1ca05c09ee060dexeexeexeex[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

1ca05c09ee060dexeexeexeex.exe
Size

4.0MB
MD5

1ca05c09ee060d236f79714a5bfd984b
SHA1

6110f0bffb5e2d531b0d144343a9f8f879164872
SHA256

220b1e22abee4dae3867f2acb86df0c5eb1e9d6af1ab243b5a5b2ee5bd4c7c18
SHA512

f12bc1bf311d07194050050c251b82d9f146ed0dbe725c0ccf7f7cbdda77fbc6fce0314cf9c7c4e3a31e04d118cc7806c22b69b352925a73b0060a87ce9464b5
SSDEEP

98304:cUkwzz0R3DsEBHYw+7zh5FUTZGVfrPnLRbVPOyCLTEv:b30yjUTaXRbVPOHLTG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1ca05c09ee060dexeexeexeex.exe

Files

1ca05c09ee060dexeexeexeex.exe
.exe windows x86

a62636a82b997c432a989ec7a3e10b99

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTimeZoneInformation
GetStringTypeW
GetConsoleCP
GetConsoleMode
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
WriteConsoleW
LCMapStringW
SetEnvironmentVariableA
GetTimeFormatA
InterlockedCompareExchange
CreateFileA
GetFileAttributesA
AreFileApisANSI
FormatMessageA
IsValidCodePage
GetOEMCP
GetCPInfo
IsProcessorFeaturePresent
UnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
HeapSize
HeapQueryInformation
VirtualQuery
VirtualAlloc
GetFileType
SetStdHandle
ExitProcess
RaiseException
RtlUnwind
ExitThread
HeapReAlloc
HeapAlloc
GetSystemTimeAsFileTime
HeapFree
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
SearchPathW
GetNumberFormatW
GetWindowsDirectoryW
FindResourceExW
SetErrorMode
GetUserDefaultLCID
lstrcpyW
GetSystemDirectoryW
GlobalFlags
VirtualProtect
GetProfileIntW
GetFileTime
GetFileSizeEx
GetFileAttributesExW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
LoadLibraryExW
InterlockedExchange
GetFullPathNameW
GetVolumeInformationW
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
GetThreadLocale
FileTimeToLocalFileTime
FileTimeToSystemTime
FindNextFileW
ReleaseActCtx
CreateActCtxW
GlobalGetAtomNameW
SuspendThread
GlobalSize
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrcmpW
lstrcpynW
InitializeCriticalSectionAndSpinCount
GetTempPathW
GetTempFileNameW
lstrcmpA
GetCurrentProcessId
GetCurrentDirectoryW
FindFirstFileW
FindClose
InterlockedDecrement
LoadLibraryA
CompareStringW
EnumResourceTypesW
EnumResourceNamesW
EnumResourceLanguagesW
GetExitCodeThread
TerminateThread
CreateThread
SetThreadPriority
InterlockedIncrement
GetLocaleInfoW
GetModuleHandleA
GetFileAttributesW
ResetEvent
WaitForSingleObject
FreeResource
ResumeThread
MulDiv
CreateEventW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetCurrentThreadId
GlobalUnlock
GlobalLock
DeleteFileA
DeleteFileW
CopyFileW
RemoveDirectoryW
SetFilePointer
GetLocalTime
GetCommandLineW
ReleaseMutex
CreateMutexW
GetModuleFileNameW
ActivateActCtx
DeactivateActCtx
SetLastError
GetPrivateProfileIntW
WritePrivateProfileStringW
FormatMessageW
GetACP
GetPrivateProfileStringW
CreateDirectoryW
LoadLibraryW
FreeLibrary
CreateFileW
DeviceIoControl
GlobalFree
GlobalAlloc
lstrcmpiW
GetSystemInfo
GetModuleHandleW
GetProcAddress
ReadFile
PeekNamedPipe
GetTickCount
WideCharToMultiByte
lstrlenW
TerminateProcess
Sleep
WriteFile
FlushFileBuffers
CreateProcessW
GetVersionExW
CreatePipe
MultiByteToWideChar
lstrlenA
LocalAlloc
LocalFree
GetLastError
SetEvent
FindResourceW
LoadResource
LockResource
SizeofResource
CloseHandle
GetProcessHeap
CreateEventA
GetDateFormatA

