x22texe[.]exe | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

x22texe.exe
Size

2.2MB
MD5

71d7069f62819cdfb7c5e9f22fa4881a
SHA1

984f3237d69e9ed410a90a14a8689235f91ed6a9
SHA256

0d58fbd6dca8e4428ffcd163c68f32dffb2e614ce0c45c9a0eb30dda43a0643e
SHA512

8f836e03c6dd598a265fcd4fce9a9fecd45496bf1c4de48e12a0452f9c85f16218d5c942f6475dbd97ceafcd22d13b2d927324a94a28d8c73b036090651b6d01
SSDEEP

49152:K0n+AoM2lG9PiYTe1glkos4vGg/x1FnlcjhBUsK2bH50bcrrqnNlO5TPyv:K63P9PZTe1glkcP/x1FnlcjhKsK4ckr5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
x22texe.exe

Files

x22texe.exe
.exe windows x86

d375f1b273822630c9aa8e9acb1e749a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WritePrivateProfileStringA
lstrcatA
lstrcpyA
GetModuleFileNameA
GetLastError
FindClose
FindFirstFileA
CloseHandle
UnmapViewOfFile
FlushViewOfFile
MapViewOfFile
CreateFileMappingA
CreateFileA
DeleteFileA
GetSystemInfo
GlobalMemoryStatusEx
SizeofResource
LockResource
LoadResource
FindResourceW
WideCharToMultiByte
SetFilePointer
ReadFile
SystemTimeToFileTime
lstrlenA
LocalFileTimeToFileTime
CreateDirectoryA
GetFileAttributesA
GetCurrentDirectoryA
SetFileTime
WriteFile
GetProcAddress
FreeLibrary
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
SetLastError
GetTickCount
lstrcmpW
MultiByteToWideChar
DeactivateActCtx
ActivateActCtx
LoadLibraryW
CompareStringA
GetVersionExA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
FreeResource
FindResourceA
GetModuleHandleW
GlobalAlloc
lstrcmpA
GlobalLock
InterlockedExchange
GetLocaleInfoA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
SetThreadPriority
ResumeThread
GetPrivateProfileIntA
GetPrivateProfileStringA
GetCurrentProcessId
GlobalFree
GlobalUnlock
CreateActCtxW
ReleaseActCtx
GetModuleFileNameW
InterlockedDecrement
MulDiv
lstrlenW
LocalFree
GlobalSize
CopyFileA
GlobalFlags
LocalAlloc
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
GetCPInfo
GetOEMCP
GetACP
GetThreadLocale
lstrcmpiA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
GetFileTime
GetTempFileNameA
FileTimeToSystemTime
GetWindowsDirectoryA
GetNumberFormatA
SetErrorMode
GetFileAttributesExA
FileTimeToLocalFileTime
GetFileSizeEx
GetTempPathA
InitializeCriticalSectionAndSpinCount
GetProfileIntA
SearchPathA
VirtualProtect
FindResourceExW
RaiseException
RtlUnwind
EncodePointer
DecodePointer
ExitProcess
HeapFree
HeapAlloc
GetCommandLineA
HeapSetInformation
GetStartupInfoW
HeapReAlloc
GetSystemTimeAsFileTime
ExitThread
CreateThread
GetFileInformationByHandle
GetDriveTypeA
FindFirstFileExA
VirtualAlloc
VirtualQuery
HeapQueryInformation
HeapSize
SetStdHandle
IsProcessorFeaturePresent
IsValidCodePage
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetConsoleCP
GetConsoleMode
HeapCreate
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
LCMapStringW
GetCurrentDirectoryW
GetStringTypeW
CompareStringW
GetTimeZoneInformation
WriteConsoleW
SetEnvironmentVariableA
GetDriveTypeW
GetProcessHeap
CreateFileW
SleepEx
VerifyVersionInfoA
VerSetConditionMask
GetSystemDirectoryA
LoadLibraryA
GetModuleHandleA
WaitForSingleObject
FormatMessageA
PeekNamedPipe
WaitForMultipleObjects
GetFileType
ExpandEnvironmentStringsA
GetStdHandle
Sleep

