TheMoerper_external[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

TheMoerper_external.exe
Size

295KB
MD5

ba9cc64f54e54f4d269eff4f2aa15fe6
SHA1

800d3cc83547797dcb0043cce76b7dfdc987da91
SHA256

df48748984830734d3c32be6f04ca5fbafc1a3ed99203655ed235ff1ef8ded8c
SHA512

389c388e5711a5346e7a8d7de85ed852a0138a80ee1a13dae54b507d913b533811cf4b6ee9223be3953586e13a5604aee5ea8a3e50d84daab6f5fbd3735d8466
SSDEEP

6144:ILeXjMwpsjKuJ59rl4cuYAygZPpUimsovsgkuVJm0AOzgc+XF:ILLKuJ59mcuYAyjsYdkuVJp+bXF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TheMoerper_external.exe

Files

TheMoerper_external.exe
.exe windows x86

3fc860ea85475da38e7758d6921f914f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WriteProcessMemory
Sleep
ReadProcessMemory
GetConsoleWindow
SetConsoleTitleW
OpenProcess
CreateToolhelp32Snapshot
CloseHandle
Module32FirstW
Module32NextW
VirtualProtectEx
SetEndOfFile
WriteConsoleW
HeapSize
CreateFileW
GetProcessHeap
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
GetCurrentThreadId
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
MultiByteToWideChar
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
CompareStringW
LCMapStringW
GetLocaleInfoW
QueryPerformanceCounter
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetLastError
SetEvent
CreateThread
GetCurrentThread
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
GetModuleFileNameW
LoadLibraryExW
RtlUnwind
RaiseException
ExitThread
GetModuleHandleExW
GetStdHandle
WriteFile
ExitProcess
GetCommandLineA
GetCommandLineW
GetFileSizeEx
SetFilePointerEx
GetFileType
HeapAlloc
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapFree
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
ReadFile
ReadConsoleW
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP

user32

FindWindowW
SendInput
GetWindowRect
MoveWindow
GetAsyncKeyState
GetKeyState
GetWindowThreadProcessId

Sections

.text
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 74KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 480B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3fc860ea85475da38e7758d6921f914f

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

Sections

.text Size: 203KB - Virtual size: 203KB

.rdata Size: 74KB - Virtual size: 74KB

.data Size: 4KB - Virtual size: 10KB

.rsrc Size: 512B - Virtual size: 480B

.reloc Size: 11KB - Virtual size: 11KB

.text
Size: 203KB - Virtual size: 203KB

.rdata
Size: 74KB - Virtual size: 74KB

.data
Size: 4KB - Virtual size: 10KB

.rsrc
Size: 512B - Virtual size: 480B

.reloc
Size: 11KB - Virtual size: 11KB