258eb97e77b268b7c81b8642ed8a7f90N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

258eb97e77b268b7c81b8642ed8a7f90N.exe
Size

97KB
MD5

258eb97e77b268b7c81b8642ed8a7f90
SHA1

b941bc2c851fa4a0f52fbfd0fa55524382a28f0e
SHA256

0c497d6c0448a5f1ca9666bdc82fd89409142161e6f2cfa8fee92b149f199e02
SHA512

14f649301f4dd8b18901ed8c6c4fa36f751d95f56ea9d6759115e16a74cf800b5d99d31fed434aab49f08b792d3e4468e5adef07743768837ce20ed3189d2ece
SSDEEP

3072:EaxVFuheLMPuQD2n5/A8h+0AVavCObJP5L5:1xSheLMG5+0AVxObJP5L5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
258eb97e77b268b7c81b8642ed8a7f90N.exe

Files

258eb97e77b268b7c81b8642ed8a7f90N.exe
.dll windows:4 windows x64 arch:x64

9cc363fecccbd4b5bff50c51fdb9b8b5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

perl538

PL_No
PL_WARN_NONE
PL_Yes
PL_hexdigit
PL_inf
PL_nan
PL_strict_utf8_dfa_tab
PL_utf8skip
Perl__utf8n_to_uvchr_msgs_helper
Perl_amagic_call
Perl_apply_attrs_string
Perl_av_extend
Perl_av_fetch
Perl_av_len
Perl_av_push
Perl_av_store
Perl_call_method
Perl_call_sv
Perl_ck_warner_d
Perl_croak_nocontext
Perl_croak_xs_usage
Perl_eval_sv
Perl_free_tmps
Perl_get_context
Perl_get_cv
Perl_get_cvn_flags
Perl_get_sv
Perl_grok_number
Perl_gv_add_by_type
Perl_gv_fetchmethod_autoload
Perl_gv_stashpv
Perl_gv_stashpvn
Perl_gv_stashsv
Perl_hv_common
Perl_hv_common_key_len
Perl_hv_iterinit
Perl_hv_iterkeysv
Perl_hv_iternext_flags
Perl_hv_iterval
Perl_hv_placeholders_get
Perl_load_module
Perl_markstack_grow
Perl_mg_find
Perl_mg_get
Perl_mg_set
Perl_more_bodies
Perl_more_sv
Perl_my_cxt_init
Perl_my_strtod
Perl_newCONSTSUB
Perl_newRV
Perl_newSV
Perl_newSViv
Perl_newSVnv
Perl_newSVpv
Perl_newSVpvn
Perl_newSVpvn_flags
Perl_newSVsv_flags
Perl_newSVuv
Perl_newXS_deffile
Perl_newXS_flags
Perl_pop_scope
Perl_push_scope
Perl_pv_uni_display
Perl_safesyscalloc
Perl_safesysfree
Perl_safesysrealloc
Perl_save_vptr
Perl_savetmps
Perl_stack_grow
Perl_sv_2bool_flags
Perl_sv_2iv_flags
Perl_sv_2mortal
Perl_sv_2nv_flags
Perl_sv_2pv_flags
Perl_sv_2uv_flags
Perl_sv_backoff
Perl_sv_bless
Perl_sv_catpvn_flags
Perl_sv_chop
Perl_sv_cmp_flags
Perl_sv_copypv_flags
Perl_sv_derived_from
Perl_sv_free2
Perl_sv_grow
Perl_sv_newmortal
Perl_sv_pvutf8n_force
Perl_sv_setiv_mg
Perl_sv_setsv_flags
Perl_sv_setuv_mg
Perl_sv_tainted
Perl_sv_upgrade
Perl_sv_utf8_downgrade_flags
Perl_sv_utf8_upgrade_flags_grow
Perl_utf8_length
Perl_warn_nocontext
Perl_xs_boot_epilog
Perl_xs_handshake

kernel32

DeleteCriticalSection
EnterCriticalSection
FreeLibrary
GetLastError
GetModuleHandleA
GetProcAddress
InitializeCriticalSection
IsDBCSLeadByteEx
LeaveCriticalSection
LoadLibraryA
MultiByteToWideChar
Sleep
TlsGetValue
VirtualProtect
VirtualQuery
WideCharToMultiByte

msvcrt

___lc_codepage_func
___mb_cur_max_func
__iob_func
_amsg_exit
_errno
_initterm
_lock
_unlock
abort
calloc
fputc
free
fwrite
localeconv
malloc
memcmp
memcpy
memmove
memset
qsort
realloc
strchr
strcmp
strerror
strlen
strncmp
vfprintf
wcslen

Exports

Exports

boot_Cpanel__JSON__XS

Sections

.text
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 208B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.eh_fram
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 2KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 512B - Virtual size: 82B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.CRT
Size: 512B - Virtual size: 88B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 16B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 100B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9cc363fecccbd4b5bff50c51fdb9b8b5

Headers

DLL Characteristics

File Characteristics

Imports

perl538

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 69KB - Virtual size: 69KB

.data Size: 512B - Virtual size: 208B

.rdata Size: 13KB - Virtual size: 12KB

.eh_fram Size: 512B - Virtual size: 4B

.pdata Size: 2KB - Virtual size: 2KB

.xdata Size: 2KB - Virtual size: 2KB

.bss Size: - Virtual size: 2KB

.edata Size: 512B - Virtual size: 82B

.idata Size: 5KB - Virtual size: 5KB

.CRT Size: 512B - Virtual size: 88B

.tls Size: 512B - Virtual size: 16B

.reloc Size: 512B - Virtual size: 100B

.text
Size: 69KB - Virtual size: 69KB

.data
Size: 512B - Virtual size: 208B

.rdata
Size: 13KB - Virtual size: 12KB

.eh_fram
Size: 512B - Virtual size: 4B

.pdata
Size: 2KB - Virtual size: 2KB

.xdata
Size: 2KB - Virtual size: 2KB

.bss
Size: - Virtual size: 2KB

.edata
Size: 512B - Virtual size: 82B

.idata
Size: 5KB - Virtual size: 5KB

.CRT
Size: 512B - Virtual size: 88B

.tls
Size: 512B - Virtual size: 16B

.reloc
Size: 512B - Virtual size: 100B