260f4bd4d9f08e29026f540d60aa1d54f1d1b8965141dae3defa112b688651dfN[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

260f4bd4d9f08e29026f540d60aa1d54f1d1b8965141dae3defa112b688651dfN.exe
Size

2.8MB
MD5

cc98eb6a147cf80ce8eded7842d4eb90
SHA1

7ef3a84fea0deee9705da930483a36a8a0c9ed31
SHA256

260f4bd4d9f08e29026f540d60aa1d54f1d1b8965141dae3defa112b688651df
SHA512

5881d2112725bdd6ec996c2812e093a604252bb1a31428f58bf8aa5946f6cade72a5111b08ac10a29f8a7e18b1fe7977130fd2aa215d2efe7a7068dffb931290
SSDEEP

49152:0ljHdG8GcuzCO4XKaYRwXUtyqcM8pdIcA69j7GUsRTd8sxjOPJnUl68QFy13Tgbw:UjxDuzCOQg+9j7YdOPJ8xQxw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
260f4bd4d9f08e29026f540d60aa1d54f1d1b8965141dae3defa112b688651dfN.exe

Files

260f4bd4d9f08e29026f540d60aa1d54f1d1b8965141dae3defa112b688651dfN.exe
.exe windows:5 windows x86 arch:x86

89dad3e482abeef1656b43d39da96330

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winhttp

WinHttpGetIEProxyConfigForCurrentUser

comctl32

ord17

ws2_32

getaddrinfo
select
__WSAFDIsSet
ioctlsocket
listen
htonl
accept
WSACleanup
WSAStartup
WSAIoctl
WSASetLastError
freeaddrinfo
setsockopt
ntohs
htons
getsockopt
getsockname
getpeername
connect
bind
WSAGetLastError
send
recv
closesocket
socket

crypt32

CertOpenStore
CertFreeCertificateChain
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringA
CertFindExtension
CertAddCertificateContextToStore
CryptDecodeObjectEx
PFXImportCertStore
CryptStringToBinaryA
CertFreeCertificateContext
CertFindCertificateInStore
CertEnumCertificatesInStore
CertCloseStore

kernel32

ReadConsoleW
GetConsoleCP
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlushFileBuffers
SetFilePointerEx
SetStdHandle
GetProcessHeap
GetTimeZoneInformation
FindFirstFileExA
LocalFree
GetLastError
SetEvent
OpenEventW
GetCommandLineW
GlobalFree
LockResource
LoadResource
SizeofResource
FindResourceW
CloseHandle
CreateMutexA
GetExitCodeProcess
WaitForSingleObject
CreateProcessW
GetProcAddress
GetCurrentProcess
GetCurrentProcessId
GetNativeSystemInfo
GetModuleFileNameW
GetModuleHandleW
GetVersionExW
GetFileSizeEx
DeviceIoControl
GetOEMCP
GetTempPathW
SetCurrentDirectoryW
GetCurrentDirectoryW
FindNextFileA
CreateDirectoryW
RemoveDirectoryW
GetFullPathNameW
CreateFileW
GetFileAttributesW
GetFileAttributesExW
DeleteFileW
FindFirstFileW
FindNextFileW
MoveFileExW
FreeLibrary
LoadLibraryExW
VirtualAlloc
VirtualFree
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SleepEx
VerSetConditionMask
QueryPerformanceFrequency
GetSystemDirectoryA
GetModuleHandleA
LoadLibraryA
VerifyVersionInfoA
QueryPerformanceCounter
GetTickCount
Sleep
MultiByteToWideChar
WideCharToMultiByte
MoveFileExA
GetEnvironmentVariableA
SetLastError
FormatMessageA
CreateFileA
ReadFile
GetACP
WriteFile
GetStdHandle
GetModuleFileNameA
ExitProcess
HeapReAlloc
HeapFree
HeapAlloc
GetModuleHandleExW
ExitThread
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
PeekNamedPipe
GetFileType
GetDriveTypeW
RtlUnwind
LoadLibraryW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
WriteConsoleW
GetDiskFreeSpaceExW
IsValidCodePage
HeapSize
FindClose
SetEndOfFile
FormatMessageW
TryEnterCriticalSection
GetCurrentThreadId
EncodePointer
DecodePointer
RaiseException
QueueUserWorkItem
IsProcessorFeaturePresent
DuplicateHandle
WaitForSingleObjectEx
GetCurrentThread
GetExitCodeThread
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetStringTypeW
GetCPInfo
CompareStringW
LCMapStringW
GetLocaleInfoW
ResetEvent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
SwitchToThread
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
VirtualProtect
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
GetConsoleMode

user32

MessageBoxW
LoadIconW
SetWindowLongW
GetWindowLongW
SetWindowTextW
EndDialog
CreateDialogParamW
ShowWindow
DestroyWindow
SendMessageW
DispatchMessageW
TranslateMessage
GetMessageW
GetDlgItem

shell32

SHGetFolderPathW
CommandLineToArgvW

advapi32

CryptDestroyHash
CryptHashData
CryptCreateHash
CryptGenRandom
CryptGetHashParam
CryptReleaseContext
CryptAcquireContextA
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SystemFunction036

Sections

.text
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 259KB - Virtual size: 259KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 72KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 85B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 64KB - Virtual size: 64KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.zero
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

89dad3e482abeef1656b43d39da96330

Headers

DLL Characteristics

File Characteristics

Imports

winhttp

comctl32

ws2_32

crypt32

kernel32

user32

shell32

advapi32

Sections

.text Size: 1.1MB - Virtual size: 1.1MB

.rdata Size: 259KB - Virtual size: 259KB

.data Size: 53KB - Virtual size: 72KB

.tls Size: 512B - Virtual size: 85B

.gfids Size: 4KB - Virtual size: 4KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 64KB - Virtual size: 64KB

.zero Size: 4KB - Virtual size: 3KB

.text
Size: 1.1MB - Virtual size: 1.1MB

.rdata
Size: 259KB - Virtual size: 259KB

.data
Size: 53KB - Virtual size: 72KB

.tls
Size: 512B - Virtual size: 85B

.gfids
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 64KB - Virtual size: 64KB

.zero
Size: 4KB - Virtual size: 3KB