something[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

something.exe
Size

2.2MB
MD5

90e0282e5c2ef8c5534717671c7761ac
SHA1

3c5a11830a7bbc14a39511128f10a8f606d94ede
SHA256

b64632f0790a13887c3a70221677a702f66c7c57fad88773efce7c5186fc3889
SHA512

ce07d5e05d835e2bbe64ceb778656efd6368802ea2f80320641e6b8a9474761d293a08e48638d77effbd51ec98ed15b60181ece8b2d888670326369b221d1ef0
SSDEEP

49152:eyH3dGrLUPH2mcieWnVXdhVIrDF8rDfLvcK:eyH3dGEDcieiVN3IrDF83zvcK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
something.exe

Files

something.exe
.exe windows x64

d64a235b4114e79b213bc0a7fa71a90c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
WideCharToMultiByte
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
HeapFree
HeapQueryInformation
HeapReAlloc
HeapAlloc
HeapCreate
HeapSetInformation
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
QueryPerformanceCounter
InitializeCriticalSectionAndSpinCount
IsValidCodePage
GetACP
LoadLibraryW
FlsFree
FlsAlloc
FlsSetValue
FlsGetValue
DecodePointer
EncodePointer
OutputDebugStringW
GetFileType
WriteConsoleW
OutputDebugStringA
GetStdHandle
DebugBreak
GetSystemInfo
VirtualAlloc
IsBadReadPtr
HeapValidate
HeapSize
GetStartupInfoA
GetCommandLineA
ExitProcess
RtlCaptureContext
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlPcToFileHeader
RaiseException
GetSystemTimeAsFileTime
RtlUnwindEx
RtlLookupFunctionEntry
MoveFileA
FlushFileBuffers
GetCurrentProcess
WritePrivateProfileStringA
GetModuleHandleW
TlsGetValue
LocalReAlloc
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetAtomNameA
GetOEMCP
GetCPInfo
GlobalFlags
GetModuleFileNameW
SetErrorMode
SetEvent
lstrcmpA
GetCurrentThread
GetLocaleInfoA
ConvertDefaultLocale
EnumResourceLanguagesA
GetModuleFileNameA
GlobalFree
GlobalAlloc
FormatMessageA
LocalFree
GetCurrentProcessId
GlobalLock
GlobalUnlock
MulDiv
lstrlenA
CompareStringA
SetLastError
FreeResource
lstrcmpW
FreeLibrary
GetLastError
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
GetModuleHandleA
GetVersionExA
WriteFile
SetFileTime
GetCurrentDirectoryA
LocalFileTimeToFileTime
SystemTimeToFileTime
ReadFile
CloseHandle
CreateFileA
SetFilePointer
Sleep
lstrlenW
CreateDirectoryA
GetTickCount
GetEnvironmentVariableA
FindNextFileA
FindFirstFileA
FindClose
LoadLibraryA
GetProcAddress
GetFileAttributesA
MultiByteToWideChar
FindResourceA
LoadResource
LockResource
SizeofResource
OpenEventA

user32

GetMenuItemInfoA
EnableMenuItem
CheckMenuItem
CreatePopupMenu
GrayStringA
DrawTextExA
DrawTextA
FillRect
GetSysColorBrush
EndDialog
CreateDialogIndirectParamA
GetCursorPos
GetMessageA
TranslateMessage
PostQuitMessage
IsMenu
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
GetWindowThreadProcessId
SetCursor
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
IsWindowEnabled
ShowWindow
SetWindowTextA
IsDialogMessageA
EnableWindow
GetForegroundWindow
SetForegroundWindow
GetLastActivePopup
GetNextDlgTabItem
GetDesktopWindow
GetActiveWindow
ShowOwnedPopups
IsWindowVisible
ValidateRect
InvalidateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
EndPaint
BeginPaint
ClientToScreen
BringWindowToTop
GetMenuCheckMarkDimensions
LoadBitmapA
SetMenuItemBitmaps
TabbedTextOutA
PostMessageA
RegisterWindowMessageA
MessageBoxA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
LoadIconA
SendDlgItemMessageA
LoadCursorA
wsprintfA
GetSystemMetrics
GetWindowRect
GetClientRect
MapWindowPoints
GetSysColor
PeekMessageA
DispatchMessageA
GetFocus
SetActiveWindow
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
InsertMenuItemA
ModifyMenuA
SetRectEmpty
UnregisterClassA
GetWindowPlacement
IsIconic
SystemParametersInfoA
InflateRect
PtInRect
IntersectRect
OffsetRect
SetWindowPos
SetWindowLongA
GetWindowLongA
IsWindow
GetMessagePos
GetMessageTime
GetMenu
SetMenu
DefWindowProcA
GetTopWindow
GetParent
GetWindow
GetCapture
WinHelpA
TrackPopupMenu
GetDlgItem
GetWindowTextA
GetKeyState
DestroyWindow
SendMessageA
GetDlgCtrlID
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassLongPtrA
GetClassNameA
GetWindowLongPtrA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
SetWindowLongPtrA
RemovePropA
GetClipboardFormatNameA

gdi32

CreateFontIndirectA
CreateCompatibleBitmap
CreateCompatibleDC
PtVisible
RectVisible
CreatePatternBrush
CreateSolidBrush
BitBlt
GetPixel
TextOutA
GetTextExtentPoint32A
Escape
GetDeviceCaps
GetObjectType
DeleteObject
GetClipBox
SetTextColor
SetBkColor
GetObjectA
ExtTextOutA
CreateBitmap
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetBkMode
GetStockObject
SelectObject
RestoreDC
SaveDC

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

SetThreadToken
OpenThreadToken
RegSetValueExA
RegCreateKeyExA
RegDeleteKeyA
RegOpenKeyA
RegEnumKeyA
RegQueryValueA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
RevertToSelf

shell32

DragFinish
DragQueryFileA

shlwapi

PathFindFileNameA
PathFindExtensionA

ole32

StringFromCLSID
CoTaskMemFree

oleaut32

VariantClear
VariantChangeType
VariantInit

Sections

.text
Size: 497KB - Virtual size: 496KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 149KB - Virtual size: 148KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 26KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d64a235b4114e79b213bc0a7fa71a90c

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

shlwapi

ole32

oleaut32

Sections

.text Size: 497KB - Virtual size: 496KB

.rdata Size: 149KB - Virtual size: 148KB

.data Size: 12KB - Virtual size: 36KB

.pdata Size: 26KB - Virtual size: 26KB

.rsrc Size: 1.5MB - Virtual size: 1.5MB

.reloc Size: 15KB - Virtual size: 14KB

.text
Size: 497KB - Virtual size: 496KB

.rdata
Size: 149KB - Virtual size: 148KB

.data
Size: 12KB - Virtual size: 36KB

.pdata
Size: 26KB - Virtual size: 26KB

.rsrc
Size: 1.5MB - Virtual size: 1.5MB

.reloc
Size: 15KB - Virtual size: 14KB