fdc4c4575e444ce00a45b677ee264d9636dc1dc9afdf5234ec941bc7efe6c473N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

fdc4c4575e444ce00a45b677ee264d9636dc1dc9afdf5234ec941bc7efe6c473N.exe
Size

44KB
MD5

58f843916a7e0d0a64f4cb3001898f20
SHA1

fd7c387e9c86652982b8ce7f24d55fd2df4989eb
SHA256

fdc4c4575e444ce00a45b677ee264d9636dc1dc9afdf5234ec941bc7efe6c473
SHA512

ff418194b266a3d6c81fe63b286b20b92787f93f0cdf18edf78094747bb2535efdd5428466e4a2405d41e0d126e81221a5b00ada7241fc340540b71f1723a1c5
SSDEEP

768:cjbm/bk4w/ZVtUj5HXEE/Yrd/wmaXIRnNA8uU8cjwk1TLjjUDuW2BOEZcS/X:cjbmoD/9U5EUAw9KA8uFcck1XjjUDuzT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fdc4c4575e444ce00a45b677ee264d9636dc1dc9afdf5234ec941bc7efe6c473N.exe

Files

fdc4c4575e444ce00a45b677ee264d9636dc1dc9afdf5234ec941bc7efe6c473N.exe
.dll windows:6 windows x86 arch:x86

f4462c4b9bad1e4754c9f2e0b3351ad6

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

sdl2

SDL_GetColorKey
SDL_GetRGBA
SDL_MapRGBA

python39

PyUnicode_FromString
PyEval_RestoreThread
PyList_New
PyUnicode_FromFormat
PyLong_AsLong
PyModule_AddObject
PyCapsule_GetPointer
_Py_Dealloc
PyErr_Format
PyDict_Next
PyModule_Create2
PyObject_CallFunction
PyErr_SetString
PyFloat_FromDouble
PyDict_Size
_Py_NoneStruct
PyMem_RawMalloc
PyExc_MemoryError
Py_BuildValue
PyLong_FromLong
PyExc_RuntimeError
PyEval_SaveThread
PyErr_Occurred
PyObject_CallMethodObjArgs
PyExc_IndexError
PyCapsule_Type
PyExc_TypeError
PyArg_ParseTupleAndKeywords
PyErr_NoMemory
PyObject_IsInstance
PyCapsule_New
PyTuple_Size
PyList_Append
PyObject_GetAttrString
PyExc_ValueError
PyImport_ImportModule
PyType_Ready
PyObject_SetAttr
PyMem_RawFree

kernel32

SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter

vcruntime140

memset
__std_type_info_destroy_list
memcpy
_except_handler4_common

api-ms-win-crt-heap-l1-1-0

malloc
free

api-ms-win-crt-runtime-l1-1-0

_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm

api-ms-win-crt-math-l1-1-0

_CIatan2

Exports

Exports

PyInit_mask

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 20B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f4462c4b9bad1e4754c9f2e0b3351ad6

Headers

DLL Characteristics

File Characteristics

Imports

sdl2

python39

kernel32

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 31KB - Virtual size: 30KB

.rdata Size: 8KB - Virtual size: 7KB

.data Size: 1024B - Virtual size: 1KB

.gfids Size: 512B - Virtual size: 20B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 31KB - Virtual size: 30KB

.rdata
Size: 8KB - Virtual size: 7KB

.data
Size: 1024B - Virtual size: 1KB

.gfids
Size: 512B - Virtual size: 20B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 2KB - Virtual size: 1KB