bb3511af2791a8fa64fd961b5d94323f5737cfa0ceec07bc2edc413c6532c222[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

bb3511af2791a8fa64fd961b5d94323f5737cfa0ceec07bc2edc413c6532c222.exe
Size

245KB
MD5

a31b3eb79956501da7c741e909885153
SHA1

fc9deebc1900818ecd177af49b3b1061d79f4919
SHA256

bb3511af2791a8fa64fd961b5d94323f5737cfa0ceec07bc2edc413c6532c222
SHA512

ab2337105547902da731d93be7e6fd65d78a1b6267c3fbc7ced3935a580205e0b614c28c9f0bfd1fb642a24d6e45f3a6e0bb18d7bd61ac7207c15e769e25d5ff
SSDEEP

6144:CVtMbjk4c/T0KJ8I1y507VY/eQ3AxaXDIutfY0:C/KjkRtqI1Y07VY/zQ8htA0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
bb3511af2791a8fa64fd961b5d94323f5737cfa0ceec07bc2edc413c6532c222.exe

Files

bb3511af2791a8fa64fd961b5d94323f5737cfa0ceec07bc2edc413c6532c222.exe
.exe windows:4 windows x86 arch:x86

4fffdb3278460a5fe2afb81869ef923a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisableThreadLibraryCalls
SetUnhandledExceptionFilter
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
GetFullPathNameW
GetFullPathNameA
CreateFileA
GetFileSize
SetFilePointer
SetEndOfFile
FreeLibrary
UnlockFile
LockFile
GetSystemTimeAsFileTime
FormatMessageA
WriteFile
WideCharToMultiByte
ReadFile
CreateFileW
FlushFileBuffers
GetTempPathW
LockFileEx
OutputDebugStringA
CloseHandle
DeleteFileW
GetTempPathA
GetSystemTime
AreFileApisANSI
DeleteFileA
UnhandledExceptionFilter
IsDebuggerPresent
IsValidCodePage
VirtualAllocEx

esent

JetCreateInstance

quartz

DllRegisterServer
DllCanUnloadNow
DBToAmpFactor
AmpFactorToDB
AMGetErrorTextW

Sections

.text
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.wlEeRm
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.zQYsSb
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pKNtN
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.QBx
Size: 1KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 213KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.LXNi
Size: 2KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4fffdb3278460a5fe2afb81869ef923a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

esent

quartz

Sections

.text Size: 19KB - Virtual size: 18KB

.wlEeRm Size: 2KB - Virtual size: 2KB

.zQYsSb Size: 1024B - Virtual size: 752B

.rdata Size: 1KB - Virtual size: 1KB

.pKNtN Size: 1024B - Virtual size: 1KB

.QBx Size: 1KB - Virtual size: 2KB

.data Size: 213KB - Virtual size: 247KB

.LXNi Size: 2KB - Virtual size: 3KB

.rsrc Size: 3KB - Virtual size: 2KB

.text
Size: 19KB - Virtual size: 18KB

.wlEeRm
Size: 2KB - Virtual size: 2KB

.zQYsSb
Size: 1024B - Virtual size: 752B

.rdata
Size: 1KB - Virtual size: 1KB

.pKNtN
Size: 1024B - Virtual size: 1KB

.QBx
Size: 1KB - Virtual size: 2KB

.data
Size: 213KB - Virtual size: 247KB

.LXNi
Size: 2KB - Virtual size: 3KB

.rsrc
Size: 3KB - Virtual size: 2KB