cf670b503c8811b8232a4e8f83ac7470N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

cf670b503c8811b8232a4e8f83ac7470N.exe
Size

68KB
MD5

cf670b503c8811b8232a4e8f83ac7470
SHA1

4360ff9098962149f4fc5988c666bd1dde3979b8
SHA256

96adfa46e776e82c5ba009f5425d44bef6d884376f344a6ce941a2f02e526cde
SHA512

303543a4f884cb1f87fab24dcfa56484e48f28a19bee98deb0fbf6f6ebdadbe044a1c7fca637cee6e9f1e6626c9900eb8b94e2b6ac971d8913216e1d023e95a1
SSDEEP

768:fb9lE9x/tHCTn7BWJ2uBTbnCzwiVD39VY3VkoYF9l6JMCAPK9Zp7l:fhyN5+n7BI2uTwhy3VkjF9lR67l

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
cf670b503c8811b8232a4e8f83ac7470N.exe

Files

cf670b503c8811b8232a4e8f83ac7470N.exe
.dll windows:4 windows x86 arch:x86

7e41369cc90935168513a5d0804b96d3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

GetCurrentProcess
MultiByteToWideChar
HeapFree
HeapReAlloc
HeapAlloc
GetCommandLineA
GetVersion
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetCPInfo
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetVersionExA
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
ExitProcess
TerminateProcess
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
DisableThreadLibraryCalls
WriteFile
LCMapStringA
LCMapStringW
GetLastError
FlushFileBuffers
RtlUnwind
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
GetLocaleInfoW
SetFilePointer
CloseHandle
SetStdHandle

Exports

Exports

idn_free
idna_to_ascii_16z
idna_to_ascii_4i
idna_to_ascii_4z
idna_to_ascii_8z
idna_to_ascii_lz
idna_to_unicode_44i
idna_to_unicode_4z4z
idna_to_unicode_8z4z
idna_to_unicode_8z8z
idna_to_unicode_8zlz
idna_to_unicode_lz16z
idna_to_unicode_lzlz
punycode_decode
punycode_encode
stringprep
stringprep_4i
stringprep_4zi
stringprep_check_version
stringprep_convert
stringprep_locale_charset
stringprep_locale_to_utf8
stringprep_profile
stringprep_ucs4_nfkc_normalize
stringprep_ucs4_to_utf16
stringprep_ucs4_to_utf8
stringprep_unichar_to_utf8
stringprep_utf16_to_ucs4
stringprep_utf8_nfkc_normalize
stringprep_utf8_to_locale
stringprep_utf8_to_ucs4
stringprep_utf8_to_unichar

Sections

.text
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 936B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7e41369cc90935168513a5d0804b96d3

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 34KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 8KB - Virtual size: 10KB

.rsrc Size: 4KB - Virtual size: 936B

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 36KB - Virtual size: 34KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 8KB - Virtual size: 10KB

.rsrc
Size: 4KB - Virtual size: 936B

.reloc
Size: 4KB - Virtual size: 3KB