dbb0e4d46cf1e560df71d5635b1fe35aa53dddc649d70425277fd37287827db2[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

dbb0e4d46cf1e560df71d5635b1fe35aa53dddc649d70425277fd37287827db2.exe
Size

228KB
MD5

3e18c4a1eb7dadcdb41621ae19477699
SHA1

10b5052912572dc272bbca8fb640028a942e57a8
SHA256

dbb0e4d46cf1e560df71d5635b1fe35aa53dddc649d70425277fd37287827db2
SHA512

4f84f7cb1686d3257a432dae9ef72ef047c38b3b7b535c150a98529557e9af55051e97e052c960da37c6a72a22afabb9560b12bcfd41930f41c6874f1e9a8b0a
SSDEEP

3072:xffLid47iwVE7COfgI4FeODrD4L5VOx8plSTpfWl/B3:x3Lw4mH7C+WFemgO23ST4r

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dbb0e4d46cf1e560df71d5635b1fe35aa53dddc649d70425277fd37287827db2.exe

Files

dbb0e4d46cf1e560df71d5635b1fe35aa53dddc649d70425277fd37287827db2.exe
.exe windows:5 windows x86 arch:x86

8e85adfbee8db80e67a7189158f7aab1

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetConsoleAliasesLengthW
GetNumaProcessorNode
ReadConsoleA
WaitForSingleObject
InterlockedCompareExchange
FreeEnvironmentStringsA
GetModuleHandleW
FormatMessageA
SetCommState
GetEnvironmentStrings
GetVolumeInformationA
FatalAppExitW
CopyFileW
GetConsoleAliasExesLengthW
GetSystemTimeAdjustment
WriteConsoleOutputA
HeapDestroy
GetFileAttributesA
SetConsoleMode
GetBinaryTypeA
GetStdHandle
SetPriorityClass
GetProcAddress
GetLongPathNameA
LoadLibraryA
LocalAlloc
MoveFileA
QueryDosDeviceW
CreatePipe
GetModuleFileNameA
GetDefaultCommConfigA
GetModuleHandleA
GetCommTimeouts
FreeEnvironmentStringsW
BuildCommDCBA
WriteConsoleOutputAttribute
FindAtomW
GetLastError
GetComputerNameA
HeapFree
Sleep
ExitProcess
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapAlloc
VirtualAlloc
HeapReAlloc
GetCPInfo
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
SetLastError
GetCurrentThreadId
WriteFile
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
LCMapStringA
WideCharToMultiByte
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize

user32

GetFocus

advapi32

ObjectPrivilegeAuditAlarmW

Sections

.text
Size: 96KB - Virtual size: 95KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 991KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8e85adfbee8db80e67a7189158f7aab1

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

Sections

.text Size: 96KB - Virtual size: 95KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 6KB - Virtual size: 991KB

.tls Size: 1KB - Virtual size: 1KB

.rsrc Size: 116KB - Virtual size: 115KB

.text
Size: 96KB - Virtual size: 95KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 6KB - Virtual size: 991KB

.tls
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 116KB - Virtual size: 115KB