f42c96419b2d60b119735e324adfb433[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

f42c96419b2d60b119735e324adfb433.exe
Size

213KB
MD5

f42c96419b2d60b119735e324adfb433
SHA1

602382bc894def4541e9bab78a5015b020d6cc7d
SHA256

79a57ce64cf1aadccd3f1b74686209416ef9c4cd45d4ac9b28ff9ea016ec8955
SHA512

3f2a5e9056065e0f6ecba81c4b3eb329c870946a0b0ffa94e7af8354fe781cb18db8ddb349fe8a5c653f4e6958322a041b57e31128b9b23817f825942942a3ac
SSDEEP

3072:HMcLOshz82bi5xTfsRzSF+5QSItt0rebP+fagSILKd:scLOshz82m6RzfItt08+faz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
f42c96419b2d60b119735e324adfb433.exe

Files

f42c96419b2d60b119735e324adfb433.exe
.exe windows:5 windows x86 arch:x86

c7735ee370f510f36c730e8b9e3421cf

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteConsoleOutputCharacterA
GetCommState
ReadConsoleA
InterlockedDecrement
QueryDosDeviceA
InterlockedCompareExchange
GetComputerNameW
GetTimeFormatA
ConnectNamedPipe
GetModuleHandleW
GetConsoleAliasesLengthA
FormatMessageA
SetCommState
LoadLibraryW
GetConsoleMode
CopyFileW
ReadConsoleOutputW
GetConsoleAliasExesLengthW
GetSystemTimeAdjustment
GetVersionExW
DeleteVolumeMountPointW
HeapDestroy
GetFileAttributesA
GetFileAttributesW
GetModuleFileNameW
GetBinaryTypeW
ReleaseSemaphore
GetLastError
GetProcAddress
GetLongPathNameA
SetStdHandle
SearchPathA
BuildCommDCBW
GetNumaHighestNodeNumber
ResetEvent
LoadLibraryA
LocalAlloc
SetCalendarInfoW
FindAtomA
GetDefaultCommConfigA
FreeEnvironmentStringsW
FatalAppExitA
GetShortPathNameW
GlobalReAlloc
GetVolumeInformationW
HeapAlloc
Sleep
ExitProcess
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
WriteFile
GetStdHandle
GetModuleFileNameA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
WideCharToMultiByte
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW

Sections

.text
Size: 82KB - Virtual size: 82KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 873KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.seyed
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.meru
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 113KB - Virtual size: 112KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c7735ee370f510f36c730e8b9e3421cf

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

Sections

.text Size: 82KB - Virtual size: 82KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 5KB - Virtual size: 873KB

.seyed Size: 1024B - Virtual size: 1024B

.tls Size: 1KB - Virtual size: 1KB

.meru Size: 1024B - Virtual size: 1024B

.rsrc Size: 113KB - Virtual size: 112KB

.text
Size: 82KB - Virtual size: 82KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 5KB - Virtual size: 873KB

.seyed
Size: 1024B - Virtual size: 1024B

.tls
Size: 1KB - Virtual size: 1KB

.meru
Size: 1024B - Virtual size: 1024B

.rsrc
Size: 113KB - Virtual size: 112KB