user32

SetMenu
CheckMenuItem
GetCursor
IsWindowEnabled
IsIconic
GetKeyboardLayout
MapVirtualKeyExW
GetKeyNameTextW
IsCharLowerW
LoadAcceleratorsW
GetKeyboardLayoutList
GetKeyboardState
ToUnicodeEx
CopyAcceleratorTableW
CharUpperW
SetParent
SetCursorPos
GetMenuDefaultItem
WaitMessage
GetTopWindow
MapVirtualKeyW
IsChild
IsMenu
AdjustWindowRectEx
GetDlgItem
GetMenuState
GetSysColorBrush
IsDialogMessageW
IsClipboardFormatAvailable
GetScrollInfo
GetDoubleClickTime
IsWindowUnicode
CallWindowProcW
GetWindowLongA
SetWindowLongA
GetWindowRgn
GetMenuStringW
LoadMenuW
LookupIconIdFromDirectoryEx
RegisterClipboardFormatW
CreateIconFromResourceEx
CopyIcon
IsZoomed
GetNextDlgTabItem
GetMenuItemInfoW
SendMessageTimeoutW
PeekMessageW
GetMessageW
GetDesktopWindow
LockWindowUpdate
GetDCEx
InvertRect
IntersectRect
GetForegroundWindow
GetLastActivePopup
GetWindow
GetKeyState
ShowCaret
HideCaret
SystemParametersInfoW
DeferWindowPos
GetClassNameW
SetWindowPos
GrayStringW
DrawTextExW
TabbedTextOutW
SetRect
SetFocus
ReleaseCapture
GetCapture
SetCapture
TrackMouseEvent
SetClassLongW
GetClassLongW
ScreenToClient
GetDlgCtrlID
IsRectEmpty
CopyImage
DestroyCursor
GetMenu
UnhookWindowsHookEx
SetWindowsHookExW
DefWindowProcW
GetClassInfoW
IsWindowVisible
MoveWindow
MapWindowPoints
DrawFrameControl
UnionRect
MessageBeep
SetClipboardData
EmptyClipboard
CloseClipboard
GetClipboardData
OpenClipboard
DispatchMessageW
TranslateMessage
SetCursor
LoadCursorW
EndDeferWindowPos
BeginDeferWindowPos
EqualRect
BringWindowToTop
ShowWindow
FindWindowW
SetWindowRgn
KillTimer
SetTimer
GetWindowPlacement
SetWindowPlacement
SetScrollInfo
RegisterClassW
WindowFromPoint
GetCursorPos
EnableWindow
SendMessageW
GetClassInfoExW
CreateWindowExW
ValidateRect
DrawTextW
DrawIconEx
PtInRect
ClientToScreen
DrawFocusRect
DrawEdge
FrameRect
FillRect
InflateRect
GetSysColor
DrawStateW
GetWindowDC
CopyRect
LoadImageW
DestroyIcon
ShowScrollBar
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
TrackPopupMenu
ScrollWindow
GetMonitorInfoW
MonitorFromWindow
GetMessagePos
GetMessageTime
DestroyWindow
GetWindowTextW
ReleaseDC
CreateIconIndirect
GetIconInfo
GetDC
GetFocus
IsWindow
GetParent
OffsetRect
InvalidateRect
InvalidateRgn
MessageBoxW
LoadBitmapW
GetMenuItemID
GetSubMenu
CreatePopupMenu
SetForegroundWindow
SetActiveWindow
GetActiveWindow
GetTabbedTextExtentA
MapDialogRect
CallNextHookEx
GetAsyncKeyState
RegisterWindowMessageW
GetWindowLongW
SetWindowLongW
SetLayeredWindowAttributes
GetClientRect
PostMessageW
GetWindowRect
GetSystemMetrics
RedrawWindow
UpdateWindow
LoadIconW
GetMenuItemCount
GetSystemMenu
GetWindowTextLengthW
RemovePropW
GetPropW
SetPropW
WinHelpW
SendDlgItemMessageA
SendDlgItemMessageW
EnableMenuItem
ModifyMenuW
CheckDlgButton
SubtractRect
CharUpperBuffW
GetUpdateRect
SetMenuDefaultItem
UpdateLayeredWindow
MonitorFromPoint
EnableScrollBar
CreateAcceleratorTableW
DestroyAcceleratorTable
GetNextDlgGroupItem
PostThreadMessageW
UnregisterClassW
EnumDisplayMonitors
NotifyWinEvent
DeleteMenu
CreateMenu
CharNextW
TranslateMDISysAccel
DrawMenuBar
DefMDIChildProcW
DefFrameProcW
ShowOwnedPopups
SetWindowContextHelpId
PostQuitMessage
EndPaint
BeginPaint
DrawIcon
UnpackDDElParam
ReuseDDElParam
DestroyMenu
InsertMenuItemW
TranslateAcceleratorW
CreateDialogIndirectParamW
EndDialog
GetWindowThreadProcessId
AppendMenuW
InsertMenuW
RemoveMenu
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetWindowTextW
SetDlgItemTextW
SetRectEmpty
RealChildWindowFromPoint

