I Wanna Be The Boshy[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

I Wanna Be The Boshy.exe
Size

130.4MB
MD5

349f4f81fa9c414eea8e63bae93e80d6
SHA1

e94c52922837d28f0c11b79f31b048d2e5175b63
SHA256

dc6a1a551254f1d1003d14c0bf58f639a7ea94f99f74b5c635ddaf9bc4ec0806
SHA512

5511511a16774708db4402a74b6d87c1457a8476aca1cad467ee91420b8d3087f4da51b07622b670f8ae2d273d9708ef76f6a8c4aa7b3b3101e58c3ab73437bf
SSDEEP

3145728:z6dIgEczmtSVL212+7BylgIztpslbP5M+4/xRVY6cJ+w:zAt6QL212+7MgspsllM+cxoB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
I Wanna Be The Boshy.exe

Files

I Wanna Be The Boshy.exe
.exe windows x86

89ce6f379f7ac7e358dc4fb54941c9c7

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GlobalDeleteAtom
GetStartupInfoA
GetModuleHandleA
GlobalAddAtomA
RaiseException
InterlockedExchange
LocalAlloc
GetTempFileNameA
GetVersion
GetVersionExA
lstrcpynA
lstrcpyA
lstrcmpA
lstrcatA
lstrlenA
GlobalFree
GetTempPathA
GetCurrentDirectoryA
GetSystemTime
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileA
FindClose
SetErrorMode
GlobalAlloc
GlobalLock
GlobalUnlock
GetExitCodeProcess
GetCommandLineA
SetCurrentDirectoryA
Sleep
CreateDirectoryA
CloseHandle
SetFilePointer
GetProcAddress
WriteFile
ReadFile
GetLastError
CreateFileA
GetCurrentThreadId
RemoveDirectoryA
GetModuleFileNameA
FreeLibrary
LoadLibraryA

user32

PostQuitMessage
IntersectRect
DrawFocusRect
SetRect
InvertRect
GetMenuItemID
GetMenuStringA
ModifyMenuA
DefMDIChildProcA
IsIconic
GetUpdateRect
FillRect
SetDlgItemTextA
EndPaint
PtInRect
GetDlgItem
MapVirtualKeyA
GetInputState
GetDlgItemTextA
SendDlgItemMessageA
EndDialog
SystemParametersInfoA
DestroyMenu
LoadMenuIndirectA
GetMenuItemCount
SetWindowPlacement
GetWindowPlacement
GetFocus
RemovePropA
CallWindowProcA
SetPropA
GetPropA
UnionRect
CreateWindowExA
SetScrollRange
SetScrollPos
DestroyWindow
GetParent
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetSysColor
DispatchMessageA
TranslateMessage
TranslateMDISysAccel
DrawEdge
DrawTextA
DrawMenuBar
GetTabbedTextExtentA
SetFocus
GetDesktopWindow
GetMessageA
PeekMessageA
MsgWaitForMultipleObjects
ReleaseDC
CreateIconIndirect
GetDC
RedrawWindow
SetWindowLongA
UpdateWindow
LoadStringA
MessageBoxA
DialogBoxParamA
GetTopWindow
GetClassNameA
GetWindow
LoadIconA
RegisterClassA
LoadImageA
RegisterClassExA
OemToCharA
GetAsyncKeyState
GetActiveWindow
ShowCursor
SetCapture
ReleaseCapture
GetKeyState
GetWindowRect
MapWindowPoints
GetSystemMetrics
IsWindowVisible
LockWindowUpdate
SendMessageA
GetWindowLongA
AdjustWindowRectEx
IsZoomed
SetWindowPos
GetClientRect
SetWindowTextA
IsDialogMessageA
SetTimer
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
IsClipboardFormatAvailable
wsprintfA
ShowWindow
PostMessageA
CheckMenuItem
EnableMenuItem
GetMenu
InvalidateRect
ClientToScreen
SetCursorPos
GetKeyboardState
GetCursorPos
ScreenToClient
CopyRect
UnhookWindowsHookEx
KillTimer
SetWindowsHookExA
CallNextHookEx
DestroyIcon
GetMenuState
DeleteMenu
GetSubMenu
BeginPaint

gdi32

LPtoDP
TextOutA
SetPolyFillMode
Polygon
CreateHatchBrush
DPtoLP
SetTextAlign
GetNearestPaletteIndex
SetBkColor
SetROP2
GetTextMetricsA
GetCharWidthA
GetTextExtentPointA
CreateRectRgn
GetClipRgn
ExcludeClipRect
SelectClipRgn
SetTextColor
SetBkMode
GetStockObject
CreateSolidBrush
CreatePen
Rectangle
SelectObject
MoveToEx
LineTo
GetObjectA
CreateFontIndirectA
SelectPalette
RealizePalette
GetDeviceCaps
CreatePalette
CreateBitmap
CreateCompatibleBitmap
SetDIBits
DeleteObject

comdlg32

GetSaveFileNameA
GetOpenFileNameA

shell32

DragAcceptFiles
ShellExecuteExA
DragQueryFileA

comctl32

ord17

winmm

timeEndPeriod
timeBeginPeriod
joyGetPosEx
joyGetDevCapsA
timeGetTime

msvcrt

modf
toupper
_stricmp
strncpy
_errno
_rmdir
strrchr
strchr
strncat
_chdir
_mkdir
_ltoa
sprintf
_fcvt
_gcvt
__CxxFrameHandler
realloc
calloc
memmove
??2@YAPAXI@Z
remove
??3@YAXPAX@Z
_ftol
free
malloc
atof
ceil
floor
_CIasin
_CIacos
strstr
_CIfmod
_CIpow
_chdrive
_splitpath
_findnext
_findfirst
_heapmin
_msize
isspace
tolower
isdigit
isalpha
_makepath
_strnicmp
isalnum
_strupr
__dllonexit
_onexit
_exit
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
__setusermatherr
_strlwr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_findclose

Sections

.text
Size: 328KB - Virtual size: 325KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 300KB - Virtual size: 296KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

89ce6f379f7ac7e358dc4fb54941c9c7

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

comctl32

winmm

msvcrt

Sections

.text Size: 328KB - Virtual size: 325KB

.rdata Size: 12KB - Virtual size: 10KB

.data Size: 16KB - Virtual size: 15KB

.rsrc Size: 300KB - Virtual size: 296KB

.text
Size: 328KB - Virtual size: 325KB

.rdata
Size: 12KB - Virtual size: 10KB

.data
Size: 16KB - Virtual size: 15KB

.rsrc
Size: 300KB - Virtual size: 296KB