8a290a86ab33f74dc29f126c6bb78a4af75ddfba70f2f8eff48e6724cf699da7N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

8a290a86ab33f74dc29f126c6bb78a4af75ddfba70f2f8eff48e6724cf699da7N.exe
Size

144KB
MD5

1f495e35e2a6a10f176554753c90f140
SHA1

60adb78c63c57a3cc1ee4a33f33642b1f57c8637
SHA256

8a290a86ab33f74dc29f126c6bb78a4af75ddfba70f2f8eff48e6724cf699da7
SHA512

b3c5ee0853b0ddd22292cdd0a08b4ff0ff8a1f2e6c804962c9e9b0ceaf4bb216a2b2dd79d92928405d09395c0a69cb8ca06eeb17d35d1aae1565d4bdc5cb59b2
SSDEEP

3072:alZqpbNp3/tB2FzW2lQBV+UdE+rECWp7hKWrGyM:alZqpBpPQQBV+UdvrEFp7hKWr6

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8a290a86ab33f74dc29f126c6bb78a4af75ddfba70f2f8eff48e6724cf699da7N.exe

Files

8a290a86ab33f74dc29f126c6bb78a4af75ddfba70f2f8eff48e6724cf699da7N.exe
.dll windows:4 windows x86 arch:x86

495cc88af3671450667fdedc1555ee51

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

TlsFree
LocalFree
TlsGetValue
TlsSetValue
LocalAlloc
TlsAlloc
CloseHandle
DeviceIoControl
GetLastError
WriteFile
CreateFileA
HeapFree
HeapAlloc
RtlUnwind
GetCommandLineA
GetVersion
RaiseException
ExitProcess
TerminateProcess
GetCurrentProcess
HeapReAlloc
HeapSize
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetCurrentThreadId
SetLastError
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr
GetCPInfo
GetACP
GetOEMCP
GetProcAddress
LoadLibraryA
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiGetClassDevsA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailA

Exports

Exports

CP210x_Close
CP210x_CreateHexFile
CP210x_GetBaudRateConfig
CP210x_GetDevicePid
CP210x_GetDeviceProductString
CP210x_GetDeviceSerialNumber
CP210x_GetDeviceVersion
CP210x_GetDeviceVid
CP210x_GetLockValue
CP210x_GetMaxPower
CP210x_GetNumDevices
CP210x_GetPartNumber
CP210x_GetPortConfig
CP210x_GetProductString
CP210x_GetSelfPower
CP210x_Open
CP210x_Reset
CP210x_SetBaudRateConfig
CP210x_SetDeviceVersion
CP210x_SetLockValue
CP210x_SetMaxPower
CP210x_SetPid
CP210x_SetPortConfig
CP210x_SetProductString
CP210x_SetSelfPower
CP210x_SetSerialNumber
CP210x_SetVid

Sections

.text
Size: 36KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

495cc88af3671450667fdedc1555ee51

Headers

File Characteristics

Imports

kernel32

setupapi

Exports

Exports

Sections

.text Size: 36KB - Virtual size: 35KB

.rdata Size: 8KB - Virtual size: 5KB

.data Size: 12KB - Virtual size: 12KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 36KB - Virtual size: 35KB

.rdata
Size: 8KB - Virtual size: 5KB

.data
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 4KB - Virtual size: 3KB