d89ab5d546667e36ba589f2cdb83bb50N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

d89ab5d546667e36ba589f2cdb83bb50N.exe
Size

258KB
MD5

d89ab5d546667e36ba589f2cdb83bb50
SHA1

57932bef125883fdaffe3bb43ecf674bee5e4aa9
SHA256

18faa2cfda62460fe43707002af1e20e44612523298dc314cce356bdad6a828f
SHA512

fb816919b366de6fe0a8a918a55cbaae847665a069a81a046e30a3891b6e927db18ff13ef8a1115ca651e1caaa6cbd148e248e973ad05dce3d6cbd2d55721b65
SSDEEP

6144:RUMbdFnqarKpBZvDF0NUiaGTUemiS12oJuS+I2:eMFnJKRvDFUUZQO2oES+I2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d89ab5d546667e36ba589f2cdb83bb50N.exe

Files

d89ab5d546667e36ba589f2cdb83bb50N.exe
.exe windows:4 windows x86 arch:x86

af03bbd9a6c51f9a2745b3e8414975d6

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FreeLibrary
GetModuleHandleW
LoadLibraryW
GetModuleFileNameW
SetEvent
Sleep
GetLastError
GetExitCodeThread
GetTempPathW
WaitForSingleObject
GetStartupInfoW
SetUnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
IsDebuggerPresent
GetVersionExW
LocalFree
LocalAlloc
MulDiv
GetVersion
GetProcAddress
GetModuleHandleA

user32

GetActiveWindow
GetIconInfo
GetFocus
IsWindow
CopyRect
LoadImageW
InvalidateRect
DestroyIcon
wsprintfW
LoadIconW
EnableWindow
IsIconic
PostMessageW
GetSystemMetrics
MessageBoxW
SendMessageW
GetDlgItemTextW
CharLowerW
RegisterClassExA
wsprintfA
GetCaretPos
DialogBoxIndirectParamA
MonitorFromWindow
MonitorFromPoint
SetWindowPos
EnableMenuItem
AppendMenuW
InsertMenuItemW
PeekMessageA
CharPrevW
FindWindowA
CreateDesktopW
WaitForInputIdle
GetMenu
GetMessageW
AdjustWindowRect
GetSysColorBrush
GetClassInfoW
LoadIconA
SetCapture
OpenClipboard
GetMenuItemCount
SetCursor
RegisterWindowMessageW
MessageBoxIndirectA
LoadImageA
SetFocus
SetParent
LoadMenuW
CharUpperW
GetDlgItemInt
FindWindowW
MonitorFromRect
IsChild
MessageBoxIndirectW
CopyIcon
GetMenuItemInfoW
CheckMenuItem
LoadCursorW
ShowWindow
CreateWindowExA
SetDlgItemInt
WinHelpA

gdi32

CreatePatternBrush
DeleteObject
CreateCompatibleDC
CreatePen
CreateFontIndirectW
CreatePalette
CreateSolidBrush
GetStockObject
CreateColorSpaceA
CreateHatchBrush
CreateFontW
CreateDIBPatternBrush
CreateBrushIndirect
SetEnhMetaFileBits
ExtCreateRegion
UpdateICMRegKeyA
CreateEllipticRgn

advapi32

RegOpenKeyExW
RegCloseKey
RegQueryValueExW

comctl32

ord17

urlmon

IsValidURL
URLDownloadToFileW

winipsec

GetQMPolicy
DeleteMMPolicy

avifil32

EditStreamClone
AVIStreamBeginStreaming
EditStreamPaste
AVIStreamGetFrameClose
AVIStreamInfo
AVIFileInfoW
AVIGetFromClipboard
AVISaveW
AVIStreamWrite
AVIStreamFindSample
EditStreamSetName
AVIFileOpenW

Sections

CODE
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 13KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 43KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.hs
Size: 109KB - Virtual size: 119KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 275KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.hBd
Size: 109KB - Virtual size: 164KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af03bbd9a6c51f9a2745b3e8414975d6

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

comctl32

urlmon

winipsec

avifil32

Sections

CODE Size: 9KB - Virtual size: 8KB

.edata Size: 13KB - Virtual size: 16KB

.rdata Size: 3KB - Virtual size: 43KB

.hs Size: 109KB - Virtual size: 119KB

.data Size: 5KB - Virtual size: 275KB

.hBd Size: 109KB - Virtual size: 164KB

.rsrc Size: 8KB - Virtual size: 8KB

CODE
Size: 9KB - Virtual size: 8KB

.edata
Size: 13KB - Virtual size: 16KB

.rdata
Size: 3KB - Virtual size: 43KB

.hs
Size: 109KB - Virtual size: 119KB

.data
Size: 5KB - Virtual size: 275KB

.hBd
Size: 109KB - Virtual size: 164KB

.rsrc
Size: 8KB - Virtual size: 8KB