84628055c7ac3221a8bf961950013720N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

84628055c7ac3221a8bf961950013720N.exe
Size

5.7MB
MD5

84628055c7ac3221a8bf961950013720
SHA1

638b32ea10c219daad261b41df1441cd3847454d
SHA256

367ee08cb137da7409ce8983fbcddaf993c049263639a87214a6fa065457389a
SHA512

53c5f4cde63560613bf8d91fd4b5feb7e249ce46a722ce671fa38603a6ab1810d424852e146242722c4992a898c657039ecdf9b10d34364e0edd6b2f00b0790f
SSDEEP

98304:sMjPcp5r9QC5JVthMXCZFXGRMGfZNnRtr7frjjs91bUV9ihVO8zQkX49D:sWIFrhaC2RMGxtHe1bUVcq8c6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
84628055c7ac3221a8bf961950013720N.exe

Files

84628055c7ac3221a8bf961950013720N.exe
.exe windows:6 windows x86 arch:x86

d51c5a504cb9a8ce6b6b701d61e17b6f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
LoadLibraryExW
LeaveCriticalSection
IsDebuggerPresent
TlsSetValue
TlsGetValue
Sleep
OutputDebugStringW
GetStringTypeW
FlushFileBuffers
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
LCMapStringW
TlsFree
CloseHandle
TlsAlloc
GetVersionExA
GetModuleFileNameA
CreatePipe
SetCurrentDirectoryA
GetModuleFileNameW
WaitNamedPipeA
TerminateProcess
ClearCommBreak
GetCurrentThread
GetModuleHandleW
HeapFree
GetCurrentProcess
CreateThread
FindNextFileA
RtlUnwind
FindClose
EnterCriticalSection
RaiseException
Beep
GetConsoleCP
GetTickCount
WaitForSingleObjectEx
EncodePointer
DecodePointer
GetLastError
HeapReAlloc
GetCommandLineW
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
GetProcAddress
MultiByteToWideChar
WideCharToMultiByte
HeapSize
HeapAlloc
GetProcessHeap
SetLastError
GetCurrentThreadId
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
WriteFile
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
CreateFileW

user32

ClientToScreen
ScreenToClient
IsIconic
DeleteMenu
LoadIconA
CreateAcceleratorTableW
BeginPaint
WinHelpA
GetQueueStatus
LoadAcceleratorsW
ShowCursor
InflateRect
GetKeyboardLayout
GetDlgItem
SetWindowsHookExA
CreateCaret
UnhookWindowsHookEx
DestroyMenu
DrawFrameControl
ShowOwnedPopups
GetSystemMenu
GetCapture
ReleaseDC
CheckDlgButton
IsDlgButtonChecked
DispatchMessageA
FindWindowA

gdi32

EndPage
TranslateCharsetInfo
PatBlt
CreateHatchBrush
Polygon
CreateFontA
GetDeviceCaps
CreateHalftonePalette
CreateDCA
CreateBitmap
SelectObject
SelectClipRgn
CreatePenIndirect
CreateRectRgnIndirect
PlayEnhMetaFile
Rectangle
GetCharWidthA
CreateBrushIndirect
ExtCreateRegion
SetPolyFillMode
GetObjectType
SetPaletteEntries
GetCharABCWidthsFloatA
SetWinMetaFileBits
RestoreDC
CreateSolidBrush
PolyPolygon
GetWindowOrgEx
MaskBlt
CreateFontIndirectA
CombineRgn
SetStretchBltMode
ExtSelectClipRgn
GetPaletteEntries

advapi32

GetLengthSid
RegCreateKeyExA
EqualSid
SetSecurityDescriptorOwner

Sections

.text
Size: 340KB - Virtual size: 339KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5.4MB - Virtual size: 5.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d51c5a504cb9a8ce6b6b701d61e17b6f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

Sections

.text Size: 340KB - Virtual size: 339KB

.data Size: 5.4MB - Virtual size: 5.4MB

.idata Size: 4KB - Virtual size: 3KB

.reloc Size: 6KB - Virtual size: 6KB

.text
Size: 340KB - Virtual size: 339KB

.data
Size: 5.4MB - Virtual size: 5.4MB

.idata
Size: 4KB - Virtual size: 3KB

.reloc
Size: 6KB - Virtual size: 6KB