cfbf4dde5122b09c705a04ec1513fbe0N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

cfbf4dde5122b09c705a04ec1513fbe0N.exe
Size

1.6MB
MD5

cfbf4dde5122b09c705a04ec1513fbe0
SHA1

36dce3a9a4865d0c068cd8f0cbd62d0d298e22f2
SHA256

cf523e7fdf7ede7a2fb025f5cd9310d6a9416eaa519506eca2f831af5411e907
SHA512

11a6852aa2365c2d5a997589adb9a08406eb1ecff4b570886c138ea74b3fa71f1544737018357ea202edc1eb9152f5e6fb3d92a4a3403ecf52148176934e3b23
SSDEEP

24576:o22iw9ExmvSsEvNNmsOUkGHrb3UyzBEQXLn6ea+ewtwma25Xw0hZjjmp4vmExSt0:AAUGHZECejUha42M6TEbpQBx

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cfbf4dde5122b09c705a04ec1513fbe0N.exe

Files

cfbf4dde5122b09c705a04ec1513fbe0N.exe
.dll regsvr32 windows:4 windows x86 arch:x86

0d9c74042964084bf367c5e5c766e9e4

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetProcAddress
LoadLibraryA
MultiByteToWideChar
InterlockedIncrement
InterlockedDecrement
DeleteCriticalSection
GetCurrentThreadId
GetLocaleInfoW
GetDriveTypeA
SetEndOfFile
CreateFileA
GetCurrentDirectoryW
CreateFileW
SetStdHandle
GetOEMCP
GetACP
IsBadCodePtr
IsBadReadPtr
GetStringTypeW
GetStringTypeA
WideCharToMultiByte
LoadLibraryW
EnterCriticalSection
Sleep
InitializeCriticalSection
InterlockedExchange
LeaveCriticalSection
RtlUnwind
GetCommandLineA
GetVersion
GetTimeZoneInformation
GetSystemTime
GetLocalTime
RaiseException
HeapFree
GetLastError
CreateThread
TlsSetValue
ExitThread
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDriveTypeW
FindFirstFileW
HeapAlloc
HeapReAlloc
ExitProcess
LCMapStringA
LCMapStringW
GetCPInfo
CompareStringA
CompareStringW
TlsAlloc
TlsFree
SetLastError
TlsGetValue
TerminateProcess
GetCurrentProcess
HeapSize
GetModuleHandleA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
WriteFile
SetUnhandledExceptionFilter
VirtualAlloc
IsBadWritePtr
CloseHandle
SetFilePointer
FlushFileBuffers
UnhandledExceptionFilter
GetFullPathNameW
GetCurrentDirectoryA
ReadFile
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
SetEnvironmentVariableA

ole32

CoUnmarshalInterface
CoMarshalInterThreadInterfaceInStream

oleaut32

SysFreeString
SysAllocString
SysStringLen
SysStringByteLen
VariantClear

user32

ShowWindow
IsWindow

urlmon

UrlMkSetSessionOption

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 120KB - Virtual size: 116KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 52KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 108KB - Virtual size: 105KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0d9c74042964084bf367c5e5c766e9e4

Headers

File Characteristics

Imports

kernel32

ole32

oleaut32

user32

urlmon

Exports

Exports

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 120KB - Virtual size: 116KB

.data Size: 24KB - Virtual size: 52KB

.reloc Size: 108KB - Virtual size: 105KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 120KB - Virtual size: 116KB

.data
Size: 24KB - Virtual size: 52KB

.reloc
Size: 108KB - Virtual size: 105KB