easy_Malicious_001bc26dbd350bf66648eba8a36fe6c5201b8fedbdaad55e272f5f07f305abb8[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

easy_Malicious_001bc26dbd350bf66648eba8a36fe6c5201b8fedbdaad55e272f5f07f305abb8.exe
Size

342KB
MD5

4a5ba8f3079f5208a690f00dda17d1f3
SHA1

a00fd4641c222ed17a11671a6b50a2c631906635
SHA256

ea223f9fae25058864e8333ffba6bde7aa0b38cc58aad3094dfb92198703206f
SHA512

0742ad5cb455783aec1abccbd99c3ca6454bb0f5fb50ecd6ba6937cf7c7accbd7250b51622b1e5034d3feb7de996f236d0ff58d0fc6f4563ce229ce3c0c3b3ac
SSDEEP

6144:BiT0g4vIw+4zzwuSVVFlv0lC17ltL2YC5h7jF+bF/h2i23lFGGjh04Jsm/BWcHPO:Bng4l+IzUXvhZltSd3cx/qVkGjh0Ss4i

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
easy_Malicious_001bc26dbd350bf66648eba8a36fe6c5201b8fedbdaad55e272f5f07f305abb8.exe

Files

easy_Malicious_001bc26dbd350bf66648eba8a36fe6c5201b8fedbdaad55e272f5f07f305abb8.exe
.exe windows x86

d392db9c761dece8560a06cfabf7d958

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStringTypeW
GetStringTypeA
InitializeCriticalSectionAndSpinCount
HeapSize
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
LCMapStringW
LCMapStringA
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetStartupInfoA
GetFileType
SetHandleCount
GetStdHandle
ExitProcess
IsValidCodePage
GetOEMCP
HeapReAlloc
VirtualAlloc
DeleteCriticalSection
VirtualFree
HeapCreate
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
InterlockedDecrement
GetCurrentThreadId
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
RaiseException
GetStartupInfoW
LeaveCriticalSection
EnterCriticalSection
MulDiv
FindResourceExW
EndUpdateResourceW
HeapAlloc
GetTempFileNameW
HeapFree
GetModuleFileNameA
CopyFileW
SetLastError
GetLocaleInfoA
GetSystemDirectoryA
GetTimeZoneInformation
GetModuleHandleA
GetCurrentProcess
SetFileAttributesW
DeleteFileW
MoveFileExW
GetWindowsDirectoryA
LoadLibraryA
GetProcAddress
GetACP
CreateFileA
GetFileSize
OutputDebugStringW
lstrcpyA
OutputDebugStringA
GetVersionExW
GetModuleFileNameW
SetCurrentDirectoryW
FindResourceW
LoadResource
LockResource
SizeofResource
FreeResource
SetFileTime
GetFileAttributesW
CreateDirectoryW
WideCharToMultiByte
MultiByteToWideChar
LocalFileTimeToFileTime
SystemTimeToFileTime
ReadFile
SetFilePointer
GetModuleHandleW
GetTempPathW
GetCommandLineW
LocalFree
CreateProcessW
CreateFileW
WriteFile
GetLastError
CloseHandle
GetWindowsDirectoryW
GetSystemDirectoryW
GetCurrentDirectoryW
GetLocalTime
GetConsoleMode
GetConsoleCP
RtlUnwind
CreateThread
WaitForSingleObject
Sleep
GetExitCodeProcess
GetCPInfo

user32

RegisterClassW
GetDlgItem
EndDialog
InvalidateRect
GetWindowRect
EnableWindow
IsWindowEnabled
wsprintfW
SetWindowTextW
MessageBoxA
SendMessageA
SetWindowTextA
MapWindowPoints
wvsprintfA
wsprintfA
MessageBoxW
MoveWindow
DialogBoxParamA
DialogBoxParamW
SetCursor
DestroyWindow
GetDesktopWindow
LoadIconW
LoadCursorW
CreateDialogParamW
CreateWindowExW
SetWindowLongW
GetWindowLongW
DefWindowProcW
BeginPaint
EndPaint
GetDC
ScreenToClient
GetClientRect
FillRect
DrawTextW
UpdateWindow
GetWindowTextW
ShowWindow
GetSystemMetrics
SetWindowPos
PostMessageW
GetSystemMenu
EnableMenuItem
SendMessageW
SetFocus

gdi32

GetDeviceCaps
CreateFontA
CreateFontW
CreateDIBSection
CreateCompatibleDC
BitBlt
DeleteDC
SelectObject
CreatePen
Rectangle
SetBkMode
SetTextColor
DeleteObject
GetStockObject
GetObjectW
CreateSolidBrush

advapi32

OpenServiceW
CryptCreateHash
CryptDeriveKey
CryptAcquireContextW
CryptDestroyHash
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegConnectRegistryW
OpenSCManagerW
CryptReleaseContext
StartServiceW
CloseServiceHandle
CryptGetHashParam
CryptDecrypt
CryptDestroyKey
CryptHashData

shell32

SHGetMalloc
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetPathFromIDListW
CommandLineToArgvW

msimg32

AlphaBlend

lz32

LZOpenFileW
LZClose
LZCopy

Sections

.text
Size: 151KB - Virtual size: 151KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.text
Size: 90KB - Virtual size: 92KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

d392db9c761dece8560a06cfabf7d958

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

msimg32

lz32

Sections

.text Size: 151KB - Virtual size: 151KB

.rdata Size: 36KB - Virtual size: 36KB

.data Size: 5KB - Virtual size: 16KB

.rsrc Size: 57KB - Virtual size: 56KB

.text Size: 90KB - Virtual size: 92KB

.text
Size: 151KB - Virtual size: 151KB

.rdata
Size: 36KB - Virtual size: 36KB

.data
Size: 5KB - Virtual size: 16KB

.rsrc
Size: 57KB - Virtual size: 56KB

.text
Size: 90KB - Virtual size: 92KB