be6e83f8cf4f5af2c082e89f755b4390N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

be6e83f8cf4f5af2c082e89f755b4390N.exe
Size

62KB
MD5

be6e83f8cf4f5af2c082e89f755b4390
SHA1

ac7cfe3a0d90efa41e9398bbba83709229e230d3
SHA256

b974845c50195d2017adcc12c38804fb1f2051df9b7a15beff2b7223941944e5
SHA512

677eea2a996d81ca6e53a9f2f59a8ea171e3802d43866449622b7751d6d6023095fb02e6fdc450314359136006393abc68a00ffa0196706bfcfe770900b4532f
SSDEEP

768:zFlvbHnRcDBE1IdAzQ4TvD1eP4RxYTUeFemh48RbT1/PVbN23AQ:hljRc2Gl4TLAPPTxwmOOVJ8B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
be6e83f8cf4f5af2c082e89f755b4390N.exe

Files

be6e83f8cf4f5af2c082e89f755b4390N.exe
.dll windows:6 windows x86 arch:x86

8494b8cd0d3a160889125b57308e96da

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\vcpkg\buildtrees\bzip2\x86-windows-rel\bz2.pdb

Imports

vcruntime140

__std_type_info_destroy_list
_except_handler4_common
memset

api-ms-win-crt-stdio-l1-1-0

ungetc
fwrite
fread
fopen
fgetc
fflush
ferror
fclose
__acrt_iob_func
_setmode
_fileno
__stdio_common_vfprintf

api-ms-win-crt-heap-l1-1-0

free
malloc

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_initialize_narrow_environment
_cexit
_configure_narrow_argv
_seh_filter_dll
_initterm_e
exit
_execute_onexit_table
_initterm

api-ms-win-crt-string-l1-1-0

isdigit

api-ms-win-crt-math-l1-1-0

_fdopen

kernel32

DisableThreadLibraryCalls
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter

Exports

Exports

BZ2_bzBuffToBuffCompress
BZ2_bzBuffToBuffDecompress
BZ2_bzCompress
BZ2_bzCompressEnd
BZ2_bzCompressInit
BZ2_bzDecompress
BZ2_bzDecompressEnd
BZ2_bzDecompressInit
BZ2_bzRead
BZ2_bzReadClose
BZ2_bzReadGetUnused
BZ2_bzReadOpen
BZ2_bzWrite
BZ2_bzWriteClose
BZ2_bzWriteClose64
BZ2_bzWriteOpen
BZ2_bzclose
BZ2_bzdopen
BZ2_bzerror
BZ2_bzflush
BZ2_bzlibVersion
BZ2_bzopen
BZ2_bzread
BZ2_bzwrite

Sections

.text
Size: 50KB - Virtual size: 50KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8494b8cd0d3a160889125b57308e96da

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-math-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 50KB - Virtual size: 50KB

.rdata Size: 6KB - Virtual size: 5KB

.data Size: 3KB - Virtual size: 4KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 1024B - Virtual size: 1024B

.text
Size: 50KB - Virtual size: 50KB

.rdata
Size: 6KB - Virtual size: 5KB

.data
Size: 3KB - Virtual size: 4KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 1024B - Virtual size: 1024B