items list[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

items list.exe
Size

1.2MB
MD5

4696d80b36ce5d3eb843e99bd1717b81
SHA1

bacd3f8cb63f045256163698bf6a469199e7fc5b
SHA256

90ebeaa9a68ea0c1bf9aff1f7902d545fd5623af7aba90d8cbc53ece47f43f51
SHA512

93f3f1fdf0ae99a05a5233b4ac3be3261759f7af581ce07d713feffdfb4bc5b62fd9529fa2fb5dacb712de678c50acd18a59a325a84109ec4ad56ea67a3f79fe
SSDEEP

12288:HzRRGL95MC/Paii8uu1nIT2TZObMtaq0alLq4f3mGKJi7Xja/q5opEc:H8xM2TZMkFlW4f3mJY7Xjrw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
items list.exe

Files

items list.exe
.exe windows x86

98fa37d1d3e352e1f164779b751f715d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsValidCodePage
FindNextFileW
FindNextFileA
FindFirstFileExW
FindFirstFileExA
FindClose
CreateThread
WaitForSingleObjectEx
CloseHandle
OutputDebugStringW
OutputDebugStringA
GetCurrentThread
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetOEMCP
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetSystemInfo
HeapValidate
HeapAlloc
GetACP
GetCommandLineW
GetCommandLineA
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameA
GetModuleFileNameW
WriteFile
GetStdHandle
GetModuleHandleExW
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
SetStdHandle
GetStringTypeW
GetProcessHeap
SetConsoleCtrlHandler
HeapFree
HeapReAlloc
HeapQueryInformation
WriteConsoleW
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
CreateFileW
EncodePointer
FreeConsole
Sleep
VirtualProtect
VirtualAlloc
RaiseException
GetLocaleInfoW
HeapSize
ExitProcess
LoadLibraryExW
GetProcAddress
FreeLibrary
DecodePointer
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
InterlockedPushEntrySList
InterlockedFlushSList
RtlUnwind
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection

user32

GetClassLongW
SetClassLongW
GetSysColor
SetMenuItemInfoW
DrawMenuBar
MessageBoxA
DialogBoxParamW
SystemParametersInfoW
MessageBeep
CreateWindowExW
CheckMenuRadioItem
EndDialog
FindWindowW
GetAncestor
CreatePopupMenu
TrackPopupMenu
CreateDialogParamW
GetProcessDefaultLayout
EnumDesktopWindows
SetPropW
EnumChildWindows
GetSystemMetrics
GetDC
ReleaseDC
DrawTextW
RegisterClassExW
SetWindowPlacement
SetForegroundWindow
GetMessageW
TranslateAcceleratorW
GetMessageExtraInfo
TranslateMessage
DispatchMessageW
GetFocus
PostQuitMessage
InvalidateRect
DefWindowProcW
IsClipboardFormatAvailable
GetMenuState
OpenClipboard
GetClipboardData
CloseClipboard
EmptyClipboard
SetClipboardData
CharNextA
PostMessageW
IsWindowEnabled
SetWindowLongW
InsertMenuItemW
GetWindowLongW
GetSubMenu
RemoveMenu
AppendMenuW

gdi32

SetBkMode
SetTextColor
CreatePatternBrush
SelectObject
CombineRgn
SetRectRgn
CreateRectRgnIndirect
CreateRectRgn
CreateCompatibleBitmap
ExtCreatePen
MoveToEx
LineTo
GetObjectW
GetTextExtentPoint32W
GetTextMetricsW
CreateSolidBrush
GetRgnBox
GetDeviceCaps
CreateCompatibleDC
CreateFontIndirectW
GetTextExtentPointW
DeleteDC
DeleteObject
CreateDIBSection
EqualRgn
GetStockObject

rpcrt4

UuidCreate
UuidToStringW
RpcStringFreeW
I_UuidCreate

version

GetFileVersionInfoSizeExW
VerQueryValueW
GetFileVersionInfoExW

winmm

timeGetTime

Sections

.text
Size: 572KB - Virtual size: 572KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 136KB - Virtual size: 136KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 521KB - Virtual size: 526KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 6KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.gfids
Size: 1024B - Virtual size: 990B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.00cfg
Size: 512B - Virtual size: 260B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

98fa37d1d3e352e1f164779b751f715d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

rpcrt4

version

winmm

Sections

.text Size: 572KB - Virtual size: 572KB

.rdata Size: 136KB - Virtual size: 136KB

.data Size: 521KB - Virtual size: 526KB

.idata Size: 6KB - Virtual size: 6KB

.gfids Size: 1024B - Virtual size: 990B

.00cfg Size: 512B - Virtual size: 260B

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 21KB - Virtual size: 21KB

.text
Size: 572KB - Virtual size: 572KB

.rdata
Size: 136KB - Virtual size: 136KB

.data
Size: 521KB - Virtual size: 526KB

.idata
Size: 6KB - Virtual size: 6KB

.gfids
Size: 1024B - Virtual size: 990B

.00cfg
Size: 512B - Virtual size: 260B

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 21KB - Virtual size: 21KB