AOESETUP[.]EXE

Sharing

Copy URL Twitter E-mail

General

Target

AOESETUP.EXE
Size

241KB
MD5

8af8210ae77fde07b3bd53d6392006aa
SHA1

abe5bfcb2019ff7ed44f12972f2662f45405bf2d
SHA256

838d2f78da7ad0dc8d285bc47133b4dedc6d517abee76e473e1e602d8590f67d
SHA512

5d155ade13236e64415cf37120597635bab9b81c958d8aa4b8f30c0541d430febacd2d2d96da925c16a0fcf5823072af192c1f8b1afd5cc768dfa8fcd0900076
SSDEEP

6144:egZ3X4/N6P9va1KleoHvgg3O7h5gX1WCR61RH0okv8yV:eu3X4/N6lS1Qvpem1WCcf

Score

N/A

Malware Config

Signatures

Files

AOESETUP.EXE
.exe windows x86

Password: Chico

c40766dafe33d0aec157cf7cd456d343

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA
timeGetTime
waveOutGetNumDevs
joyGetNumDevs
waveOutGetDevCapsA

kernel32

CreateFileA
Sleep
WaitForSingleObject
ReleaseMutex
lstrlenA
GetFileSize
ReadFile
SetThreadPriority
CreateMutexA
CreateEventA
CloseHandle
SetEvent
lstrcmpiA
lstrcatA
CreateProcessA
GetLastError
FormatMessageA
WritePrivateProfileStringA
GetExitCodeProcess
GetPrivateProfileStringA
GetCurrentThread
ResetEvent
FreeLibrary
LocalLock
GetVersionExA
LocalAlloc
GetCurrentDirectoryA
LocalUnlock
LocalFree
GetFileAttributesA
SetCurrentDirectoryA
OutputDebugStringA
lstrcpyA
lstrcpynA
GetDiskFreeSpaceA
GlobalMemoryStatus
GetTempFileNameA
GetTempPathA
FindFirstFileA
CompareStringA
CreateDirectoryA
FlushFileBuffers
GetStringTypeW
LCMapStringW
LCMapStringA
GetStringTypeA
GetTimeZoneInformation
InterlockedIncrement
GetFullPathNameA
SetEndOfFile
SetStdHandle
InterlockedDecrement
SetHandleCount
GetOEMCP
GetStdHandle
GetCPInfo
WideCharToMultiByte
GetACP
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
RtlUnwind
UnhandledExceptionFilter
FreeEnvironmentStringsA
TlsGetValue
SetLastError
TerminateProcess
TlsAlloc
VirtualAlloc
LeaveCriticalSection
EnterCriticalSection
SetFileAttributesA
VirtualFree
HeapCreate
HeapDestroy
DeleteFileA
HeapReAlloc
ExitProcess
FileTimeToLocalFileTime
FileTimeToSystemTime
GetLocaleInfoW
SetEnvironmentVariableA
GlobalFree
GlobalUnlock
GlobalHandle
GetWindowsDirectoryA
GlobalLock
GlobalAlloc
GetSystemDirectoryA
LockResource
LoadResource
FindResourceA
GetModuleFileNameA
CompareStringW
GetSystemInfo
OpenFile
GetVersion
_hread
_lclose
_llseek
GetDriveTypeA
LoadLibraryA
GetLocaleInfoA
GetUserDefaultLCID
GetProcAddress
GetSystemDefaultLangID
MulDiv
lstrcmpA
FindClose
FindNextFileA
GetStartupInfoA
GetCommandLineA
GetCurrentProcess
GetFileType
RemoveDirectoryA
GetShortPathNameA
GetExitCodeThread
ResumeThread
CreateThread
GetThreadPriority
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount
SetFilePointer
ExitThread
WinExec
GetModuleHandleA
MoveFileExA
DeleteCriticalSection
SetPriorityClass
WriteFile
SetFileTime
DosDateTimeToFileTime
CopyFileA
SetErrorMode
LocalFileTimeToFileTime
_lwrite
InitializeCriticalSection
MultiByteToWideChar
_lcreat
HeapAlloc
HeapFree
GetCurrentThreadId
TlsSetValue

