4331e7f18d5f0bf02ca12ea998650550N[.]exe

General

Target

4331e7f18d5f0bf02ca12ea998650550N.exe
Size

779KB
MD5

4331e7f18d5f0bf02ca12ea998650550
SHA1

e13a0b96bf98924821aca41ca38cce303913a503
SHA256

ee26b97567bfcfd3bdb975fc169a3b16b4a6811217bab54a161199816420ae7e
SHA512

1a31e9c911143c4b3ec91479bc4d15c35221ecf2ec650ce5f2bb4f6dfb9777b85a9b6b541d4b389fca44d1f88d9d943613e957022bb2f7e72bbdd82652d3e513
SSDEEP

6144:bXFV5Gq5bs8yg0HhW7IIGUy/OGpxv6hbO2plsPnX/g3DB8oPDiSdXuMYgKmt:pFygvilfv6hqm+X/gzBDPDiSdXu5g

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4331e7f18d5f0bf02ca12ea998650550N.exe

Files

4331e7f18d5f0bf02ca12ea998650550N.exe
.dll windows:6 windows x86 arch:x86

bb8ee2b88f78303ff49815a52d72bb5b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

mfc140u

ord1449
ord485
ord1513
ord2374
ord1511
ord2268

kernel32

GetCurrentThreadId
OutputDebugStringW
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
GetLastError
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent

vcruntime140

__std_type_info_destroy_list
_except_handler4_common
memset

api-ms-win-crt-heap-l1-1-0

free

api-ms-win-crt-runtime-l1-1-0

_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
_initterm
_initterm_e

Exports

Exports

??1CStdioFileEx@@UAE@XZ
?IsFileUnicodeText@CStdioFileEx@@QAE_NXZ
?modeWriteUnicode@CStdioFileEx@@2IB

Sections

.text
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 770KB - Virtual size: 769KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 460B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb8ee2b88f78303ff49815a52d72bb5b

Headers

DLL Characteristics

File Characteristics

Imports

mfc140u

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 4KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 770KB - Virtual size: 769KB

.reloc Size: 512B - Virtual size: 460B

.text
Size: 4KB - Virtual size: 4KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 770KB - Virtual size: 769KB

.reloc
Size: 512B - Virtual size: 460B