caf3e8726cd74745ce9ef88b9e80dba6fcfc191e148b3201b9da1aad809146eaN[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

caf3e8726cd74745ce9ef88b9e80dba6fcfc191e148b3201b9da1aad809146eaN.exe
Size

360KB
MD5

7b428800624502f04b3e37c1eee957b0
SHA1

c5e31980f04080a4c7feeede0c3b850c78e4839e
SHA256

caf3e8726cd74745ce9ef88b9e80dba6fcfc191e148b3201b9da1aad809146ea
SHA512

5ea20e8f560980c7b9ea1b95859a89514419f5261ff825962cf91f1a1c5864b320499601fb2b1cb344e4491e665b1d105ac49774305f2f7b75c0cc4905ceee14
SSDEEP

6144:a4qdlPDgRux4fC+2vCM/9TEs4BV+UdvrEFp7hKc0:a9dl7gi4fb2vZuTBjvrEH710

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
caf3e8726cd74745ce9ef88b9e80dba6fcfc191e148b3201b9da1aad809146eaN.exe

Files

caf3e8726cd74745ce9ef88b9e80dba6fcfc191e148b3201b9da1aad809146eaN.exe
.exe windows:4 windows x86 arch:x86

a5ffb5fa3f690bf788096aaac1585c2f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiClassNameFromGuidExA
SetupDiBuildClassInfoListExA
SetupDiDestroyDeviceInfoList
SetupGetLineTextA
SetupGetInfFileListA
SetupPromptReboot
SetupOpenInfFileA
SetupFindFirstLineA
SetupGetStringFieldA
SetupCloseInfFile
SetupDiSetDeviceInstallParamsA
SetupDiBuildDriverInfoList
SetupDiEnumDriverInfoA
SetupDiGetDriverInfoDetailA
SetupDiGetDriverInstallParamsA
SetupDiDestroyDriverInfoList
CM_Get_First_Log_Conf_Ex
CM_Free_Log_Conf_Handle
CM_Get_Next_Res_Des_Ex
CM_Free_Res_Des_Handle
CM_Get_Res_Des_Data_Size_Ex
CM_Get_Res_Des_Data_Ex
SetupDiCreateDeviceInfoListExA
SetupDiOpenDeviceInfoA
SetupDiGetDeviceRegistryPropertyA
SetupCopyOEMInfA
CM_Get_DevNode_Status_Ex
SetupDiOpenClassRegKeyExA
CM_Connect_MachineA
CM_Locate_DevNode_ExA
CM_Reenumerate_DevNode_Ex
CM_Disconnect_Machine
SetupDiEnumDeviceInfo
SetupDiGetClassDevsExA
SetupDiClassGuidsFromNameExA
SetupDiGetDeviceInstallParamsA
SetupDiCallClassInstaller
SetupDiSetClassInstallParamsA
SetupDiSetDeviceRegistryPropertyA
SetupDiCreateDeviceInfoA
SetupDiCreateDeviceInfoList
SetupDiGetINFClassA
CM_Get_Device_ID_ExA
SetupDiGetDeviceInfoListDetailA
SetupDiGetClassDescriptionExA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

msvcrt

_controlfp
_except_handler3
__set_app_type
__p__fmode
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
_acmdln
exit
_XcptFilter
_exit
_onexit
__dllonexit
strstr
atoi
malloc
free
_mbscmp
__CxxFrameHandler
_mbsnbicmp
_ismbcalpha
_mbctoupper
_mbctolower
_mbschr
??2@YAPAXI@Z
??3@YAXPAX@Z
printf
_mbsicmp
_iob
fputs
_setmbcp

mfc42

ord3798
ord3318
ord5442
ord6010
ord2763
ord5710
ord1158
ord6197
ord2302
ord567
ord3567
ord3402
ord5290
ord1776
ord6055
ord3790
ord6153
ord2915
ord5572
ord939
ord941
ord6385
ord2086
ord1669
ord2652
ord602
ord2642
ord470
ord755
ord2379
ord940
ord2764
ord4204
ord2818
ord4673
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4622
ord4424
ord3738
ord561
ord815
ord641
ord2514
ord800
ord858
ord4278
ord6282
ord6283
ord537
ord2621
ord5265
ord4376
ord4998
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord5280
ord1576
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord4627
ord4425
ord3597
ord860
ord1146
ord1168
ord540
ord324
ord2370
ord4234
ord4853
ord6334
ord926
ord6199
ord922
ord3874
ord6215
ord3092
ord665
ord1979
ord5186
ord354
ord535
ord924
ord4129
ord5683
ord4224
ord4710

kernel32

FindResourceA
GetStartupInfoA
GetModuleHandleA
CreateProcessA
WaitForSingleObject
DeleteFileA
CopyFileA
CreateDirectoryA
GetLastError
LoadResource
LockResource
SizeofResource
GetModuleFileNameA
SetCurrentDirectoryA
GetSystemDirectoryA
GetVersionExA
FileTimeToSystemTime
GetDateFormatA
GetCurrentProcess
CloseHandle
FormatMessageA
LocalFree
GetWindowsDirectoryA
FindFirstFileA
FindNextFileA
FindClose
lstrlenA
GetFullPathNameA
GetFileAttributesA
LoadLibraryA
GetProcAddress
FreeLibrary

user32

IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
EnableWindow
LoadIconA
CharNextA
CharPrevA
LoadStringA
GetWindowRect
UpdateWindow
SendMessageA
InvalidateRect

advapi32

AdjustTokenPrivileges
RegDeleteKeyA
RegCreateKeyA
RegOpenKeyA
RegQueryValueExA
OpenProcessToken
LookupPrivilegeValueA
RegDeleteValueA
InitiateSystemShutdownExA
OpenSCManagerA
OpenServiceA
CloseServiceHandle
RegSetValueExA
RegCloseKey

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetMalloc

ole32

CLSIDFromString

Sections

.text
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 212KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a5ffb5fa3f690bf788096aaac1585c2f

Headers

File Characteristics

Imports

setupapi

version

msvcrt

mfc42

kernel32

user32

advapi32

shell32

ole32

Sections

.text Size: 48KB - Virtual size: 46KB

.rdata Size: 12KB - Virtual size: 9KB

.data Size: 8KB - Virtual size: 4KB

.rsrc Size: 212KB - Virtual size: 209KB

.text
Size: 48KB - Virtual size: 46KB

.rdata
Size: 12KB - Virtual size: 9KB

.data
Size: 8KB - Virtual size: 4KB

.rsrc
Size: 212KB - Virtual size: 209KB