4eb8cb9f290360ba48850d6ad31379a0[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

4eb8cb9f290360ba48850d6ad31379a0.exe
Size

418KB
MD5

4eb8cb9f290360ba48850d6ad31379a0
SHA1

1629f201d74dea85d4c6bbbf70c8b22e07b1c560
SHA256

c2647db7431c0ad5d159b8630e17a5f97a3ed537671d61e1a55634d10b59fb9c
SHA512

0ae33b53cdc4c0caa72905abd9192076f1557441bd699673ce56d0fa20fa5e6cb8bdaedb16b5f7c3e125856d446baf96c4c2457552154ca4d91f178eac65dbd2
SSDEEP

6144:cLQpGLEE6iI23RyVyYGGtYieEjOuZb14FLoEhC9TEDv3yLAc:cckLEE65232yYGEYn6Zb145NIWz3

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
4eb8cb9f290360ba48850d6ad31379a0.exe

Files

4eb8cb9f290360ba48850d6ad31379a0.exe
.exe windows:5 windows x86 arch:x86

767a7d2b1ae571d69dfa0265482764e5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetLogicalDriveStringsW
SetEnvironmentVariableW
SetComputerNameW
GetComputerNameW
GetTimeFormatA
CreateNamedPipeW
GetCurrencyFormatA
GetConsoleAliasExesW
EnumTimeFormatsA
TlsSetValue
GetEnvironmentStrings
LoadLibraryW
GetLocaleInfoW
_hread
GetCalendarInfoW
SetVolumeMountPointA
CreateSemaphoreA
GetFileAttributesW
CreateActCtxA
CreateJobObjectA
VerifyVersionInfoW
InterlockedExchange
GetLastError
GetCurrentDirectoryW
GetProcAddress
GetCurrentProcess
DefineDosDeviceA
GlobalFree
FindClose
LoadLibraryA
LocalAlloc
CreateHardLinkW
GetNumberFormatW
GetCommMask
FoldStringW
SetEnvironmentVariableA
GetModuleFileNameA
EnumDateFormatsA
GlobalUnWire
WaitForDebugEvent
OpenEventW
GetShortPathNameW
SetFileShortNameA
GetDiskFreeSpaceExA
GetVersionExA
ReadConsoleInputW
GetTempPathA
LocalFree
SetFileAttributesW
LCMapStringW
CommConfigDialogW
InterlockedDecrement
ClearCommError
EnumSystemCodePagesW
CreateProcessW
CloseHandle
MultiByteToWideChar
HeapFree
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapReAlloc
HeapAlloc
GetStartupInfoW
RaiseException
RtlUnwind
TerminateProcess
IsDebuggerPresent
GetCPInfo
InterlockedIncrement
GetACP
GetOEMCP
IsValidCodePage
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsFree
SetLastError
GetCurrentThreadId
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
Sleep
HeapSize
ExitProcess
WriteFile
GetStdHandle
SetFilePointer
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LCMapStringA
WideCharToMultiByte
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
InitializeCriticalSectionAndSpinCount
ReadFile
SetStdHandle
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetModuleHandleA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA

gdi32

CreateDCA
GetCharWidth32A
GetCharWidthI

shell32

FindExecutableA

Sections

.text
Size: 295KB - Virtual size: 294KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.vevuroj
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.kafi
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 88KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

767a7d2b1ae571d69dfa0265482764e5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

shell32

Sections

.text Size: 295KB - Virtual size: 294KB

.data Size: 24KB - Virtual size: 70KB

.vevuroj Size: 1024B - Virtual size: 1024B

.kafi Size: 512B - Virtual size: 214B

.rsrc Size: 88KB - Virtual size: 88KB

.reloc Size: 7KB - Virtual size: 7KB

.text
Size: 295KB - Virtual size: 294KB

.data
Size: 24KB - Virtual size: 70KB

.vevuroj
Size: 1024B - Virtual size: 1024B

.kafi
Size: 512B - Virtual size: 214B

.rsrc
Size: 88KB - Virtual size: 88KB

.reloc
Size: 7KB - Virtual size: 7KB