1833f476021106exeexeexeex[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

1833f476021106exeexeexeex.exe
Size

3.7MB
MD5

1833f4760211065aec6831a820627109
SHA1

87f38d447b326e54e8ee055fccb59a17377d6990
SHA256

97ebe7e9e20d3a8c4590a4488e91510396729d38f00ce20aecb8a1fec6464c34
SHA512

3cbf58d64b3211cf09f28b640afb9bf9fc98d9ba8039272ccbcf5c7cb4a4d38ef80bb8ce5a59a9139f6d40b8f9c51ac9eee365a0e5e57ef25e7b3abe71ecd814
SSDEEP

98304:nEAZH9kjJ2u49ipSecPjA5JDfC1zM48af6e+/zrvRsNV3n6OJu:nBZtiC8ffIAhj/zrvRsTn6B

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1833f476021106exeexeexeex.exe

Files

1833f476021106exeexeexeex.exe
.exe windows x86

cf5df29194fdacba733ef1dafd0487c7

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

IsValidCodePage
GetTimeZoneInformation
GetFileInformationByHandle
PeekNamedPipe
GetConsoleCP
GetConsoleMode
LCMapStringW
SetConsoleCtrlHandler
GetStringTypeW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
CreateFileA
GetProcessHeap
WriteConsoleW
GetFullPathNameA
SetEnvironmentVariableA
UnhandledExceptionFilter
QueryPerformanceCounter
GetOEMCP
SetConsoleMode
ReadConsoleInputA
GetFileAttributesA
FindFirstFileExA
GetDriveTypeA
FlushConsoleInputBuffer
GetSystemTime
LoadLibraryA
GlobalMemoryStatus
GetVersion
GetModuleHandleA
GetSystemDirectoryW
VerSetConditionMask
VerifyVersionInfoW
FormatMessageA
WaitForMultipleObjects
ExpandEnvironmentStringsA
SleepEx
InterlockedCompareExchange
GetACP
GetCPInfo
IsProcessorFeaturePresent
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
GetFileType
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapSize
HeapQueryInformation
HeapReAlloc
RaiseException
ExitProcess
RtlUnwind
HeapAlloc
CreateThread
ExitThread
FindFirstFileExW
GetDriveTypeW
HeapFree
GetDateFormatW
GetTimeFormatW
GetSystemTimeAsFileTime
DecodePointer
EncodePointer
HeapSetInformation
FindResourceExW
GetUserDefaultLCID
VirtualProtect
SearchPathW
GetProfileIntW
InitializeCriticalSectionAndSpinCount
GetNumberFormatW
GetWindowsDirectoryW
GetTickCount
GetTempPathW
GetTempFileNameW
GetFileTime
GetFileSizeEx
GetFileAttributesW
GetFileAttributesExW
SetErrorMode
GetFullPathNameW
GetVolumeInformationW
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
lstrcmpiW
SystemTimeToFileTime
GetThreadLocale
lstrlenA
GlobalGetAtomNameW
lstrcpyW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
GlobalFlags
GetCurrentDirectoryW
GlobalFindAtomW
GetVersionExW
CompareStringW
ReleaseActCtx
CreateActCtxW
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalAddAtomW
GetPrivateProfileIntW
ResumeThread
SetThreadPriority
FreeResource
GlobalSize
FormatMessageW
LocalFree
lstrlenW
MulDiv
lstrcmpA
GlobalDeleteAtom
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
GetLocaleInfoW
ActivateActCtx
LoadLibraryW
DeactivateActCtx
SetLastError
lstrcmpW
GetModuleHandleW
GetProcAddress
InterlockedExchange
FreeLibrary
LeaveCriticalSection
EnterCriticalSection
FlushFileBuffers
WriteFile
SetFilePointer
DeleteCriticalSection
InitializeCriticalSection
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
ReadFile
GetStartupInfoW
GetLocalTime
WritePrivateProfileStringW
RemoveDirectoryW
DeleteFileW
FindNextFileW
FindClose
FindFirstFileW
CreateDirectoryW
TerminateProcess
GetModuleFileNameW
GetPrivateProfileStringW
MoveFileExW
CopyFileW
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
OpenProcess
ReleaseMutex
WaitForSingleObject
CreateMutexW
OpenMutexW
InterlockedDecrement
InterlockedIncrement
GetLastError
GetCommandLineW
SetUnhandledExceptionFilter
GetCurrentProcess
MultiByteToWideChar
GetCurrentProcessId
GetCurrentThreadId
CreateFileW
FindResourceW
LoadResource
LockResource
SizeofResource
Sleep
CloseHandle
WideCharToMultiByte
IsDebuggerPresent

