d3744dbfc3599501614cb1701546d0f0d918fad76c383498267d53695b1f43b3N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

d3744dbfc3599501614cb1701546d0f0d918fad76c383498267d53695b1f43b3N.exe
Size

112KB
MD5

f0e474bac640cc40ac40ea8cff510eb0
SHA1

db1b9e106a3c7805633475f7e75f7f1c1c6a6632
SHA256

d3744dbfc3599501614cb1701546d0f0d918fad76c383498267d53695b1f43b3
SHA512

e3d4111f5f2bc0f878c6f2f2a6391a83d986c4d9e7b19601180c6fcc690b1f8f46a8d51a51a019932b15a31d8e40766c6ca1172adcfc9e5ca1e1ad4a12d50cf3
SSDEEP

1536:HTNpDjcRE9yK8jJvMfXNIRLwXh3q/9Taf3TZskWThqykV/iGAAgyyIr:HTnfQEqZMKt0hQBeTZskWThqLVa9yy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
d3744dbfc3599501614cb1701546d0f0d918fad76c383498267d53695b1f43b3N.exe

Files

d3744dbfc3599501614cb1701546d0f0d918fad76c383498267d53695b1f43b3N.exe
.exe windows:5 windows x86 arch:x86

71ae15920bbeaeb1f5b9a4af2c5f163b

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

I:\wotr\iuAwYptp\qfMAeowG\myxNjh.pdb

Imports

user32

GetActiveWindow
ShowScrollBar
GetKeyboardLayoutList
ReleaseDC
CreateDialogIndirectParamW
DispatchMessageA
CharToOemW
GetWindowLongW
RegisterHotKey
GetMonitorInfoW
GetPropW
EnumChildWindows
IsCharUpperA
DialogBoxParamA

shlwapi

StrCmpNW

comctl32

CreatePropertySheetPageA
ImageList_GetIconSize

kernel32

lstrlenW
CreateFileMappingW
CreateNamedPipeA
GetFullPathNameW
GetAtomNameW
FindResourceExA
GetProcAddress
LoadLibraryW
lstrcmpiW
HeapLock
SetThreadPriority
FindFirstChangeNotificationW
FormatMessageW

gdi32

CreateRoundRectRgn
CreateFontIndirectW
CreateDIBSection
DeleteObject
GetROP2
GetMapMode
GetBkMode
GetRgnBox

Exports

Exports

?zeyxtIwgjosWzfg@@YGDPAGPAH@Z

Sections

.text
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.idata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.edata
Size: 512B - Virtual size: 97B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.temp
Size: 75KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.crt
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

71ae15920bbeaeb1f5b9a4af2c5f163b

Headers

File Characteristics

PDB Paths

Imports

user32

shlwapi

comctl32

kernel32

gdi32

Exports

Exports

Sections

.text Size: 18KB - Virtual size: 17KB

.idata Size: 1KB - Virtual size: 1KB

.edata Size: 512B - Virtual size: 97B

.temp Size: 75KB - Virtual size: 75KB

.data Size: 5KB - Virtual size: 17KB

.crt Size: 4KB - Virtual size: 4KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 18KB - Virtual size: 17KB

.idata
Size: 1KB - Virtual size: 1KB

.edata
Size: 512B - Virtual size: 97B

.temp
Size: 75KB - Virtual size: 75KB

.data
Size: 5KB - Virtual size: 17KB

.crt
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 2KB - Virtual size: 2KB