user32

LoadImageA
MessageBeep
SetForegroundWindow
GetWindowTextA
SetWindowPos
ShowWindow
IsWindow
IsWindowVisible
LoadCursorA
CreateWindowExA
RegisterClassExA
RedrawWindow
LoadIconA
UnregisterClassA
GetWindowLongA
GetUpdateRect
GetAsyncKeyState
PostQuitMessage
EndPaint
BeginPaint
KillTimer
SetWindowLongA
SetTimer
GetParent
GetCursorPos
GetWindowRect
SystemParametersInfoA
GetClientRect
GetSystemMetrics
DispatchMessageA
GrayStringA
DrawTextA
TranslateMessage
PeekMessageA
FlashWindow
DefWindowProcA
GetMessageA
SetCursor
MessageBoxA
UpdateWindow
CharNextA
CharUpperA
CharPrevA
EnumDisplaySettingsA
wvsprintfA
CreateDialogParamA
TabbedTextOutA
CharToOemBuffA
GetDlgItem
EnableMenuItem
GetSystemMenu
IsDialogMessageA
CharLowerA
ExitWindowsEx
PostMessageA
wsprintfA
InvalidateRect
SendMessageA
ReleaseDC
SetWindowTextA
MoveWindow
LoadStringA
FindWindowA
EnableWindow
GetDC
CallWindowProcA
DestroyWindow
SetFocus
GetSysColor

gdi32

RemoveFontResourceA
EndDoc
SetAbortProc
SelectPalette
BitBlt
RealizePalette
SetMapMode
GetMapMode
SelectObject
DeleteDC
DeleteObject
CreateCompatibleDC
SetTextColor
SetBkColor
ExtTextOutA
GetStockObject
GetPixel
GetTextExtentPoint32A
GetDeviceCaps
SetBkMode
GetTextMetricsA
CreateDIBSection
GetDIBColorTable
GetObjectA
CreatePalette
GetSystemPaletteEntries
CreateFontA
GdiFlush
CreateFontIndirectA
EndPage
AddFontResourceA
CreateDCA
StartDocA
StartPage

advapi32

OpenSCManagerA
OpenProcessToken
LookupPrivilegeValueA
CloseServiceHandle
RegOpenKeyExA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegEnumKeyExA
AdjustTokenPrivileges
RegQueryValueExA
RegOpenKeyA
RegDeleteValueA
RegQueryInfoKeyA

shell32

SHGetSpecialFolderLocation
SHChangeNotify
SHGetPathFromIDListA
SHBrowseForFolderA
ShellExecuteA
SHGetMalloc

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerLanguageNameA
VerQueryValueA

comdlg32

PrintDlgA

ole32

CoUninitialize
OleInitialize
OleUninitialize
CoCreateInstance
CoInitialize

lz32

LZOpenFileA
LZClose
LZCopy

Exports

Exports

_AbortDlgProc@16
_AbortProc@8
_CopyFileFn@4
_DeleteFileFn@4
_GetGroupFn@4
_InstIconFn@4
_MkRootFn@4
_QueryDirectX@8
_RunRegWizFn@0

Sections

.text
Size: 163KB - Virtual size: 162KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 41KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

Password: Chico

c40766dafe33d0aec157cf7cd456d343

Headers

File Characteristics

Imports

winmm

kernel32

user32

gdi32

advapi32

shell32

version

comdlg32

ole32

lz32

Exports

Exports

Sections

.text Size: 163KB - Virtual size: 162KB

.rdata Size: 5KB - Virtual size: 4KB

.data Size: 17KB - Virtual size: 41KB

.idata Size: 7KB - Virtual size: 7KB

.rsrc Size: 48KB - Virtual size: 47KB

.text
Size: 163KB - Virtual size: 162KB

.rdata
Size: 5KB - Virtual size: 4KB

.data
Size: 17KB - Virtual size: 41KB

.idata
Size: 7KB - Virtual size: 7KB

.rsrc
Size: 48KB - Virtual size: 47KB