90368e56ca523fca429f3900509fd5b751676ce164260162bd04f71f52783d59[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

90368e56ca523fca429f3900509fd5b751676ce164260162bd04f71f52783d59.exe
Size

398KB
MD5

88bff33f6838f9e88c2ffad43582a368
SHA1

20839b37300c51d90b46f187dd6ae4ed25900af1
SHA256

90368e56ca523fca429f3900509fd5b751676ce164260162bd04f71f52783d59
SHA512

9530bb1b440db1ab1e1e5a9c73f8ab28009dd66f1bdef85578fcb8316837187f689e89f3084973ecb538ea63e2acaadbacad12d58ecebb75ecfe8a776f049227
SSDEEP

6144:r6TgTtyM7lLkIl459qxBGWhG3nysV9P2OxHLvicWp4SwTQ1v7jMfx7sQRTYhw2/C:mTgTtV7lLo9wpG3HVh7icnSy4vG7Md/C

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
90368e56ca523fca429f3900509fd5b751676ce164260162bd04f71f52783d59.exe

Files

90368e56ca523fca429f3900509fd5b751676ce164260162bd04f71f52783d59.exe
.exe windows:5 windows x86 arch:x86

3bf5c727e360f25e185e011e0f59171e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_UP_SYSTEM_ONLY

Imports

kernel32

lstrlenA
FindFirstFileA
GetCommandLineA
GetLogicalDrives
GetLastError
GetConsoleWindow
Sleep
SetConsoleTitleA
GetTickCount
GetCurrentProcessId
GetConsoleTitleA
ExpandEnvironmentStringsA
LocalFree
CloseHandle
OpenProcess
CreateFileW
FlushFileBuffers
GetStringTypeW
LCMapStringW
MultiByteToWideChar
WriteConsoleW
SetStdHandle
HeapReAlloc
LoadLibraryW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapSize
RtlUnwind
FindNextFileA
GetSystemTimeAsFileTime
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
LeaveCriticalSection
FindClose
GetStdHandle
GetConsoleScreenBufferInfo
FillConsoleOutputCharacterA
lstrcatA
GetProcAddress
GlobalLock
GlobalUnlock
MulDiv
WaitForSingleObject
GetModuleHandleA
EnterCriticalSection
GetModuleFileNameW
WriteFile
ExitProcess
GetModuleHandleW
HeapCreate
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
HeapAlloc
HeapFree
RaiseException
LoadLibraryA

user32

GetWindowThreadProcessId
FindWindowA
PostMessageA
DispatchMessageW
TranslateMessage
GetMessageW
EnumChildWindows
FindWindowExA
EnableMenuItem
LoadStringA
SendMessageA
CreateAcceleratorTableA
SystemParametersInfoA
GetWindow
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
wsprintfA
GetDlgItem
SetWindowPos
CountClipboardFormats
CharToOemA
TrackMouseEvent
CreatePopupMenu
CopyRect
FillRect
SetWindowTextA
KillTimer
ExitWindowsEx
GetParent
IsClipboardFormatAvailable
MessageBoxA
OpenClipboard
GetClipboardData
CloseClipboard
InvalidateRect
BeginPaint
GetClientRect
LoadBitmapA
GetSystemMetrics
GetDC
ReleaseDC
SetScrollPos
SetCursor
EndPaint

gdi32

CreateFontW
CreateFontA
SetTextColor
GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt

advapi32

CryptEnumProviderTypesA

ole32

WriteClassStg
StgOpenStorage
ReadClassStg
StgCreateDocfile

psapi

EnumProcessModules
GetModuleBaseNameA
GetModuleFileNameExA

winmm

waveInGetDevCapsA
waveInReset
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveInOpen
waveInGetNumDevs

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

shlwapi

StrStrIA
StrToIntExA

imm32

ImmAssociateContext

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fast
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flash
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3bf5c727e360f25e185e011e0f59171e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

psapi

winmm

version

shlwapi

imm32

Sections

.text Size: 56KB - Virtual size: 56KB

.rdata Size: 33KB - Virtual size: 33KB

.data Size: 4KB - Virtual size: 12KB

.fast Size: 99KB - Virtual size: 98KB

.flash Size: 103KB - Virtual size: 102KB

.rsrc Size: 91KB - Virtual size: 90KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 56KB - Virtual size: 56KB

.rdata
Size: 33KB - Virtual size: 33KB

.data
Size: 4KB - Virtual size: 12KB

.fast
Size: 99KB - Virtual size: 98KB

.flash
Size: 103KB - Virtual size: 102KB

.rsrc
Size: 91KB - Virtual size: 90KB

.reloc
Size: 9KB - Virtual size: 9KB