848c2677964ba6bfdd92e2bbb7db9cb0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

848c2677964ba6bfdd92e2bbb7db9cb0N.exe
Size

3.7MB
MD5

848c2677964ba6bfdd92e2bbb7db9cb0
SHA1

0cdd2f06d7a4f702bb0915bd9b15a4e4f3adb1d6
SHA256

410b2b6e392ddca83be01679549a4d1ff5a61c3ebe9f87532254d5ce50ed377d
SHA512

2a19e62b1a2631f1cadc54eeef2e18e266d008e11c01839480ca302689b38039537e4eb5262346969bdea8bde86353f244f755131f5ab72eac762313631e39c7
SSDEEP

98304:NgT7Y6+6gJf6PD3Nmn7AJEgLYXMKUCCCNYzQEr0WO0Yk843IBCGe:k+NJiPD3Nm7AJEgLYX8CNYzQEr0WO0Ys

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
848c2677964ba6bfdd92e2bbb7db9cb0N.exe

Files

848c2677964ba6bfdd92e2bbb7db9cb0N.exe
.exe windows:4 windows x86 arch:x86

c262cca8cb48e361ab5fd72bd6698ef6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcatA
lstrlenA
Sleep
GetFileSize
lstrcmpA
ReadFile
SetFilePointer
GetModuleHandleA
MultiByteToWideChar
CopyFileA
GetSystemTime
FindClose
FindNextFileA
FindFirstFileA
EndUpdateResourceA
UpdateResourceA
BeginUpdateResourceA
GetSystemDefaultLangID
lstrcpyW
lstrlenW
CreateProcessA
MoveFileA
ExpandEnvironmentStringsA
GetWindowsDirectoryW
InitializeCriticalSection
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
SetStdHandle
GetOEMCP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
InterlockedIncrement
InterlockedDecrement
SetUnhandledExceptionFilter
LeaveCriticalSection
EnterCriticalSection
IsBadWritePtr
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
DeleteCriticalSection
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
WideCharToMultiByte
FreeEnvironmentStringsW
FreeEnvironmentStringsA
HeapSize
HeapReAlloc
UnhandledExceptionFilter
HeapAlloc
SetLastError
TlsAlloc
LoadLibraryA
GetProcAddress
CreateFileA
WriteFile
GetCurrentDirectoryA
OpenFileMappingA
GetCurrentProcessId
GetSystemDirectoryA
SetFileAttributesA
UnmapViewOfFile
GetModuleFileNameA
VirtualProtect
VirtualAlloc
WinExec
CreateToolhelp32Snapshot
Process32First
Process32Next
Module32First
Module32Next
CloseHandle
GetCurrentProcess
TerminateProcess
DeleteFileA
GetCurrentThreadId
RaiseException
HeapFree
ExitProcess
GetVersion
GetCommandLineA
GetStartupInfoA
RtlUnwind
GetLocalTime
GetTimeZoneInformation
ExitThread
TlsGetValue
TlsSetValue
CreateThread
ResumeThread
GetLastError
VirtualFree
lstrcpyA
CreateFileMappingA
MapViewOfFile
GetACP

user32

EndDialog
SetTimer
MessageBoxA
SystemParametersInfoA
IsDlgButtonChecked
CheckDlgButton
GetClassNameA
IsWindow
GetTopWindow
IsWindowVisible
FindWindowA
wsprintfA
KillTimer
LoadIconA
GetDlgItem
EnableWindow
SetDlgItemTextA
GetDlgItemTextA
GetWindow
GetClassNameW
GetWindowThreadProcessId
GetKeyboardLayoutNameA
GetKeyboardLayoutList
UnloadKeyboardLayout
ReleaseCapture
ClientToScreen
SetCursor
SetCapture
LoadBitmapA
LoadCursorA
WindowFromPoint
GetParent
PtInRect
GetWindowDC
GetWindowRect
OffsetRect
IsRectEmpty
ReleaseDC
DialogBoxParamA
GetClassInfoExA
RegisterClassExA
WaitForInputIdle
SendMessageA
PeekMessageA
TranslateMessage
DispatchMessageA
PostMessageA

gdi32

PatBlt

advapi32

RegCloseKey
RegEnumKeyExA
RegCreateKeyA
RegSetValueExA
RegQueryValueExA
RegDeleteKeyA
RegOpenKeyA
RegOpenKeyExA
RegEnumValueA

shell32

ShellExecuteExA
ShellExecuteA

ws2_32

WSAStartup
inet_ntoa
__WSAFDIsSet
inet_addr
gethostbyname
socket
htons
connect
recv
closesocket
select
send

imm32

ImmGetDescriptionA
ImmIsIME

shlwapi

StrCatW
PathRenameExtensionA
PathFileExistsA
PathIsFileSpecA
PathFindExtensionA
PathRemoveFileSpecA
PathFindFileNameA

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

Sections

.text
Size: 132KB - Virtual size: 128KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.TEX0
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.TEX1
Size: 856KB - Virtual size: 853KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE

.rsrc
Size: 68KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c262cca8cb48e361ab5fd72bd6698ef6

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ws2_32

imm32

shlwapi

version

Sections

.text Size: 132KB - Virtual size: 128KB

.rdata Size: 2.6MB - Virtual size: 2.6MB

.data Size: 16KB - Virtual size: 45KB

.TEX0 Size: 68KB - Virtual size: 64KB

.TEX1 Size: 856KB - Virtual size: 853KB

.rsrc Size: 68KB - Virtual size: 64KB

.text
Size: 132KB - Virtual size: 128KB

.rdata
Size: 2.6MB - Virtual size: 2.6MB

.data
Size: 16KB - Virtual size: 45KB

.TEX0
Size: 68KB - Virtual size: 64KB

.TEX1
Size: 856KB - Virtual size: 853KB

.rsrc
Size: 68KB - Virtual size: 64KB