150bbd77ce900d28b4b3f33630fce1fdf02869dc2e0f4381629a990e6e74af97N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

150bbd77ce900d28b4b3f33630fce1fdf02869dc2e0f4381629a990e6e74af97N.exe
Size

226KB
MD5

b89eeddadf1a6a8be88752c23528b310
SHA1

3daf498b24530a35d0e34225a62bf5f0ab0f9d84
SHA256

150bbd77ce900d28b4b3f33630fce1fdf02869dc2e0f4381629a990e6e74af97
SHA512

8f7b14985cb8dc65922a8a52ca614e223f76090ba739863370898acfb844b6b161aa6fc93211c0fbc44d575b23a1edbb67b0bf013ffc5c1f183329d814642968
SSDEEP

6144:d5lNeKSv2HHJk7Ydla1tg3G4LDr7OO8qwI:d5/eKSv2HHW7YdlaX2CLqwI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
150bbd77ce900d28b4b3f33630fce1fdf02869dc2e0f4381629a990e6e74af97N.exe

Files

150bbd77ce900d28b4b3f33630fce1fdf02869dc2e0f4381629a990e6e74af97N.exe
.exe windows:4 windows x86 arch:x86

3984eb0e9bb481b2951a36307e51dfc5

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetNumberFormatW
ExpandEnvironmentStringsA
SetCalendarInfoA
lstrcatW
GlobalFindAtomA
ConnectNamedPipe
CreateSemaphoreA
GetACP
GetCurrentThreadId
FindResourceA
CreatePipe
GetCommandLineW
GetTempFileNameW
GetLastError
GetSystemDirectoryA
GetLongPathNameA
GetCurrentDirectoryW
EnumCalendarInfoW
InitializeCriticalSection
OpenSemaphoreA
IsDebuggerPresent
FileTimeToLocalFileTime
MoveFileA
CopyFileExA
RaiseException
CompareFileTime
GetDateFormatW
FatalAppExitW
GetProcAddress
GetTimeFormatA
RemoveDirectoryW
CreateMutexA
IsBadStringPtrA
SetLocaleInfoW
GetWindowsDirectoryW
FatalAppExitA
AddAtomA
GetComputerNameA
GetDiskFreeSpaceA
GetTimeFormatW
ReadDirectoryChangesW
LoadLibraryA
SearchPathW
ExpandEnvironmentStringsW
GlobalFindAtomW
GetLongPathNameW
GetTempPathA

user32

AppendMenuA
MessageBeep
PeekMessageW
EnableMenuItem
GetFocus
GetMenuInfo
FlashWindow
SendMessageW
InsertMenuW
ActivateKeyboardLayout
GetSysColor
LoadMenuIndirectW
SetCursor
CallWindowProcW
GetForegroundWindow
SetWindowPos
LoadIconW
FindWindowA
ArrangeIconicWindows

gdi32

TranslateCharsetInfo
FrameRgn
CreateHatchBrush
ExtSelectClipRgn
Pie
GetMapMode
CreateDCA
GetLogColorSpaceW
GetCharABCWidthsFloatA
GetOutlineTextMetricsW
GetStretchBltMode
ArcTo
EnumObjects
StrokeAndFillPath
SelectPalette

advapi32

RegSaveKeyW
RegReplaceKeyW
RegOpenKeyW
RegOpenKeyA
RegReplaceKeyA
RegCloseKey
RegDeleteValueW
RegSaveKeyA

shlwapi

StrRChrA
PathGetDriveNumberA
wnsprintfA
StrFromTimeIntervalA
PathFindFileNameW
UrlCombineA
SHDeleteEmptyKeyW

comdlg32

PageSetupDlgW
PageSetupDlgA

sqlunirl

_GetModuleFileName@12
_CreateDC_@16
_NDdeGetTrustedShare_@20
_GetTempFileName_@16
_SetWindowText@8
_SetCurrentDirectory_@4
_LoadIcon@8
_GetCharacterPlacement_@24
_SetFileSecurity_@12
_ObjectOpenAuditAlarm_@48
_GetWindowLong@8
_EnumServicesStatus_@32
_RegReplaceKey_@16
_EnumPropsEx_@12
_LookupPrivilegeName_@16
_RemoveProp@8
_GetDiskFreeSpace_@20
_CreateMDIWindow_@40
_GlobalAddAtom_@4
_FindWindowEx_@16
_GetWindowTextLength@4
_GetTextExtentPoint32@16
_SHGetPathFromIDList_@8
_GetUserName@8

wsock32

GetTypeByNameA
accept
s_perror
htons
EnumProtocolsA

crypt32

CryptUnregisterOIDInfo
CertGetCRLContextProperty
CryptDecryptMessage
CertFreeCertificateContext
CryptSIPLoad
CryptEnumOIDInfo

Sections

.nyMLkL
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tB
Size: 2KB - Virtual size: 383KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.Bljv
Size: 83KB - Virtual size: 83KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gh
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.dNbVSI
Size: 4KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.KpcfSV
Size: 4KB - Virtual size: 314KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.NyNX
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 291KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.k
Size: 3KB - Virtual size: 460KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.nqphjK
Size: 1024B - Virtual size: 180KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 7KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3984eb0e9bb481b2951a36307e51dfc5

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shlwapi

comdlg32

sqlunirl

wsock32

crypt32

Sections

.nyMLkL Size: 9KB - Virtual size: 9KB

.tB Size: 2KB - Virtual size: 383KB

.Bljv Size: 83KB - Virtual size: 83KB

.gh Size: 12KB - Virtual size: 12KB

.dNbVSI Size: 4KB - Virtual size: 47KB

.KpcfSV Size: 4KB - Virtual size: 314KB

.NyNX Size: 86KB - Virtual size: 85KB

.data Size: 11KB - Virtual size: 291KB

.k Size: 3KB - Virtual size: 460KB

.nqphjK Size: 1024B - Virtual size: 180KB

.rsrc Size: 7KB - Virtual size: 6KB

.reloc Size: 1024B - Virtual size: 1024B

.nyMLkL
Size: 9KB - Virtual size: 9KB

.tB
Size: 2KB - Virtual size: 383KB

.Bljv
Size: 83KB - Virtual size: 83KB

.gh
Size: 12KB - Virtual size: 12KB

.dNbVSI
Size: 4KB - Virtual size: 47KB

.KpcfSV
Size: 4KB - Virtual size: 314KB

.NyNX
Size: 86KB - Virtual size: 85KB

.data
Size: 11KB - Virtual size: 291KB

.k
Size: 3KB - Virtual size: 460KB

.nqphjK
Size: 1024B - Virtual size: 180KB

.rsrc
Size: 7KB - Virtual size: 6KB

.reloc
Size: 1024B - Virtual size: 1024B