gdi32

Escape
GetDeviceCaps
StretchBlt
GetPixel
SetPixel
CreateDIBSection
CreateRectRgnIndirect
PatBlt
EnumFontFamiliesExW
ExtCreateRegion
CreateBitmap
SetTextColor
SetBkColor
SetStretchBltMode
Polyline
GetViewportOrgEx
CreatePatternBrush
StretchDIBits
GetTextMetricsW
GetBitmapBits
GetRgnBox
GetWindowOrgEx
SetBkMode
GetTextAlign
Rectangle
GetViewportExtEx
GetWindowExtEx
OffsetViewportOrgEx
MoveToEx
GetCharWidthW
GetCurrentPositionEx
GetTextExtentPoint32A
IntersectClipRect
GetClipBox
GetClipRgn
ExtSelectClipRgn
Ellipse
StrokePath
FillPath
StrokeAndFillPath
EndPath
CloseFigure
LineTo
PolyBezierTo
BeginPath
ExtFloodFill
CopyMetaFileW
CreateDCW
CreateEllipticRgn
DPtoLP
LPtoDP
SaveDC
RestoreDC
SetPolyFillMode
SetROP2
ExtTextOutW
ExcludeClipRect
SetTextAlign
GetLayout
SetLayout
SelectClipRgn
SetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectPalette
GetObjectType
CreateHatchBrush
SetRectRgn
GetMapMode
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
GetBoundsRect
SetPaletteEntries
GetTextFaceW
RectVisible
TextOutW
PtVisible
GetTextExtentPoint32W
DeleteDC
SetPixelV
Polygon
PtInRegion
RoundRect
SelectObject
CreatePen
FrameRgn
FillRgn
CombineRgn
CreatePolygonRgn
CreateRoundRectRgn
GetStockObject
CreateFontIndirectW
GetCurrentObject
GetBkColor
GetTextColor
CreateSolidBrush
BitBlt
CreateCompatibleDC
DeleteObject
SetDIBits
CreateCompatibleBitmap
GetDIBits
CreateFontW
SetMapMode
CreateRectRgn
GetObjectW

msimg32

GradientFill
TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyExW
RegEnumValueW
RegEnumKeyW
RegQueryValueW
RegQueryValueExW

shell32

DragFinish
SHAppBarMessage
DragQueryFileW
SHFileOperationW
SHGetMalloc
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHGetDesktopFolder
ShellExecuteW
SHGetSpecialFolderLocation

comctl32

InitCommonControlsEx
_TrackMouseEvent
ImageList_GetIconSize
ImageList_GetImageCount
ImageList_DrawEx
ImageList_Destroy

shlwapi

PathFindFileNameW
PathFindExtensionW
PathIsUNCW
PathStripToRootW
PathIsDirectoryW
PathRemoveFileSpecW

ole32

RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
CreateStreamOnHGlobal
CoInitialize
CoUninitialize
CoCreateInstance
CoGetClassObject
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
OleLockRunning
DoDragDrop
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
OleGetClipboard
CoDisconnectObject
CoInitializeEx
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
OleRun

oleaut32

VarBstrFromDate
SysAllocStringByteLen
SysStringByteLen
VariantCopy
SafeArrayDestroy
SysStringLen
OleCreateFontIndirect
LoadTypeLi
SysFreeString
OleLoadPicturePath
SysAllocStringLen
VariantChangeType
VariantClear
VariantInit
SysAllocString
OleLoadPicture
SystemTimeToVariantTime
VariantTimeToSystemTime

oledlg

OleUIBusyW
OleUIAddVerbMenuW

gdiplus

GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdiplusShutdown
GdiplusStartup
GdipDeleteRegion
GdipCreateRegionHrgn
GdipFillRegion
GdipDeleteGraphics
GdipCreateFromHDC
GdipSetLinePresetBlend
GdipCreateLineBrushFromRect
GdipCloneBrush
GdipDeleteBrush
GdipAlloc
GdipFree

winmm

PlaySoundW

netapi32

NetGetJoinInformation
NetApiBufferFree

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

Sections

.text
Size: 2.6MB - Virtual size: 2.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 727KB - Virtual size: 726KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 53KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 278KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 309KB - Virtual size: 309KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

QT�\�u,
Size: 16KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a62636a82b997c432a989ec7a3e10b99

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

winmm

netapi32

oleacc

imm32

Sections

.text Size: 2.6MB - Virtual size: 2.6MB

.rdata Size: 727KB - Virtual size: 726KB

.data Size: 53KB - Virtual size: 92KB

.rsrc Size: 278KB - Virtual size: 278KB

.reloc Size: 309KB - Virtual size: 309KB

QT�\�u, Size: 16KB - Virtual size: 20KB

.text
Size: 2.6MB - Virtual size: 2.6MB

.rdata
Size: 727KB - Virtual size: 726KB

.data
Size: 53KB - Virtual size: 92KB

.rsrc
Size: 278KB - Virtual size: 278KB

.reloc
Size: 309KB - Virtual size: 309KB

QT�\�u,
Size: 16KB - Virtual size: 20KB