01598099[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

01598099.exe
Size

79KB
MD5

a5dbe381d916be461b7e103069d184b3
SHA1

05948069fecd91e80ef08958ff2d8bcc983db360
SHA256

e65f867d40587a1449fdfa6a57c9532cfd735d593a7d7db762bddbc91645ffe5
SHA512

20576b91c035abe8d5ed6bf93d5c5a5cbb21c4520f9f1350dca36ae04103808ee30fd8158199c8a8e48d75d7ecc61210e00336912fc61ca2f9a3cbdd1271ad82
SSDEEP

1536:sBQ4SfH9mBPxszVJk2e7J2wHL10JrmKP0fq:s+48H9mZxszVy2e7JjHL0qM0fq

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01598099.exe

Files

01598099.exe
.exe windows x86

72962b3093e3cce37d1602f4c205e3a5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenW
lstrcmpW
lstrcatW
UnhandledExceptionFilter
TerminateThread
TerminateProcess
SetUnhandledExceptionFilter
SetErrorMode
RaiseException
QueryPerformanceCounter
MulDiv
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
GlobalUnlock
GlobalReAlloc
GlobalLock
GlobalFree
GlobalAlloc
GetTimeFormatW
GetSystemTimeAsFileTime
GetStartupInfoW
GetNumberFormatW
GetLocaleInfoW
GetFileTime
GetFileSize
GetExitCodeThread
GetDateFormatW
GetCurrentProcessId
GetCurrentProcess
FreeLibrary
FileTimeToSystemTime
FileTimeToLocalFileTime
CloseHandle
VirtualAllocEx
LoadLibraryA
GetModuleHandleW

user32

TabbedTextOutW
TranslateMessage
UnionRect
UpdateWindow
ValidateRect
WinHelpW
WindowFromPoint
wsprintfW
wvsprintfW
SetWindowLongW
SetTimer
SetRectEmpty
SetRect
SetDlgItemInt
SetCursor
SetClassLongW
SetCaretPos
SetCapture
SetActiveWindow
SendMessageW
SendDlgItemMessageW
ScreenToClient
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterClipboardFormatW
RedrawWindow
PtInRect
PostMessageW
PeekMessageW
OffsetRect
MsgWaitForMultipleObjects
MessageBoxW
MessageBeep
LoadStringW
LoadMenuW
LoadCursorW
LoadBitmapW
KillTimer
IsWindowVisible
IsWindow
IsRectEmpty
IsMenu
IsClipboardFormatAvailable
InvalidateRect
IntersectRect
SystemParametersInfoW
HideCaret
GrayStringW
GetWindowRect
GetWindowLongW
GetWindowDC
GetWindow
GetUpdateRect
GetSystemMetrics
GetSystemMenu
GetSysColor
GetSubMenu
GetParent
GetMenu
GetKeyboardLayout
GetKeyState
GetFocus
GetDlgItemInt
GetDlgItem
GetDesktopWindow
GetDC
GetCursorPos
GetClientRect
GetClassInfoW
GetCaretPos
GetCapture
FrameRect
FillRect
EqualRect
EndPaint
EnableWindow
EnableScrollBar
EnableMenuItem
DrawTextW
DrawFocusRect
DispatchMessageW
DestroyWindow
DestroyIcon
DestroyCaret
CreateCaret
CopyRect
ClientToScreen
CheckMenuItem
CheckDlgButton
CharNextW
BringWindowToTop
BeginPaint
LoadIconW
ShowCursor
ShowCaret
InflateRect
SetWindowTextW

gdi32

Ellipse
Escape
ExcludeClipRect
ExtTextOutW
FillRgn
GdiFlush
GetBkMode
GetCurrentObject
GetDIBColorTable
GetDeviceCaps
DeleteObject
GetNearestPaletteIndex
GetObjectW
GetPaletteEntries
GetPixel
GetStockObject
GetTextColor
GetTextExtentPoint32W
GetTextMetricsW
LPtoDP
LineTo
MoveToEx
DeleteDC
CreateSolidBrush
CreateRectRgnIndirect
CreatePolygonRgn
CreatePatternBrush
CreatePalette
CreateICW
CreateHalftonePalette
CreateFontIndirectW
CreateDIBitmap
CreateDIBSection
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
GetNearestColor
CreateBitmap
TranslateCharsetInfo
TextOutW
StretchDIBits
StretchBlt
SetViewportExtEx
SetTextColor
SetTextAlign
SetPixel
SetPaletteEntries
SetMapMode
SetDIBitsToDevice
SetDIBits
SetDIBColorTable
SetBkMode
SetBkColor
SelectPalette
SelectObject
SaveDC
RoundRect
RestoreDC
ResizePalette
Rectangle
RectVisible
RealizePalette
PtVisible
Polygon
PlayMetaFile
PatBlt
OffsetRgn
BitBlt

comdlg32

GetSaveFileNameW
GetOpenFileNameW
CommDlgExtendedError
GetFileTitleW

advapi32

RegCreateKeyExW
RegSetValueExW
RegQueryValueExW
RegOpenKeyW
RegQueryValueExA
RegOpenKeyA
RegCloseKey
RegEnumKeyW
RegOpenKeyExA
RegOpenKeyExW

shell32

SHChangeNotify
ShellAboutW
CommandLineToArgvW

ole32

WriteFmtUserTypeStg
WriteClassStg
ReleaseStgMedium
PropVariantClear
OleGetClipboard
CoUninitialize
CoTaskMemFree
CoMarshalInterThreadInterfaceInStream
CoInitialize
CoGetInterfaceAndReleaseStream
CoCreateInstance
CLSIDFromString

msvcrt

_cexit
wcstok
wcscmp
wcschr
wcscat
rand
free
exit
_wtol
_wtoi
_wsplitpath
_wcsicmp
_wcsdup
_CxxThrowException
_XcptFilter
__CxxFrameHandler
__dllonexit
__p__commode
__p__fmode
__set_app_type
__setusermatherr
__wgetmainargs
_adjust_fdiv
_beginthreadex
_c_exit
_controlfp
_except_handler3
_exit
_ftol
_getdcwd
_initterm
_itow
_ltow
_onexit
_purecall
_wcmdln

Sections

.text
Size: 45KB - Virtual size: 44KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

72962b3093e3cce37d1602f4c205e3a5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

msvcrt

Sections

.text Size: 45KB - Virtual size: 44KB

.data Size: 512B - Virtual size: 496B

.rsrc Size: 32KB - Virtual size: 32KB

.text
Size: 45KB - Virtual size: 44KB

.data
Size: 512B - Virtual size: 496B

.rsrc
Size: 32KB - Virtual size: 32KB