user32

GetSysColorBrush
SetLayeredWindowAttributes
EnumDisplayMonitors
SetRectEmpty
RealChildWindowFromPoint
DeleteMenu
WaitMessage
ReleaseCapture
LoadCursorW
WindowFromPoint
SetCapture
LoadMenuW
IntersectRect
RegisterWindowMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
SetForegroundWindow
ShowScrollBar
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
DefWindowProcW
CallWindowProcW
GetMenu
GetWindowTextLengthW
GetWindowTextW
SetFocus
ShowWindow
MoveWindow
SetWindowLongW
GetDlgCtrlID
SetWindowTextW
IsDialogMessageW
CharNextW
SendDlgItemMessageW
CheckDlgButton
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
CopyRect
UnhookWindowsHookEx
LoadAcceleratorsW
PtInRect
GetSysColor
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
ScreenToClient
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetClassNameW
UpdateWindow
FillRect
DrawStateW
GetWindowThreadProcessId
TranslateAcceleratorW
ReuseDDElParam
GetLastActivePopup
ShowOwnedPopups
UnpackDDElParam
SetParent
DestroyAcceleratorTable
SetClassLongW
DrawIconEx
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
OffsetRect
CopyAcceleratorTableW
IsRectEmpty
SetRect
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
DestroyIcon
CharUpperW
SetWindowRgn
RedrawWindow
NotifyWinEvent
GetAsyncKeyState
IsZoomed
UnionRect
ModifyMenuW
EnableMenuItem
CheckMenuItem
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EnableScrollBar
UpdateLayeredWindow
MonitorFromPoint
IsMenu
CreatePopupMenu
SetMenuDefaultItem
GetMenuDefaultItem
UnregisterClassW
DrawEdge
DrawFrameControl
DrawFocusRect
ToUnicodeEx
MapVirtualKeyW
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
GetWindowRgn
DestroyCursor
SubtractRect
MapVirtualKeyExW
IsCharLowerW
GetDoubleClickTime
GetUpdateRect
SendMessageW
IsWindow
PostMessageW
MessageBoxW
MessageBoxA
GetProcessWindowStation
GetUserObjectInformationW
LoadIconW
GetSystemMenu
AppendMenuW
GetDC
ReleaseDC
GetDesktopWindow
IsIconic
GetSystemMetrics
GetClientRect
DrawIcon
InvalidateRect
EnableWindow
SetTimer
KillTimer
PostQuitMessage
RemoveMenu
GetSubMenu
GetMenuItemCount
InsertMenuW
GetMenuItemID
GetMenuStringW
GetMenuState
SetWindowPos
MapDialogRect
IsClipboardFormatAvailable
GetParent
SetWindowContextHelpId
GetWindow
EndDialog
CreateMenu
TranslateMDISysAccel
DrawMenuBar
BringWindowToTop
LoadImageW
InsertMenuItemW
DefMDIChildProcW
DefFrameProcW
GetKeyNameTextW
PostThreadMessageW
CharUpperBuffW
CopyIcon
FrameRect
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
CopyImage
GetIconInfo
HideCaret
InvertRect
RegisterClipboardFormatW
LockWindowUpdate
GetWindowRect
SetCursorPos

gdi32

GetLayout
SetLayout
SelectClipRgn
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
SelectObject
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
DeleteDC
CreatePatternBrush
SelectPalette
GetObjectType
CreatePen
CreateHatchBrush
CreateFontIndirectW
GetTextExtentPoint32W
CreateRectRgnIndirect
SetRectRgn
CombineRgn
GetMapMode
PatBlt
DPtoLP
CreateDIBitmap
GetTextMetricsW
SetTextColor
GetBkColor
GetTextColor
GetRgnBox
CreateRoundRectRgn
CreateDIBSection
SetTextAlign
CreatePolygonRgn
CreateEllipticRgn
Polyline
Ellipse
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
RealizePalette
GetSystemPaletteEntries
OffsetRgn
SetDIBColorTable
StretchBlt
SetPixel
Rectangle
EnumFontFamiliesExW
ExtFloodFill
SetPaletteEntries
LPtoDP
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
FillRgn
FrameRgn
GetBoundsRect
GetTextFaceW
SetPixelV
EnumFontFamiliesW
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
GetStockObject
GetObjectW
CreateSolidBrush
DeleteObject
CreateBitmap
CreateDCW
CopyMetaFileW
BitBlt
CreateCompatibleBitmap
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SaveDC
CreateCompatibleDC
GetTextCharsetInfo
GetDeviceCaps

