supremacy[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

supremacy.exe
Size

445KB
MD5

dd8d6d7d26aff8a2b2569c1bfcf06ea4
SHA1

5dbfa3988f6dee739e0e6f8a4170b917e44a9607
SHA256

0219a643c8245fc66a24fdfb81d63d336db56ca3d6589bf7d6d3f8aeae93d46f
SHA512

3f74181c85fe1a9dd27f9346abad44d3d4ad986a680f79e78b5ade29eff3566da6b3ba4dd35b884577537785fe46379480e53be28f46cb802f69bcbf7bf90a99
SSDEEP

12288:A8ov/3kDCM6gCFHhP/SkxnkbvIPz8ZLNoGu2sEtJJB3Wo9:fmPA6phdazIPzytJJB3v9

Score

N/A

Malware Config

Signatures

Files

supremacy.exe
.exe windows x86

a716ee4220f0563f85896dd03f01f1ed

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

d3d9

Direct3DCreate9

kernel32

OpenProcess
GetTickCount
TerminateProcess
GetModuleFileNameW
CreateToolhelp32Snapshot
Sleep
Process32NextW
Process32FirstW
CloseHandle
CreateProcessW
CreateThread
GetModuleHandleW
GetCurrentProcess
WriteProcessMemory
ReadProcessMemory
VirtualQueryEx
GetLastError
QueryPerformanceFrequency
GetModuleFileNameA
GetProcAddress
LoadLibraryExA
FormatMessageA
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
CreateEventW
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
QueryPerformanceCounter
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
DeleteCriticalSection
InitializeSListHead
FreeLibrary
SetEvent
ResetEvent

user32

DefWindowProcW
GetWindowThreadProcessId
SendMessageW
FindWindowW
GetKeyState
DestroyWindow
ClientToScreen
IsChild
GetForegroundWindow
LoadCursorW
SetCapture
SetCursor
GetClientRect
CreateWindowExW
UnregisterClassW
RegisterClassExW
ShowWindow
DispatchMessageW
PeekMessageW
TranslateMessage
PostQuitMessage
GetCapture
ReleaseCapture
SetCursorPos
GetCursorPos
GetAsyncKeyState
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
UpdateWindow
ScreenToClient

advapi32

GetTokenInformation
AdjustTokenPrivileges
OpenProcessToken

imm32

ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow

xinput1_3

ord2
ord4

msvcp140

?_Xlength_error@std@@YAXPBD@Z

vcruntime140

__current_exception_context
memset
_except_handler4_common
_CxxThrowException
strrchr
memchr
_setjmp3
longjmp
memcpy
__std_exception_copy
__std_exception_destroy
strchr
strstr
__std_terminate
__CxxFrameHandler3
__current_exception
memmove

api-ms-win-crt-stdio-l1-1-0

fread
__stdio_common_vsprintf
__stdio_common_vswprintf
feof
_wfopen
fgets
ferror
tmpnam
ftell
__p__commode
__acrt_iob_func
fflush
fclose
ungetc
tmpfile
setvbuf
_popen
_pclose
_ftelli64
_fseeki64
clearerr
fopen
__stdio_common_vsscanf
fseek
_set_fmode
fwrite
freopen
getc
__stdio_common_vfprintf

api-ms-win-crt-string-l1-1-0

tolower
strcoll
isdigit
strspn
strpbrk
strncpy
isalnum
isspace
toupper
isalpha
isupper
islower
ispunct
isgraph
iscntrl
isxdigit
strcpy_s
strncmp

api-ms-win-crt-utility-l1-1-0

rand
qsort
srand

api-ms-win-crt-heap-l1-1-0

_callnewh
realloc
free
malloc
_set_new_mode

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_seh_filter_exe
_set_app_type
system
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_get_initial_narrow_environment
_initterm
terminate
_initterm_e
__p___argc
__p___argv
_c_exit
abort
_register_thread_local_exe_atexit_callback
strerror
_controlfp_s
_errno
_invalid_parameter_noinfo_noreturn
_cexit
exit
_wassert
_exit

api-ms-win-crt-convert-l1-1-0

strtod
atof

api-ms-win-crt-time-l1-1-0

_time64
_gmtime64
strftime
_localtime64
clock
_mktime64
_difftime64

api-ms-win-crt-locale-l1-1-0

localeconv
setlocale
_configthreadlocale

api-ms-win-crt-math-l1-1-0

ldexp
_CItanh
_CIsinh
_libm_sse2_log10_precise
_CIfmod
_libm_sse2_pow_precise
floor
_libm_sse2_log_precise
frexp
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
_libm_sse2_tan_precise
_libm_sse2_exp_precise
ceil
_libm_sse2_acos_precise
_libm_sse2_asin_precise
__setusermatherr
_libm_sse2_cos_precise
_CIcosh
_CIatan2

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-filesystem-l1-1-0

remove
rename

Sections

.text
Size: 357KB - Virtual size: 357KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a716ee4220f0563f85896dd03f01f1ed

Headers

DLL Characteristics

File Characteristics

Imports

d3d9

kernel32

user32

advapi32

imm32

xinput1_3

msvcp140

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

Sections

.text Size: 357KB - Virtual size: 357KB

.rdata Size: 70KB - Virtual size: 70KB

.data Size: 1024B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 14KB - Virtual size: 14KB

.text
Size: 357KB - Virtual size: 357KB

.rdata
Size: 70KB - Virtual size: 70KB

.data
Size: 1024B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 14KB - Virtual size: 14KB