5d0cbf4bbb75974493a2287606fe39bd8557d3b91c9e8926acb5c7ea42779f2dN[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

5d0cbf4bbb75974493a2287606fe39bd8557d3b91c9e8926acb5c7ea42779f2dN.exe
Size

357KB
MD5

f84b2d054cec6a6f9da3894633aff060
SHA1

38bebafa063b8198bfab98b7b2fae7685a48c730
SHA256

5d0cbf4bbb75974493a2287606fe39bd8557d3b91c9e8926acb5c7ea42779f2d
SHA512

988c926a03a3fb2b4414b10e6a89caba74bf21e3c6d98a3b56f557aafcd703491c8429b87d0b34d387a8a77013e037395af9729ee8c64ff19c89a3e04f6066c7
SSDEEP

6144:A0jY0jskbqkwDrooNz3+hBkqYB0Mv/KHFLC2FfeQ7qF1FrVOVb/F0jDDu0j:A0jY0jFHwAkzkmRB0iKtC2FcF1fOVbtK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5d0cbf4bbb75974493a2287606fe39bd8557d3b91c9e8926acb5c7ea42779f2dN.exe

Files

5d0cbf4bbb75974493a2287606fe39bd8557d3b91c9e8926acb5c7ea42779f2dN.exe
.exe windows:4 windows x86 arch:x86

2188232803ce11f32b237a747a49a40e

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

VirtualAlloc
GetLastError
GetModuleHandleA
LocalAlloc
InterlockedExchange
LoadLibraryA
RaiseException
GetStartupInfoA
GetLongPathNameW
GetFullPathNameW
FindClose
FindFirstFileW
FreeLibrary
FormatMessageW
VirtualFree
GetSystemTimeAsFileTime
CopyFileW
lstrcpyW
OutputDebugStringW
SetFilePointer
GetModuleFileNameW
GetEnvironmentVariableW
LocalFree
GlobalAlloc
GlobalFree
CreateMutexW
CloseHandle
UnmapViewOfFile
CreateFileW
GetFileSize
CreateFileMappingW
MapViewOfFile
ReadFile
WriteFile
GetVersionExW
lstrlenW
GetModuleHandleW
MultiByteToWideChar
WideCharToMultiByte
lstrcmpW
ExitProcess
GetCurrentThreadId
GetCommandLineW
GlobalLock
GlobalUnlock
FlushInstructionCache
GetCurrentProcess
GetProcAddress
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetSystemInfo
SleepEx
SetEndOfFile
LoadLibraryW
GetProcessIoCounters
GetProcessTimes
FindFirstVolumeMountPointW
SetVolumeMountPointA
GetConsoleAliasesA
WriteConsoleOutputCharacterW
GetCurrencyFormatW
DnsHostnameToComputerNameA
GetConsoleTitleW
UnlockFile
GetHandleInformation
lstrcmpiW
GetProcessAffinityMask
GetFileType
BackupSeek
GetTempFileNameA
SetFileAttributesA
GetPrivateProfileStringW
EnumTimeFormatsW
GetTimeZoneInformation
BackupRead
ReadFileEx
FindFirstChangeNotificationW
VirtualQueryEx
GetTickCount
LocalCompact
GetFileTime
LocalUnlock
CreateFileA
GetLocalTime
GetSystemTime
InitializeCriticalSection
DeleteCriticalSection
TerminateThread
InterlockedIncrement
CreateMutexA
CreatePipe
GetTempPathA
SetEnvironmentVariableA
CompareStringW
CompareStringA
FlushFileBuffers
LCMapStringW
LCMapStringA
SetStdHandle
GetCommandLineA
lstrcmpiA
Sleep
CreateEventA
CreateThread
WaitForSingleObject
InterlockedDecrement
ReleaseMutex
SetEvent
GetOEMCP
GetACP
GetCPInfo
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
RtlUnwind
GetVersion
TlsSetValue
TlsAlloc
SetLastError
TlsGetValue
EnterCriticalSection
LeaveCriticalSection
TerminateProcess
UnhandledExceptionFilter
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetEnvironmentVariableA
GetVersionExA
IsBadWritePtr
GetStringTypeA
GetStringTypeW
GetCurrentProcessId