user32

ValidateRect
GetCursorPos
GetActiveWindow
TranslateMessage
GetMessageA
SetCursor
ShowOwnedPopups
GetWindowThreadProcessId
MapDialogRect
SetWindowContextHelpId
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
GetDesktopWindow
TabbedTextOutA
DrawTextExA
GrayStringA
ClientToScreen
GetWindowDC
BeginPaint
EndPaint
InvalidateRect
IsRectEmpty
OffsetRect
SetTimer
KillTimer
SetCapture
LoadCursorW
RemoveMenu
InsertMenuA
AppendMenuA
GetMenuStringA
RealChildWindowFromPoint
GetSysColorBrush
InflateRect
GetMenuItemInfoA
DestroyMenu
DeleteMenu
SetRectEmpty
EnumDisplayMonitors
SetLayeredWindowAttributes
WindowFromPoint
WaitMessage
DestroyIcon
CharUpperA
CharNextA
CopyAcceleratorTableA
SetRect
IntersectRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
UnregisterClassA
TranslateAcceleratorA
BringWindowToTop
CreatePopupMenu
InsertMenuItemA
LoadAcceleratorsA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
RedrawWindow
GetMenuDefaultItem
MapVirtualKeyA
GetAsyncKeyState
InvertRect
DrawFocusRect
HideCaret
EnableScrollBar
NotifyWinEvent
GetIconInfo
CopyImage
SetParent
DestroyAcceleratorTable
LoadMenuW
GetSystemMenu
DrawStateA
DrawEdge
DrawFrameControl
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableA
SetCursorPos
LockWindowUpdate
RegisterClipboardFormatA
GetKeyNameTextA
UnionRect
OpenClipboard
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
IsCharLowerA
MapVirtualKeyExA
UpdateLayeredWindow
MonitorFromPoint
IsMenu
PostThreadMessageA
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
CreateMenu
SetMenuDefaultItem
IsClipboardFormatAvailable
PostQuitMessage
CopyIcon
CharUpperBuffA
GetDoubleClickTime
SubtractRect
DestroyCursor
GetWindowRgn
RemovePropA
SetFocus
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
SetActiveWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageA
MonitorFromWindow
GetMonitorInfoA
ScrollWindow
TrackPopupMenu
GetKeyState
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
IsWindowVisible
UpdateWindow
GetSubMenu
GetMenuItemID
GetMenuItemCount
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
AdjustWindowRectEx
GetWindowRect
ScreenToClient
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
CopyRect
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
CallWindowProcA
GetMenu
GetWindowLongA
SetWindowLongA
SetWindowPos
GetWindow
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
GetParent
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
EnableWindow
MessageBoxA
DrawIcon
SendMessageA
IsIconic
GetWindowTextLengthA
GetClientRect
LoadIconW
GetSystemMetrics
DrawIconEx
ReleaseDC
GetDC
GetPropA
IsZoomed
PostMessageA
ReleaseCapture
DrawTextA
PtInRect
DefWindowProcA
MapWindowPoints
RegisterClassExA
LoadCursorA
LoadIconA
SetClassLongA
GetClassLongA
FillRect
SetWindowRgn
IsWindow
SystemParametersInfoA
SetPropA
LoadImageA
LoadBitmapA
wsprintfA
IsWindowEnabled
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
GetUpdateRect
CheckDlgButton
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
SetWindowsHookExA
CallNextHookEx
FrameRect
GetClassNameA

gdi32

OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
SetWindowOrgEx
CreatePatternBrush
GetStockObject
SelectPalette
GetObjectType
GetDeviceCaps
CreatePen
CreateHatchBrush
ScaleViewportExtEx
CreateEllipticRgn
DPtoLP
LPtoDP
Ellipse
CreateDIBSection
CopyMetaFileA
CreateDCA
CreateBitmap
GetTextExtentPoint32A
CreateDIBitmap
CreateRectRgnIndirect
GetTextMetricsA
SetViewportExtEx
GetTextCharsetInfo
GetBkColor
GetTextColor
GetRgnBox
SetRectRgn
GetMapMode
PatBlt
BitBlt
SelectObject
SetTextColor
StretchBlt
CreateCompatibleBitmap
CreateCompatibleDC
DeleteObject
CombineRgn
CreateRoundRectRgn
CreateRectRgn
CreateFontA
SetBkMode
CreateSolidBrush
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
MoveToEx
RealizePalette
GetSystemPaletteEntries
CreatePolygonRgn
Polyline
Polygon
SetDIBColorTable
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetPixel
Rectangle
OffsetRgn
EnumFontFamiliesExA
SetROP2
SetPolyFillMode
RestoreDC
SaveDC
GetObjectA
SetBkColor
EnumFontFamiliesA
CreateFontIndirectA
GetTextFaceA
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
SetPixelV
SetPaletteEntries
ExtFloodFill
GetBoundsRect
FrameRgn
FillRgn

