0d5d794e00794913ae08a55c4ff63544f12feaecc891b91b13de32032345f15bN[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

0d5d794e00794913ae08a55c4ff63544f12feaecc891b91b13de32032345f15bN.exe
Size

323KB
MD5

555530e2c6baf1d86911e3a5fb4cfe10
SHA1

067a59d045292c92e076900ba85a1824240f6562
SHA256

0d5d794e00794913ae08a55c4ff63544f12feaecc891b91b13de32032345f15b
SHA512

cd2505ea7dedc1a75adbba20db7561eb9d32c0072c8c11c6265bcc6267192475ccad0af93beb6c9969ee2603217347090a9de80a2f24fa21f8ad9137505d35f4
SSDEEP

3072:ssENKpXa+1pfbz2LjiLd25d1rJjnE3z6x8EzY4a9APmawcTVsPHep:s2XFjfbiLjiLd21lIz7qLaGujf4

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0d5d794e00794913ae08a55c4ff63544f12feaecc891b91b13de32032345f15bN.exe

Files

0d5d794e00794913ae08a55c4ff63544f12feaecc891b91b13de32032345f15bN.exe
.exe windows:5 windows x86 arch:x86

dc1d75d516158832d1f46e94c72a4f04

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SetConsoleTextAttribute
GetCurrentProcess
WaitForSingleObject
SetEvent
SleepEx
GetTickCount
WriteFile
FindResourceExA
GetConsoleCP
GlobalAlloc
SetFileShortNameW
GetFileAttributesA
ReadFile
lstrlenW
GetProcAddress
LocalLock
HeapUnlock
ReadFileEx
ResetEvent
LoadLibraryA
GetModuleFileNameA
GetPrivateProfileSectionA
GetConsoleTitleW
DeleteCriticalSection
EndUpdateResourceA
GetCurrentProcessId
FindActCtxSectionStringW
CommConfigDialogA
HeapAlloc
SetConsoleTitleA
GetStartupInfoW
RaiseException
RtlUnwind
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetLastError
HeapFree
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
CloseHandle
Sleep
ExitProcess
GetStdHandle
GetModuleFileNameW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
VirtualAlloc
HeapReAlloc
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
MultiByteToWideChar
WideCharToMultiByte
CreateFileA
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleMode
FlushFileBuffers
HeapSize
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
SetEndOfFile
GetProcessHeap
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW

gdi32

GetCharWidthFloatA

advapi32

ReportEventW

Sections

.text
Size: 85KB - Virtual size: 85KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 189KB - Virtual size: 8.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fasuf
Size: 1024B - Virtual size: 626B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.lepi
Size: 512B - Virtual size: 23B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.kezag
Size: 512B - Virtual size: 6B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fugin
Size: 1024B - Virtual size: 963B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dc1d75d516158832d1f46e94c72a4f04

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

advapi32

Sections

.text Size: 85KB - Virtual size: 85KB

.data Size: 189KB - Virtual size: 8.0MB

.fasuf Size: 1024B - Virtual size: 626B

.lepi Size: 512B - Virtual size: 23B

.kezag Size: 512B - Virtual size: 6B

.fugin Size: 1024B - Virtual size: 963B

.rsrc Size: 45KB - Virtual size: 44KB

.text
Size: 85KB - Virtual size: 85KB

.data
Size: 189KB - Virtual size: 8.0MB

.fasuf
Size: 1024B - Virtual size: 626B

.lepi
Size: 512B - Virtual size: 23B

.kezag
Size: 512B - Virtual size: 6B

.fugin
Size: 1024B - Virtual size: 963B

.rsrc
Size: 45KB - Virtual size: 44KB