9a9da617e40038dbb8b9dcef907f751cf98d515dc354002dedc0151b9c60bb33N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

9a9da617e40038dbb8b9dcef907f751cf98d515dc354002dedc0151b9c60bb33N.exe
Size

101KB
MD5

9a096bc44c210d1d57f1a382e1f67160
SHA1

05fa6001673ab4bea1aa7617d1fbd996a106ff96
SHA256

9a9da617e40038dbb8b9dcef907f751cf98d515dc354002dedc0151b9c60bb33
SHA512

2d0812ed3ba69d435b7797edf11c9ca313d06703650e3597af96c2f4ef30b8c2670353bf6b54682aef599632eae8015184f07367488d69f02ece96d67a1ffa84
SSDEEP

3072:ZXtDxxeeJUEvjAIEo0FZoI+vTgdtKlK48zII:Z91xeeOEbAvjZMvTIK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9a9da617e40038dbb8b9dcef907f751cf98d515dc354002dedc0151b9c60bb33N.exe

Files

9a9da617e40038dbb8b9dcef907f751cf98d515dc354002dedc0151b9c60bb33N.exe
.exe windows:5 windows x86 arch:x86

b63ac7dc2c5cf3bb6bc914c1706fa953

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

user32

GetParent
WinHelpW
LoadCursorW
LoadIconW
DialogBoxParamW
EndDialog
SetWindowTextW
LoadBitmapW
SetFocus
SendMessageW
GetWindowLongW
EnableWindow
GetDlgItem
SetCursor
PostMessageW
GetDC
MessageBoxW
LoadStringW
ReleaseDC
InsertMenuItemW
GetDlgItemTextA
SetDlgItemTextW
SendDlgItemMessageW
SystemParametersInfoW
RegisterClipboardFormatW
LoadImageW
SetWindowLongW
wsprintfW

msvcrt

free
_purecall
_onexit
__RTDynamicCast
vswprintf
memmove
wcsstr
??2@YAPAXI@Z
malloc
wcstoul
?terminate@@YAXXZ
_adjust_fdiv
??3@YAXPAX@Z
_initterm
wcscat
??1type_info@@UAE@XZ
wcscpy
__dllonexit
mbstowcs
wcschr
wcsrchr
_except_handler3
wcscmp
_wcsicmp
_wcsupr
wcslen

kernel32

LoadLibraryW
GetSystemWindowsDirectoryW
lstrcmpiW
CreateFileW
GlobalLock
GetACP
OutputDebugStringA
GetComputerNameW
IsBadReadPtr
InitializeCriticalSection
LocalReAlloc
QueryPerformanceCounter
DeleteCriticalSection
OutputDebugStringW
GetEnvironmentStringsW
GetSystemDefaultLangID
lstrcpyW
GlobalFree
FileTimeToSystemTime
SetLastError
GetTickCount
GetModuleHandleA
InterlockedDecrement
FileTimeToLocalFileTime
lstrlenW
FormatMessageW
GlobalAlloc
RemoveDirectoryA
CloseHandle
GetCurrentProcess
InterlockedIncrement
GetSystemTimeAsFileTime
LocalFree
GlobalUnlock
GetStartupInfoA
WideCharToMultiByte
SetUnhandledExceptionFilter
GetModuleFileNameW
GetDateFormatW
GetLastError

certcli

CASetCertTypeKeySpec
CASetCertTypeFlags
CAFreeCAProperty
CAFreeCertTypeProperty
CACreateCertType
CAGetCertTypeExtensions
CARemoveCACertificateType
CACertTypeGetSecurity
CAAddCACertificateType
CACertTypeSetSecurity
CAFreeCertTypeExtensions
CAUpdateCertType
CACloseCertType
CAGetCertTypeFlags
CACloseCA
CAGetCertTypeProperty
CAFindCertTypeByName
CAGetCertTypeKeySpec
CASetCertTypeExtension
CAGetCertTypePropertyEx
CASetCertTypeProperty
CAUpdateCA
CAGetCAProperty
CAEnumCertTypesForCA
CAEnumNextCertType
CAFindByName
CAEnumCertTypes

advapi32

RegSetValueExW
RegCloseKey
RegDeleteValueW
RegOpenKeyExW
RegEnumKeyExW
RegCreateKeyExW
RegQueryValueExW
RegDeleteKeyW

comctl32

PropertySheetW
CreatePropertySheetPageW

Sections

.text
Size: 46KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 13KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 23KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b63ac7dc2c5cf3bb6bc914c1706fa953

Headers

File Characteristics

Imports

user32

msvcrt

kernel32

certcli

advapi32

comctl32

Sections

.text Size: 46KB - Virtual size: 46KB

.rdata Size: 13KB - Virtual size: 13KB

.data Size: 16KB - Virtual size: 98KB

.rsrc Size: 23KB - Virtual size: 23KB

.text
Size: 46KB - Virtual size: 46KB

.rdata
Size: 13KB - Virtual size: 13KB

.data
Size: 16KB - Virtual size: 98KB

.rsrc
Size: 23KB - Virtual size: 23KB