main[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

main.exe
Size

1.4MB
MD5

a8930beb9dfd4244f7fd7c6365415578
SHA1

435b7d2d24046716c28a2f8279fdf9f1a3e8f400
SHA256

1318db0123a8399fd79b9860b17b6272466b38523c66949588c5577ef3420998
SHA512

cb89b6022d869b4976fca0d511b21bec40026b6c063c63c37ec21b94e9c2bf2323c29f1e9f63dee6d687d0d51e6ee583675d39f3806fa22321ec008855b17d6b
SSDEEP

24576:x0q/U4DUjsFv1wiFSH2G8mjwbPMzD6QlS0C6OcuBAWUbRtePa+zL:xN/UtiNbPAWcuBNUOPaK

Score

N/A

Malware Config

Signatures

Files

main.exe
.exe windows x86

86476e02799d1ea0a94e526b9370a492

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmGetContext
ImmGetDefaultIMEWnd
ImmSetConversionStatus
ImmReleaseContext
ImmGetDescriptionA
ImmGetConversionStatus
ImmGetIMEFileNameA

dsound

ord2
ord1

opengl32

glVertex2f
glEnable
glDepthFunc
glVertex3fv
glColor4f
glTexImage2D
glTexEnvf
glPixelStorei
glBindTexture
glTexParameteri
glIsTexture
glDeleteTextures
wglDeleteContext
wglMakeCurrent
wglCreateContext
glPushMatrix
glPopMatrix
glTranslatef
glRotatef
glGenTextures
glLoadIdentity
glDisable
glDepthMask
glColor3fv
glTexCoord2f
glVertex3f
glBegin
glEnd
glGetString
glGetIntegerv
glColor3f
glMatrixMode
glReadPixels
glGetFloatv
glClearColor
glClear
glFlush
glAlphaFunc
glFogi
glFogf
glFogfv
glViewport
glBlendFunc

glu32

gluPerspective
gluOrtho2D

winmm

mmioRead
timeGetTime
mmioAscend
mmioClose
mmioOpenA
mmioDescend

kernel32

UnhandledExceptionFilter
CreateThread
EnterCriticalSection
LeaveCriticalSection
GetCurrentProcessId
GetCurrentThreadId
CreateDirectoryA
lstrcatA
GetModuleFileNameA
InitializeCriticalSection
OpenEventA
SetEvent
CreateEventA
CreateProcessA
WaitForSingleObject
GetExitCodeProcess
GetModuleHandleA
ResetEvent
ResumeThread
SetEndOfFile
DeleteCriticalSection
CloseHandle
WriteFile
SetFilePointer
CreateFileA
Sleep
DeleteFileA
ReadFile
GetLocalTime
GetSystemDirectoryA
lstrcmpiA
GetVersionExA
QueryPerformanceCounter
SetProcessAffinityMask
SetThreadPriority
SetPriorityClass
GetProcessAffinityMask
GetThreadPriority
GetPriorityClass
GetCurrentThread
GetCurrentProcess
QueryPerformanceFrequency
OutputDebugStringA
FreeLibrary
GetProcAddress
LoadLibraryA
GlobalMemoryStatus
IsBadReadPtr
GetThreadContext
lstrlenA
WinExec
GetCommandLineA
GetFileSize
GetTickCount
GetPrivateProfileStringA
GetCurrentDirectoryA
CopyFileA
TerminateProcess
FindFirstFileA
FindClose
GetLastError
SetUnhandledExceptionFilter
WideCharToMultiByte
ReleaseMutex
CreateMutexA
GetComputerNameA
InterlockedExchange
GetLocaleInfoW
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
IsBadCodePtr
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetEnvironmentVariableA
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
TerminateThread
GetFileType
SetHandleCount
GetUserDefaultLCID
EnumSystemLocalesA
GetLocaleInfoA
IsValidCodePage
IsValidLocale
LCMapStringW
LCMapStringA
MultiByteToWideChar
GetOEMCP
lstrcmpA
GetACP
GetCPInfo
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
ExitProcess
DuplicateHandle
SetStdHandle
CreatePipe
GetStdHandle
PeekNamedPipe
FlushFileBuffers
RtlUnwind
RaiseException
InterlockedDecrement
InterlockedIncrement
GetTimeZoneInformation
GetSystemTime
GetStartupInfoA
GetVersion
HeapAlloc
HeapFree
GetFileAttributesA
HeapReAlloc
HeapSize

user32

wvsprintfA
SendMessageA
MessageBoxA
GetKeyboardLayoutNameA
GetKeyboardLayout
ShowCursor
ChangeDisplaySettingsA
wsprintfA
ShowWindow
ReleaseDC
GetDC
CreateWindowExA
SetFocus
GetAsyncKeyState
SetTimer
SetRect
SetCursorPos
EnumDisplaySettingsA
UpdateWindow
RegisterHotKey
PeekMessageA
GetMessageA
DispatchMessageA
IsIconic
LoadIconA
LoadCursorA
RegisterClassA
SetForegroundWindow
TranslateMessage
PostQuitMessage
DefWindowProcA
SystemParametersInfoA
FindWindowA
PostMessageA

gdi32

SelectObject
GetTextExtentPointA
TextOutA
SetTextColor
DeleteObject
DeleteDC
CreateCompatibleDC
SetPixelFormat
SwapBuffers
CreateDIBSection
SetBkMode
GetTextExtentPoint32A
CreateFontA
GetStockObject
ChoosePixelFormat

advapi32

CryptDeriveKey
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetUserNameA
RegSetValueExA
CryptAcquireContextA
CryptReleaseContext
CryptDestroyKey
CryptDestroyHash
CryptDecrypt
CryptImportKey
CryptCreateHash
CryptHashData
CryptVerifySignatureA

ole32

CoCreateInstance
CoUninitialize
CoInitialize

ws2_32

WSAAsyncSelect
socket
gethostbyname
inet_addr
htons
recv
closesocket
WSAStartup
WSACleanup
send
WSAGetLastError
connect

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 64KB - Virtual size: 126.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

86476e02799d1ea0a94e526b9370a492

Headers

File Characteristics

Imports

imm32

dsound

opengl32

glu32

winmm

kernel32

user32

gdi32

advapi32

ole32

ws2_32

version

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 24KB - Virtual size: 21KB

.data Size: 64KB - Virtual size: 126.4MB

.rsrc Size: 12KB - Virtual size: 8KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 24KB - Virtual size: 21KB

.data
Size: 64KB - Virtual size: 126.4MB

.rsrc
Size: 12KB - Virtual size: 8KB