d8023c9ecadded482c5eb2c66e8e9090N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

d8023c9ecadded482c5eb2c66e8e9090N.exe
Size

737KB
MD5

d8023c9ecadded482c5eb2c66e8e9090
SHA1

1774c2c2c83b865e36c5f8f1536769fe25aeb819
SHA256

2a0745a501cd4d76d3a1680c65733cfaaf905524f2ca1e660231257f3f2eb85b
SHA512

c43b2b11235015b7a90b4f735d223598019d6b80a083faf47d73f251c51a0ef00a7c274b007493907dbf476fd0fdc46299ddf9abad3f8e98050aa086cc3e7bcf
SSDEEP

12288:zcBOz66cmApE3MVRPWX4GNscdB921r4JWJACmwrhSHVswKb3foE9A9T5piKw+9aH:zrz66cmApNRPWxNs298r3OCDIjG3gE9v

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d8023c9ecadded482c5eb2c66e8e9090N.exe

Files

d8023c9ecadded482c5eb2c66e8e9090N.exe
.exe windows:5 windows x64 arch:x64

774795e9bdf8234193e0867f62b2e443

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

d:\bld\cg\rel3.1\examples\Tools\bin\Windows_vc10_64_release\cginfo.pdb

Imports

kernel32

FormatMessageA
GetLastError
GetProcAddress
LoadLibraryA
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
ExitProcess
DecodePointer
GetCommandLineA
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
Sleep
HeapFree
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
FlsGetValue
FlsSetValue
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
TerminateProcess
GetCurrentProcess
RtlUnwindEx
LoadLibraryW
WriteFile
GetModuleFileNameW
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapSetInformation
GetVersion
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
HeapAlloc
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringW
MultiByteToWideChar
GetStringTypeW
HeapSize
CloseHandle
WriteConsoleW
SetFilePointer
SetStdHandle
CreateFileW

Sections

.text
Size: 85KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 44KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 568KB - Virtual size: 572KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

774795e9bdf8234193e0867f62b2e443

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

Sections

.text Size: 85KB - Virtual size: 84KB

.rdata Size: 26KB - Virtual size: 26KB

.data Size: 9KB - Virtual size: 44KB

.pdata Size: 2KB - Virtual size: 2KB

.rsrc Size: 44KB - Virtual size: 44KB

.reloc Size: 568KB - Virtual size: 572KB

.text
Size: 85KB - Virtual size: 84KB

.rdata
Size: 26KB - Virtual size: 26KB

.data
Size: 9KB - Virtual size: 44KB

.pdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 44KB - Virtual size: 44KB

.reloc
Size: 568KB - Virtual size: 572KB