11f02de3d29b2b99c806437d10cc4bc1232cc64fba65521d53e47c44426ba219[.]exe

Resubmissions

18-10-2024 01:14

241018-bl13tazhlm 10

18-10-2024 01:11

241018-bj662szgkm 10

Sharing

Copy URL

Twitter E-mail

General

Target

11f02de3d29b2b99c806437d10cc4bc1232cc64fba65521d53e47c44426ba219.exe
Size

365KB
MD5

17a8a899cae67ea157318183d546d2fd
SHA1

2a001ba9fc5c56cecdf25f34f3f8558e3fdedc3f
SHA256

11f02de3d29b2b99c806437d10cc4bc1232cc64fba65521d53e47c44426ba219
SHA512

0de475c4d70b9e7948fde335ff3d40fa3cee4bb015085374e65883220868eb68e4a62a9329309a97c2b5405388eed22d6562244b8426a654a0625784ed21298c
SSDEEP

3072:UEyw/PL4u+MrhsgZbRZwVTslefk6GIfHT0qMubv6dhpaQdd41/x8dBRVlNN:JL4KXZbRZ2rfHT0qkdRXO6dR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
11f02de3d29b2b99c806437d10cc4bc1232cc64fba65521d53e47c44426ba219.exe

Files

11f02de3d29b2b99c806437d10cc4bc1232cc64fba65521d53e47c44426ba219.exe
.exe windows:5 windows x86 arch:x86

490298ec3d59994d2a12f54c75b4c247

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalCompact
CommConfigDialogA
CreateProcessW
ClearCommError
InterlockedDecrement
GetCurrentProcess
SetEnvironmentVariableW
CreateJobObjectW
SetComputerNameW
GetTimeFormatA
GetCurrencyFormatA
GetConsoleAliasExesW
EnumTimeFormatsW
GetEnvironmentStrings
GlobalAlloc
SetFileShortNameW
LoadLibraryW
GetLocaleInfoW
ReadConsoleInputA
GetCalendarInfoW
SetVolumeMountPointA
GetFileAttributesA
CreateSemaphoreA
GetModuleFileNameW
CreateActCtxA
GetShortPathNameA
TlsGetValue
InterlockedExchange
GetLogicalDriveStringsA
GetLastError
GetCurrentDirectoryW
SetLastError
GetProcAddress
CreateNamedPipeA
DefineDosDeviceA
GlobalFree
GetTempFileNameA
FindClose
LoadLibraryA
InterlockedExchangeAdd
CreateHardLinkW
GetNumberFormatW
OpenEventA
GetCommMask
GetModuleFileNameA
EnumDateFormatsA
GlobalUnWire
GetShortPathNameW
GetDiskFreeSpaceExA
GetVersionExA
SetFileAttributesW
LCMapStringW
VerifyVersionInfoW
GetComputerNameA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
HeapAlloc
GetStartupInfoW
GetModuleHandleW
Sleep
ExitProcess
WriteFile
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
HeapFree
VirtualFree
VirtualAlloc
HeapReAlloc
HeapCreate
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
GetCurrentThreadId
HeapSize
TerminateProcess
IsDebuggerPresent
SetHandleCount
GetFileType
GetStartupInfoA
SetFilePointer
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
ReadFile
SetStdHandle
WideCharToMultiByte
GetConsoleCP
GetConsoleMode
FlushFileBuffers
GetLocaleInfoA
GetModuleHandleA
RaiseException
GetStringTypeA
MultiByteToWideChar
GetStringTypeW
LCMapStringA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CloseHandle
CreateFileA

gdi32

GetCharWidth32A

Sections

.text
Size: 286KB - Virtual size: 285KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.xedawax
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.royer
Size: 512B - Virtual size: 214B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

490298ec3d59994d2a12f54c75b4c247

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

Sections

.text Size: 286KB - Virtual size: 285KB

.data Size: 24KB - Virtual size: 70KB

.xedawax Size: 1024B - Virtual size: 1024B

.royer Size: 512B - Virtual size: 214B

.rsrc Size: 47KB - Virtual size: 47KB

.reloc Size: 5KB - Virtual size: 5KB

.text
Size: 286KB - Virtual size: 285KB

.data
Size: 24KB - Virtual size: 70KB

.xedawax
Size: 1024B - Virtual size: 1024B

.royer
Size: 512B - Virtual size: 214B

.rsrc
Size: 47KB - Virtual size: 47KB

.reloc
Size: 5KB - Virtual size: 5KB