user32

ReleaseCapture
LoadCursorW
LoadCursorFromFileA
EndDialog
ShowWindow
GetParent
wsprintfW
SetWindowLongW
RemovePropW
GetPropW
SetPropW
DialogBoxParamW
GetDlgItem
OpenClipboard
PostMessageW
CloseClipboard
EmptyClipboard
SetClipboardData
SendMessageW
FindWindowW
MessageBoxW
SetWindowTextW
LoadImageW
LoadIconW
CallMsgFilter
DeferWindowPos
DdeAbandonTransaction
IsWindow
RegisterDeviceNotificationA
CharLowerA
GetKeyboardLayoutList
RegisterClassExA
AnyPopup
GetMenu
SetWindowPos
EndPaint
GetDlgItemTextA
MessageBoxA
GetDlgCtrlID
GetWindowLongA
SetWindowTextA
SendDlgItemMessageA
DialogBoxParamA
PostThreadMessageA
CharNextA
SetWindowLongA
EnableWindow
BeginPaint
SendMessageA
DispatchMessageA
GetMessageA

gdi32

GetEnhMetaFileBits
GetStockObject
CreateFontIndirectA
GetClipBox
CreateHalftonePalette
GetETM
Polygon
GetDIBColorTable
SetWinMetaFileBits
CreateEllipticRgn
CreateICA
PATHOBJ_vEnumStart
RemoveFontMemResourceEx
BeginPath
SelectFontLocal
GdiInitializeLanguagePack
GetCharWidthFloatA
ExtFloodFill
GetTextCharacterExtra
GetTextExtentExPointA
WidenPath
GdiEndPageEMF
AddFontMemResourceEx
CLIPOBJ_bEnum
GetLogColorSpaceA

advapi32

RegOpenKeyW
RegQueryValueExA
GetUserNameA

shell32

SHGetFolderPathW
SHCreateDirectoryExW
CommandLineToArgvW
ShellExecuteW
DuplicateIcon
SHBrowseForFolderW
ShellAboutW
SHInvokePrinterCommandW
WOWShellExecute

ole32

OleUninitialize
CoTaskMemFree
CoRevokeClassObject
OleInitialize
CoResumeClassObjects
CoRegisterClassObject
CoCreateInstance
CLSIDFromProgID
CoDisconnectObject
CoInitialize
CoUninitialize

shlwapi

PathRemoveFileSpecW
PathAppendW
PathFileExistsW
PathFindExtensionW
StrCmpIW
PathFindFileNameW
StrCmpNW
PathStripToRootW
PathIsRootW
PathIsUNCW
PathRemoveBackslashW
StrChrIW
StrCmpNIW
StrStrIA

comctl32

InitCommonControlsEx
PropertySheetW

Sections

.text
Size: 35KB - Virtual size: 35KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 341B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data2
Size: 271KB - Virtual size: 271KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data3
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 628B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2188232803ce11f32b237a747a49a40e

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

comctl32

Sections

.text Size: 35KB - Virtual size: 35KB

.rdata Size: 512B - Virtual size: 341B

.data2 Size: 271KB - Virtual size: 271KB

.data Size: 27KB - Virtual size: 27KB

.data3 Size: 20KB - Virtual size: 19KB

.rsrc Size: 1024B - Virtual size: 628B

.text
Size: 35KB - Virtual size: 35KB

.rdata
Size: 512B - Virtual size: 341B

.data2
Size: 271KB - Virtual size: 271KB

.data
Size: 27KB - Virtual size: 27KB

.data3
Size: 20KB - Virtual size: 19KB

.rsrc
Size: 1024B - Virtual size: 628B