96f757110069e6d69ce2e7c624546dfe9b239f7e2418e3b3585d32013b2cf838N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

96f757110069e6d69ce2e7c624546dfe9b239f7e2418e3b3585d32013b2cf838N.exe
Size

653KB
MD5

dda6fc3c4eba8de0e9f4ea9fef679be0
SHA1

43e1a8c1f259042e8080ebda0d52d44f402739a0
SHA256

96f757110069e6d69ce2e7c624546dfe9b239f7e2418e3b3585d32013b2cf838
SHA512

d405d54aacb0cecf7c5deeed1ea4007dd8abe7ab65bdf1a88cef43adafb60477a086a48b225e1a3d6871632e41f6b0ac36d5d52341fd5efaab676ab75d6103ff
SSDEEP

12288:Ay6DtFmTew940ra5aDMAS5e89OQIOXLE8kfyxD8Mh8oXSeaMNIg3qIm:Ay6DtFmT1MAS5e85jLQ2D8CXSgag6I

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
96f757110069e6d69ce2e7c624546dfe9b239f7e2418e3b3585d32013b2cf838N.exe

Files

96f757110069e6d69ce2e7c624546dfe9b239f7e2418e3b3585d32013b2cf838N.exe
.exe windows:5 windows x86 arch:x86

e46e521ae3203aa0c3d690bfce9da607

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

MultiByteToWideChar
GetLastError
VirtualFree
GetACP
CreateProcessA
lstrcmpiW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetModuleFileNameW
InterlockedPushEntrySList
InterlockedFlushSList
RaiseException
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RtlUnwind
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
GetStdHandle
WriteFile
GetModuleFileNameA
WideCharToMultiByte
ExitProcess
GetModuleHandleExW
HeapFree
HeapAlloc
GetStringTypeW
GetCurrentThread
GetFileType
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetTimeZoneInformation
OutputDebugStringA
OutputDebugStringW
CloseHandle
WaitForSingleObjectEx
CreateThread
FindClose
FindFirstFileExA
FindFirstFileExW
FindNextFileA
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetStdHandle
GetProcessHeap
SetConsoleCtrlHandler
HeapSize
HeapReAlloc
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
EncodePointer
DecodePointer
WriteConsoleW
CreateFileW
GetVersion

gdi32

GetCharABCWidthsFloatA
GetColorSpace
GdiGetBatchLimit

advapi32

SystemFunction036
AddAuditAccessAce

Sections

.text
Size: 289KB - Virtual size: 288KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 420B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e46e521ae3203aa0c3d690bfce9da607

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

gdi32

advapi32

Sections

.text Size: 289KB - Virtual size: 288KB

.rdata Size: 35KB - Virtual size: 34KB

.data Size: 3KB - Virtual size: 8KB

.gfids Size: 512B - Virtual size: 420B

.rsrc Size: 3KB - Virtual size: 3KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 289KB - Virtual size: 288KB

.rdata
Size: 35KB - Virtual size: 34KB

.data
Size: 3KB - Virtual size: 8KB

.gfids
Size: 512B - Virtual size: 420B

.rsrc
Size: 3KB - Virtual size: 3KB

.reloc
Size: 9KB - Virtual size: 9KB