msimg32

AlphaBlend
TransparentBlt

comdlg32

GetFileTitleW

winspool.drv

ClosePrinter
OpenPrinterW
DocumentPropertiesW

advapi32

DeregisterEventSource
ReportEventA
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegisterEventSourceA

shell32

SHAppBarMessage
ShellExecuteW
SHCreateDirectoryExW
SHGetFileInfoW
DragFinish
DragQueryFileW
SHBrowseForFolderW
CommandLineToArgvW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetDesktopFolder

comctl32

ImageList_GetIconSize
InitCommonControlsEx

shlwapi

wvnsprintfW
PathFindExtensionW
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathFileExistsW
PathRemoveFileSpecW

ole32

RegisterDragDrop
OleGetClipboard
CoRegisterMessageFilter
CoRevokeClassObject
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
RevokeDragDrop
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CoInitializeEx
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CoInitialize
CoCreateInstance
CoUninitialize
OleCreateMenuDescriptor
CreateStreamOnHGlobal
CoCreateGuid
CoLockObjectExternal
CLSIDFromString
CLSIDFromProgID
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree

oleaut32

VarBstrFromDate
SysAllocStringLen
VariantClear
VariantChangeType
SystemTimeToVariantTime
OleCreateFontIndirect
SysFreeString
VariantInit
SysAllocStringByteLen
VariantCopy
SafeArrayDestroy
SysStringLen
VariantTimeToSystemTime
SysAllocString

oledlg

OleUIBusyW

gdiplus

GdipDrawImageI
GdipBitmapUnlockBits
GdipGetImagePalette
GdipCreateBitmapFromScan0
GdipGetImageGraphicsContext
GdipBitmapLockBits
GdiplusShutdown
GdipCreateBitmapFromStream
GdipFree
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipCreateFromHDC
GdipDeleteGraphics
GdipDrawImageRectRectI
GdipCreateBitmapFromHBITMAP
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImagePixelFormat
GdiplusStartup
GdipGetImagePaletteSize

ws2_32

htonl
shutdown
ioctlsocket
listen
accept
recvfrom
sendto
getaddrinfo
freeaddrinfo
connect
socket
closesocket
getpeername
getsockopt
htons
bind
ntohs
getsockname
setsockopt
WSAIoctl
send
recv
select
WSAGetLastError
__WSAFDIsSet
WSASetLastError
WSAStartup
WSACleanup
getservbyname
gethostbyname
gethostname

dbghelp

MiniDumpWriteDump

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

psapi

EnumProcessModules
GetModuleFileNameExW

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

imm32

ImmGetOpenStatus
ImmGetContext
ImmReleaseContext

winmm

PlaySoundW

wldap32

ord79
ord142
ord167
ord127
ord301
ord133
ord26
ord208
ord145
ord14
ord118
ord27
ord41
ord46
ord216
ord147

Sections

.text
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 587KB - Virtual size: 586KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 62KB - Virtual size: 100KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 613KB - Virtual size: 613KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 229KB - Virtual size: 228KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cf5df29194fdacba733ef1dafd0487c7

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

gdiplus

ws2_32

dbghelp

version

psapi

oleacc

imm32

winmm

wldap32

Sections

.text Size: 2.3MB - Virtual size: 2.3MB

.rdata Size: 587KB - Virtual size: 586KB

.data Size: 62KB - Virtual size: 100KB

.rsrc Size: 613KB - Virtual size: 613KB

.reloc Size: 229KB - Virtual size: 228KB

.text
Size: 2.3MB - Virtual size: 2.3MB

.rdata
Size: 587KB - Virtual size: 586KB

.data
Size: 62KB - Virtual size: 100KB

.rsrc
Size: 613KB - Virtual size: 613KB

.reloc
Size: 229KB - Virtual size: 228KB