af910f82361b7631046dacc07ee17200N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

af910f82361b7631046dacc07ee17200N.exe
Size

204KB
MD5

af910f82361b7631046dacc07ee17200
SHA1

f20acc2592e58a9553e08d8b63036074491db9c0
SHA256

1ec991c7732eecc87d3e5211484dfdc7267eec15a7f0c5ce3fd4c7350c96b791
SHA512

e1adccbb0dd3633f2990332e603cf1237a5075b69d29d629a14d85e1ff8e29ff55c1fdcf777a61b10dbf9d26d1f71883ee77485e05763064a8c8e88c8927a18d
SSDEEP

3072:WdGaTPrrIGvvyy8dHSi+OcGMrOpOVKdOyMbkrWRdg+E2uEPczTinJhV+p9GEVFU/:MGazIc6TVBMrOpzeJEsuirSGEMpgE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
af910f82361b7631046dacc07ee17200N.exe

Files

af910f82361b7631046dacc07ee17200N.exe
.exe windows:4 windows x86 arch:x86

e12f72e7fe59535708698b4de0340a02

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetOEMCP
GetWindowsDirectoryW
SetErrorMode
CreateFileMappingA
GetComputerNameA
QueryPerformanceCounter
GetModuleFileNameA
SetPriorityClass
lstrcpyn
GetFileType
InitializeCriticalSection
GetLogicalDrives
GetProcessHeap
GetNumberFormatA
LocalAlloc
CreateEventW
GetTimeFormatA
GetVersionExW
GetProcessHeaps
CopyFileExW
GetHandleInformation
GlobalGetAtomNameA
FlushFileBuffers
CreateNamedPipeW
CopyFileA
GetCurrentDirectoryA
OpenWaitableTimerW
GetCommandLineW
lstrlen
CopyFileExA
FreeLibrary
SetComputerNameW
GetProcAddress
EnumCalendarInfoA
FindAtomA
GetModuleHandleW
CreatePipe
OpenProcess
CreateMailslotW
BeginUpdateResourceW
IsDebuggerPresent
GetVersionExA
GetEnvironmentStringsW
GetModuleHandleA

user32

GetSysColorBrush
RegisterClassExW
GetWindowLongA
SetMenu
ArrangeIconicWindows
DialogBoxParamW
LoadIconW
CreateIcon
CharNextA
GetMessageW
LoadImageA
TrackPopupMenuEx
mouse_event
GetParent
OpenClipboard
LoadIconW
GetIconInfo
CheckRadioButton
GetIconInfo
GetWindowTextW
OffsetRect
SetWindowPos
GetMenuStringW
CopyRect
EnumWindows
SetFocus
SetDlgItemInt
GetSystemMetrics
GetWindowTextLengthA
GetCapture
GetMenuItemCount
EnumDesktopsA
DestroyCursor
GetClassInfoExA
UpdateLayeredWindow
MonitorFromWindow
FrameRect
EnumChildWindows
FindWindowA
LoadBitmapW
RegisterClassExA
CloseWindow
IsMenu
MessageBeep
AdjustWindowRect
EnumDesktopWindows
DeleteMenu
MonitorFromRect
IsWindow

gdi32

ExtFloodFill
ExtEscape
EqualRgn
CopyEnhMetaFileW
SetPixelFormat
ResetDCW
CreatePolygonRgn
CreateDCA
SetTextJustification
GetKerningPairsA
GetDCPenColor
SetPaletteEntries
AbortPath
CreatePolyPolygonRgn
GetBkMode

advapi32

RegOpenKeyA
RegQueryValueW
RegReplaceKeyW
RegCreateKeyExW
RegRestoreKeyA

oleaut32

CreateDispTypeInfo

opengl32

glColor3iv

winspool.drv

SetPortW
AddPortExW
ScheduleJob
PrinterProperties
XcvDataW
FindNextPrinterChangeNotification
EnumPrintProcessorDatatypesW
SetPortA
ResetPrinterW

oledlg

OleUIInsertObjectA

wsock32

WSARecvEx
WSASetBlockingHook
shutdown

Sections

.text
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.oqngCF
Size: 1KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.N
Size: 4KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.LUV
Size: 1024B - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.GOTYM
Size: 2KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.AGbvFQ
Size: 2KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kkPQAu
Size: 512B - Virtual size: 253KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 168KB - Virtual size: 168KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e12f72e7fe59535708698b4de0340a02

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

oleaut32

opengl32

winspool.drv

oledlg

wsock32

Sections

.text Size: 12KB - Virtual size: 12KB

.oqngCF Size: 1KB - Virtual size: 19KB

.N Size: 4KB - Virtual size: 15KB

.LUV Size: 1024B - Virtual size: 31KB

.GOTYM Size: 2KB - Virtual size: 21KB

.data Size: 10KB - Virtual size: 9KB

.AGbvFQ Size: 2KB - Virtual size: 9KB

.kkPQAu Size: 512B - Virtual size: 253KB

.rsrc Size: 168KB - Virtual size: 168KB

.reloc Size: 1KB - Virtual size: 1KB

.text
Size: 12KB - Virtual size: 12KB

.oqngCF
Size: 1KB - Virtual size: 19KB

.N
Size: 4KB - Virtual size: 15KB

.LUV
Size: 1024B - Virtual size: 31KB

.GOTYM
Size: 2KB - Virtual size: 21KB

.data
Size: 10KB - Virtual size: 9KB

.AGbvFQ
Size: 2KB - Virtual size: 9KB

.kkPQAu
Size: 512B - Virtual size: 253KB

.rsrc
Size: 168KB - Virtual size: 168KB

.reloc
Size: 1KB - Virtual size: 1KB