460e65d0c91d52361039a15e8aa51eb0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

460e65d0c91d52361039a15e8aa51eb0N.exe
Size

41KB
MD5

460e65d0c91d52361039a15e8aa51eb0
SHA1

4026a650b3bc63b083e371f21a539a308c08122e
SHA256

263371d6662ad5732d70db486a9ebf04cd917636aa69be999459e43f0d5d648d
SHA512

09eae35517224d54484e589e677dae9557a11435be24788b101cb3f6c206d26c6660cbc72a57e3c7d4fbc8f5f810cd563bf0a53872b237509ee6a7d3ad8e3970
SSDEEP

768:aQYwUn1M0DcQD9C2j5xQ/RLtypysP42dKOSQYPEBvM73tzC9iugw5/W0:3YwUn1RcCFxuLtbOSQIEBv63MgXE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
460e65d0c91d52361039a15e8aa51eb0N.exe

Files

460e65d0c91d52361039a15e8aa51eb0N.exe
.dll windows:4 windows x86 arch:x86

1ccb08676c163835341c54541bd441e0

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

StrStrA
StrDupA
StrStrIA
StrChrA

kernel32

CreateToolhelp32Snapshot
lstrcpyA
lstrlenA
ExpandEnvironmentStringsA
GetFileAttributesExA
WriteFile
ReadFile
CreateFileA
GetModuleFileNameA
DisableThreadLibraryCalls
ExitProcess
Sleep
GetTickCount
GetLastError
CreateThread
WaitForSingleObject
OpenMutexA
CreateMutexA
GetCurrentThread
Process32First
MoveFileA
lstrcatA
CreateProcessA
MultiByteToWideChar
WideCharToMultiByte
CreateDirectoryA
GetEnvironmentVariableA
FindClose
FindNextFileA
FindFirstFileA
DeleteFileA
GetFileAttributesA
ReleaseMutex
GetTempPathA
lstrcmpiA
LocalFree
GetComputerNameA
GetSystemInfo
GetVolumeInformationA
lstrcpynA
HeapFree
GetProcessHeap
HeapAlloc
OpenProcess
TerminateProcess
CloseHandle
Process32Next
SetFilePointer

advapi32

RegSetValueExA
OpenThreadToken
RegQueryValueExA
ImpersonateSelf
RegOpenKeyExA
RegCloseKey
RegEnumValueA
LookupPrivilegeValueA
AdjustTokenPrivileges

shell32

ShellExecuteExA
ShellExecuteA

user32

wsprintfA
GetCursorPos
GetSystemMetrics

wininet

InternetGetConnectedState
FindCloseUrlCache
FindNextUrlCacheEntryA
InternetReadFile
InternetOpenUrlA
DeleteUrlCacheEntry
InternetOpenA
InternetCloseHandle
FindFirstUrlCacheEntryA

netapi32

NetScheduleJobEnum
NetScheduleJobDel
NetApiBufferFree
NetScheduleJobAdd

msvcrt

_strdup
_CxxThrowException
strncpy
??1type_info@@UAE@XZ
??3@YAXPAX@Z
??2@YAPAXI@Z
atoi
realloc
strcpy
strcat
free
_snprintf
sprintf
strstr
wcslen
srand
?_set_se_translator@@YAP6AXIPAU_EXCEPTION_POINTERS@@@ZP6AXI0@Z@Z
_onexit
__dllonexit
_adjust_fdiv
printf
malloc
rand
_except_handler3
strcmp
strlen
_initterm

ole32

CoInitialize
CoCreateInstance

oleaut32

SysFreeString
SysAllocStringLen
VariantClear
VariantChangeType
SysStringLen
SysAllocString

Exports

Exports

abcgh
addNumbers

Sections

.text
Size: 30KB - Virtual size: 32KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 3KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 2KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1ccb08676c163835341c54541bd441e0

Headers

File Characteristics

Imports

shlwapi

kernel32

advapi32

shell32

user32

wininet

netapi32

msvcrt

ole32

oleaut32

Exports

Exports

Sections

.text Size: 30KB - Virtual size: 32KB

.rdata Size: 4KB - Virtual size: 4KB

.data Size: 3KB - Virtual size: 20KB

.reloc Size: 2KB - Virtual size: 4KB

.text
Size: 30KB - Virtual size: 32KB

.rdata
Size: 4KB - Virtual size: 4KB

.data
Size: 3KB - Virtual size: 20KB

.reloc
Size: 2KB - Virtual size: 4KB