advapi32

CryptReleaseContext
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegEnumValueA
RegEnumKeyExA
CryptAcquireContextA
CryptCreateHash
CryptGenRandom
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptDestroyKey
CryptEncrypt
CryptImportKey

shell32

SHGetFileInfoA
DragFinish
DragQueryFileA
SHGetDesktopFolder
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHAppBarMessage
ShellExecuteA

msimg32

AlphaBlend
TransparentBlt

comctl32

_TrackMouseEvent
InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathIsUNCA
PathStripToRootA
PathFindFileNameA
PathFindExtensionA
PathStripPathA
PathRemoveFileSpecW

oledlg

ord8

winmm

waveInUnprepareHeader
waveInAddBuffer
waveInPrepareHeader
waveInOpen
PlaySoundA
waveInStart

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdiplusShutdown
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette

imm32

ImmGetContext
ImmGetOpenStatus
ImmReleaseContext

ws2_32

connect
socket
getaddrinfo
sendto
recvfrom
accept
listen
ioctlsocket
gethostname
htonl
ntohl
WSACleanup
WSAStartup
WSASetLastError
closesocket
getpeername
getsockopt
htons
bind
ntohs
getsockname
setsockopt
WSAIoctl
send
recv
select
WSAGetLastError
freeaddrinfo
__WSAFDIsSet

wldap32

ord32
ord200
ord35
ord26
ord60
ord143
ord211
ord22
ord50
ord79
ord33
ord301
ord27
ord41
ord30
ord46

crypt32

CertFreeCertificateContext

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

comdlg32

GetFileTitleA

ole32

OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
CoRevokeClassObject
CoRegisterMessageFilter
OleGetClipboard
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleLockRunning
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoInitializeEx
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitialize
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CreateStreamOnHGlobal
OleDraw
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
IsAccelerator

oleaut32

VariantCopy
SafeArrayCreate
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayDestroy
SystemTimeToVariantTime
VariantTimeToSystemTime
OleCreateFontIndirect
SysStringLen
VarBstrFromDate
SysAllocStringByteLen
SysAllocString
SysFreeString
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
SafeArrayGetElemsize

Exports

Exports

?Report@tgp_monitor@gpcd@@AAAXIHHH@Z
HESpecifySettings
JLI_CmdToArgs
JLI_GetStdArgc
JLI_GetStdArgs
JLI_Launch
JLI_ManifestIterate
JLI_MemAlloc
JLI_ReportErrorMessage
JLI_ReportErrorMessageSys
JLI_ReportExceptionDescription
JLI_ReportMessage
JLI_SetTraceLauncher
TrapEntry

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 332KB - Virtual size: 331KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 55KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 285KB - Virtual size: 285KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 179KB - Virtual size: 178KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d375f1b273822630c9aa8e9acb1e749a

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

msimg32

comctl32

shlwapi

oledlg

winmm

oleacc

gdiplus

imm32

ws2_32

wldap32

crypt32

winspool.drv

comdlg32

ole32

oleaut32

Exports

Exports

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 332KB - Virtual size: 331KB

.data Size: 25KB - Virtual size: 55KB

.rsrc Size: 285KB - Virtual size: 285KB

.reloc Size: 179KB - Virtual size: 178KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 332KB - Virtual size: 331KB

.data
Size: 25KB - Virtual size: 55KB

.rsrc
Size: 285KB - Virtual size: 285KB

.reloc
Size: 179KB - Virtual size: 178KB