4ef0d11d77bfefe309459db230f1f6d47c965c2db8e7b5bcde4d7db2c44fbc8fN[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

4ef0d11d77bfefe309459db230f1f6d47c965c2db8e7b5bcde4d7db2c44fbc8fN.exe
Size

398KB
MD5

7aa5f1abbaed0a8608947effb7e630d0
SHA1

c8c3f3bdab72b335defbbc19b6e71f83ee993190
SHA256

4ef0d11d77bfefe309459db230f1f6d47c965c2db8e7b5bcde4d7db2c44fbc8f
SHA512

cbd0972a49233a4f809bb6810587f25535e45b51d40202c2a60829aea87585862408609231864b825e75fa5877686c9e8b680b66cb1d91692b7c2243dda680f3
SSDEEP

6144:r6TgTtyM7lLkIl459qxBGWhG3nysV9P2OxHLvicWp4SwTQ1v7jMfx7sQRTYhw2/2:mTgTtV7lLo9wpG3HVh7icnSy4vG7Md/2

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4ef0d11d77bfefe309459db230f1f6d47c965c2db8e7b5bcde4d7db2c44fbc8fN.exe

Files

4ef0d11d77bfefe309459db230f1f6d47c965c2db8e7b5bcde4d7db2c44fbc8fN.exe
.exe windows:5 windows x86 arch:x86

3bf5c727e360f25e185e011e0f59171e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_NO_BIND
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
IMAGE_FILE_UP_SYSTEM_ONLY

Imports

kernel32

lstrlenA
FindFirstFileA
GetCommandLineA
GetLogicalDrives
GetLastError
GetConsoleWindow
Sleep
SetConsoleTitleA
GetTickCount
GetCurrentProcessId
GetConsoleTitleA
ExpandEnvironmentStringsA
LocalFree
CloseHandle
OpenProcess
CreateFileW
FlushFileBuffers
GetStringTypeW
LCMapStringW
MultiByteToWideChar
WriteConsoleW
SetStdHandle
HeapReAlloc
LoadLibraryW
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
GetConsoleMode
GetConsoleCP
SetFilePointer
HeapSize
RtlUnwind
FindNextFileA
GetSystemTimeAsFileTime
QueryPerformanceCounter
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
DeleteCriticalSection
GetFileType
InitializeCriticalSectionAndSpinCount
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetModuleFileNameA
LeaveCriticalSection
FindClose
GetStdHandle
GetConsoleScreenBufferInfo
FillConsoleOutputCharacterA
lstrcatA
GetProcAddress
GlobalLock
GlobalUnlock
MulDiv
WaitForSingleObject
GetModuleHandleA
EnterCriticalSection
GetModuleFileNameW
WriteFile
ExitProcess
GetModuleHandleW
HeapCreate
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsProcessorFeaturePresent
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
HeapAlloc
HeapFree
RaiseException
LoadLibraryA

user32

GetWindowThreadProcessId
FindWindowA
PostMessageA
DispatchMessageW
TranslateMessage
GetMessageW
EnumChildWindows
FindWindowExA
EnableMenuItem
LoadStringA
SendMessageA
CreateAcceleratorTableA
SystemParametersInfoA
GetWindow
GetWindowTextA
GetDlgCtrlID
DefWindowProcA
wsprintfA
GetDlgItem
SetWindowPos
CountClipboardFormats
CharToOemA
TrackMouseEvent
CreatePopupMenu
CopyRect
FillRect
SetWindowTextA
KillTimer
ExitWindowsEx
GetParent
IsClipboardFormatAvailable
MessageBoxA
OpenClipboard
GetClipboardData
CloseClipboard
InvalidateRect
BeginPaint
GetClientRect
LoadBitmapA
GetSystemMetrics
GetDC
ReleaseDC
SetScrollPos
SetCursor
EndPaint

gdi32

CreateFontW
CreateFontA
SetTextColor
GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
BitBlt

advapi32

CryptEnumProviderTypesA

ole32

WriteClassStg
StgOpenStorage
ReadClassStg
StgCreateDocfile

psapi

EnumProcessModules
GetModuleBaseNameA
GetModuleFileNameExA

winmm

waveInGetDevCapsA
waveInReset
waveInStart
waveInAddBuffer
waveInPrepareHeader
waveInOpen
waveInGetNumDevs

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

shlwapi

StrStrIA
StrToIntExA

imm32

ImmAssociateContext

Sections

.text
Size: 56KB - Virtual size: 56KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 33KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.fast
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.flash
Size: 103KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 91KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3bf5c727e360f25e185e011e0f59171e

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

psapi

winmm

version

shlwapi

imm32

Sections

.text Size: 56KB - Virtual size: 56KB

.rdata Size: 33KB - Virtual size: 33KB

.data Size: 4KB - Virtual size: 12KB

.fast Size: 99KB - Virtual size: 98KB

.flash Size: 103KB - Virtual size: 102KB

.rsrc Size: 91KB - Virtual size: 90KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 56KB - Virtual size: 56KB

.rdata
Size: 33KB - Virtual size: 33KB

.data
Size: 4KB - Virtual size: 12KB

.fast
Size: 99KB - Virtual size: 98KB

.flash
Size: 103KB - Virtual size: 102KB

.rsrc
Size: 91KB - Virtual size: 90KB

.reloc
Size: 9KB - Virtual size: 9KB