSumMappedFile

advapi32

RegQueryValueExA
RegOpenKeyExA
RegCloseKey

Sections

.text
Size: 53KB - Virtual size: 53KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

95bb6171e0663e22baf8d57d4da6007d

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

gdi32

user32

msvcrt

comctl32

comdlg32

version

imagehlp

advapi32

Sections

.text Size: 53KB - Virtual size: 53KB

.data Size: 3KB - Virtual size: 11KB

.rsrc Size: 86KB - Virtual size: 85KB

.reloc Size: 30KB - Virtual size: 32KB

.text
Size: 53KB - Virtual size: 53KB

.data
Size: 3KB - Virtual size: 11KB

.rsrc
Size: 86KB - Virtual size: 85KB

.reloc
Size: 30KB - Virtual size: 32KB