712880e6000392edbe9045cbbd033f22764526206900c89bfa183fee451e8284N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

712880e6000392edbe9045cbbd033f22764526206900c89bfa183fee451e8284N.exe
Size

188KB
MD5

d5400a1109bd37fdd4e2ed5b846ab410
SHA1

f6697d9ff80404a371e14fb85cf8532c8d66378d
SHA256

712880e6000392edbe9045cbbd033f22764526206900c89bfa183fee451e8284
SHA512

b7b0d1dc6dd8df93e61fdf6c7cbefef6e89e3b96176bc7f89d63026c8f29f3c6c7465e423b18a023402c51128f0071ed85fad26e444bb08ab59939593af9861a
SSDEEP

3072:RyxAfJTYCfDuoocFHGTuXHHetkqcqvnhzdui:AxgdYAxATuXHHel/Vgi

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
712880e6000392edbe9045cbbd033f22764526206900c89bfa183fee451e8284N.exe

Files

712880e6000392edbe9045cbbd033f22764526206900c89bfa183fee451e8284N.exe
.dll windows:4 windows x86 arch:x86

1c97d84cc962a37a1def74fe0879c3e2

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TlsFree
CloseHandle
DeviceIoControl
OutputDebugStringA
CreateFileA
SetLastError
GetProcAddress
LoadLibraryA
GetVersionExA
InitializeCriticalSection
Sleep
GetLastError
HeapFree
HeapAlloc
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
HeapReAlloc
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ExitProcess
RtlUnwind
GetCurrentThreadId
TlsSetValue
TlsAlloc
GetSystemInfo
TlsGetValue
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
WriteFile
SetFilePointer
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetCPInfo
GetACP
GetOEMCP
SetStdHandle
GetStringTypeA
GetStringTypeW
ReadFile
LCMapStringA
LCMapStringW
FlushFileBuffers
CompareStringA
CompareStringW
SetEnvironmentVariableA

Exports

Exports

CheckSum
CloseEnumsChipContext
ClosesChip
CreateEnumsChipContext
DecryptReadBuffer
EncrypDecryp
EncryptWriteBuffer
EnumsChipPaths
GetsChipSerial
InitCryptContext
IsDualProcessorSystem
OpenNextsChip
OpensChip
OpensChipByPath
QuerysChip
ReadBuffer
ReadDWORD
ReadsChipMem
RegistersChipPnPNotification
SetsChipAlgoFactors
SetsChipID
SetsChipPassword
UnregistersChipPnPNotification
WriteBuffer
WriteDWORD
WritesChipMem

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.text
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1c97d84cc962a37a1def74fe0879c3e2

Headers

File Characteristics

Imports

kernel32

Exports

Exports

Sections

.text Size: 48KB - Virtual size: 46KB

.rdata Size: 12KB - Virtual size: 8KB

.data Size: 12KB - Virtual size: 19KB

.reloc Size: 4KB - Virtual size: 3KB

.text Size: 108KB - Virtual size: 108KB

.text
Size: 48KB - Virtual size: 46KB

.rdata
Size: 12KB - Virtual size: 8KB

.data
Size: 12KB - Virtual size: 19KB

.reloc
Size: 4KB - Virtual size: 3KB

.text
Size: 108KB - Virtual size: 108KB