045d98352dd83f066d072e5a147b041445e02e6454f47a37549924d6e4071a33N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

045d98352dd83f066d072e5a147b041445e02e6454f47a37549924d6e4071a33N.exe
Size

245KB
MD5

3cea85c7ff571db5c593d0dab562d780
SHA1

3bb5a8d58e2a0c88f8c08855c42e4ad2a412681e
SHA256

045d98352dd83f066d072e5a147b041445e02e6454f47a37549924d6e4071a33
SHA512

77e26bab30f7bfee8dfaeb5cd9bc84b697c5f4f75233cba3be1b78dd021e9f3ba8f2c4a192d2e78e8cbdee5d8f367ed31225461e2348b9f61d09295f97f02b8f
SSDEEP

6144:CVtMbjk4c/T0KJ8I1y507VY/eQ3AxaXDIutfY0:C/KjkRtqI1Y07VY/zQ8htA0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
045d98352dd83f066d072e5a147b041445e02e6454f47a37549924d6e4071a33N.exe

Files

045d98352dd83f066d072e5a147b041445e02e6454f47a37549924d6e4071a33N.exe
.exe windows:4 windows x86 arch:x86

4fffdb3278460a5fe2afb81869ef923a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisableThreadLibraryCalls
SetUnhandledExceptionFilter
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
GetFullPathNameW
GetFullPathNameA
CreateFileA
GetFileSize
SetFilePointer
SetEndOfFile
FreeLibrary
UnlockFile
LockFile
GetSystemTimeAsFileTime
FormatMessageA
WriteFile
WideCharToMultiByte
ReadFile
CreateFileW
FlushFileBuffers
GetTempPathW
LockFileEx
OutputDebugStringA
CloseHandle
DeleteFileW
GetTempPathA
GetSystemTime
AreFileApisANSI
DeleteFileA
UnhandledExceptionFilter
IsDebuggerPresent
IsValidCodePage
VirtualAllocEx

esent

JetCreateInstance

quartz

DllRegisterServer
DllCanUnloadNow
DBToAmpFactor
AmpFactorToDB
AMGetErrorTextW

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.wlEeRm
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zQYsSb
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pKNtN
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.QBx
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 213KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.LXNi
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4fffdb3278460a5fe2afb81869ef923a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

esent

quartz

Sections

.text Size: 19KB - Virtual size: 18KB

.wlEeRm Size: 2KB - Virtual size: 2KB

.zQYsSb Size: 1024B - Virtual size: 752B

.rdata Size: 1KB - Virtual size: 1KB

.pKNtN Size: 1024B - Virtual size: 1KB

.QBx Size: 1KB - Virtual size: 2KB

.data Size: 213KB - Virtual size: 247KB

.LXNi Size: 2KB - Virtual size: 3KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 19KB - Virtual size: 18KB

.wlEeRm
Size: 2KB - Virtual size: 2KB

.zQYsSb
Size: 1024B - Virtual size: 752B

.rdata
Size: 1KB - Virtual size: 1KB

.pKNtN
Size: 1024B - Virtual size: 1KB

.QBx
Size: 1KB - Virtual size: 2KB

.data
Size: 213KB - Virtual size: 247KB

.LXNi
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 3KB - Virtual size: 2KB