dc2c38b145abe3exeexeexeex[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

dc2c38b145abe3exeexeexeex.exe
Size

2.6MB
MD5

dc2c38b145abe32f3faa7f6206911413
SHA1

2e0d237c7742fd9159712cc3473d74c41215c617
SHA256

be9344bf0883a5f75e8a32e47c4d300d3db60a29995d9b49f2f0aa953b341600
SHA512

153988ecca2c7b2894a88d2d673acddad7cadf67317d57346b87336dd2ca2ce36fa8aa1e9a32fee717574903a070f9dfbc5ea73b64e164c64ad4f0f6bbcac448
SSDEEP

49152:IKYNu9FsGsL5tj1XUNgASK4CTfVf1WZ62sHzMb8uY0sZPUFo2+4rhTHZ9tHFjT1B:lmgzHwb8uYiF

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc2c38b145abe3exeexeexeex.exe

Files

dc2c38b145abe3exeexeexeex.exe
.exe windows x86

24925edd85dc766aeee616d039f0eea8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

UrlIsW
PathCreateFromUrlW
UrlCreateFromPathW
PathFindFileNameW

sfc

SfcIsFileProtected

wintrust

WinVerifyTrust

kernel32

LockResource
QueryPerformanceFrequency
HeapReAlloc
CloseHandle
RaiseException
FindResourceExW
LoadResource
FindResourceW
HeapAlloc
DecodePointer
HeapDestroy
DeleteCriticalSection
VerSetConditionMask
GetCurrentProcessId
GetProcessHeap
WideCharToMultiByte
VerifyVersionInfoW
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetTickCount
GetProcessTimes
SetLastError
MultiByteToWideChar
OpenEventW
CreateEventW
Sleep
CreateThread
GetConsoleWindow
SetConsoleTitleW
GetTimeFormatA
FileTimeToSystemTime
GetDateFormatA
GetProcAddress
FreeLibrary
GetVersionExW
InitializeCriticalSectionAndSpinCount
GetSystemInfo
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
DeleteFileW
FindClose
FindFirstFileW
FindNextFileW
GetDriveTypeW
GetFileAttributesW
GetFileAttributesExW
GetFileTime
SetEvent
QueryDosDeviceW
RemoveDirectoryW
SetFileAttributesW
SetFileTime
DeviceIoControl
EnterCriticalSection
LeaveCriticalSection
GetCurrentThread
GetSystemDirectoryW
GetWindowsDirectoryW
GetSystemWindowsDirectoryW
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GlobalAlloc
GlobalFree
lstrcmpW
CopyFileW
CopyFileExW
MoveFileExW
LocalFree
FormatMessageW
lstrlenW
LocalAlloc
CompareFileTime
GetFullPathNameW
CreateProcessA
CreateProcessW
GetModuleHandleA
GetModuleHandleW
LoadLibraryExW
lstrcmpA
GetModuleHandleExW
LoadLibraryW
CreateActCtxW
ReleaseActCtx
ActivateActCtx
DeactivateActCtx
GetSystemTime
GetLocalTime
SystemTimeToFileTime
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExW
FindFirstFileExA
ReadFile
GetConsoleMode
OutputDebugStringW
GetLastError
HeapSize
ReleaseMutex
GetCurrentThreadId
CreateFileW
WaitForSingleObject
InitializeCriticalSectionEx
CreateMutexW
GetTempPathW
GetModuleFileNameW
ExpandEnvironmentStringsW
WriteFile
GetCurrentProcess
HeapFree
CreateEventA
WaitForSingleObjectEx
GetFileSizeEx
SizeofResource
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
ReadConsoleW
SetEnvironmentVariableW
SetStdHandle
GetTempFileNameW
GetConsoleCP
FlushFileBuffers
SetConsoleCtrlHandler
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeFormatW
GetDateFormatW
OutputDebugStringA
GetACP
GetCommandLineW
GetCommandLineA
ExitProcess
WriteConsoleW
GetModuleFileNameA
GetFileType
GetStdHandle
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
ResetEvent
IsDebuggerPresent
AreFileApisANSI
CreateDirectoryExW
SetFilePointerEx
SetEndOfFile
GetFileInformationByHandle
GetDiskFreeSpaceExW
GetEnvironmentVariableW
FormatMessageA
GetCPInfo
GetLocaleInfoW
LCMapStringW
CompareStringW
EncodePointer
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetStringTypeW

user32

GetSystemMenu
EnableMenuItem
UnregisterClassW
GetProcessWindowStation
GetUserObjectInformationW

advapi32

RegQueryInfoKeyW
LsaNtStatusToWinError
RegSetValueExW
RegGetKeySecurity
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegOpenCurrentUser
InitializeSecurityDescriptor
GetNamedSecurityInfoW
LookupPrivilegeValueW
IsTextUnicode
MapGenericMask
GetFileSecurityW
DuplicateToken
AdjustTokenPrivileges
AccessCheck
OpenThreadToken
RegCloseKey
RegCreateKeyExW
OpenProcessToken
RegOpenKeyExW
RegEnumValueW
RegQueryValueExW
GetTokenInformation

shell32

SHGetFolderPathW

oleaut32

SafeArrayUnlock
SafeArrayGetVartype
VariantCopy
SafeArrayGetDim
SafeArrayCopy
SysAllocString
SafeArrayGetUBound
SafeArrayDestroy
SafeArrayCreate
VariantInit
SafeArrayLock
SysFreeString
SysStringLen
SysAllocStringLen
VariantChangeType
VariantClear
SafeArrayGetLBound

rpcrt4

UuidToStringW
UuidFromStringW
RpcStringFreeW

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

setupapi

SetupDiSetClassInstallParamsW
SetupDiGetDriverInstallParamsW
SetupDiSetDriverInstallParamsW
SetupDiSetSelectedDevice
SetupDiGetActualSectionToInstallExW
SetupDiGetClassRegistryPropertyW
SetupDiGetDeviceRegistryPropertyW
SetupDiOpenDevRegKey
SetupDiOpenClassRegKey
SetupDiInstallDevice
SetupDiCallClassInstaller
SetupDiBuildClassInfoList
SetupDiCreateDeviceInfoW
SetupDiCreateDeviceInfoList
SetupCopyOEMInfW
SetupGetIntField
SetupDiGetClassInstallParamsW
SetupGetFieldCount
SetupGetLineTextW
SetupFindNextMatchLineW
SetupFindNextLine
SetupFindFirstLineW
SetupCloseInfFile
SetupOpenAppendInfFileW
SetupOpenInfFileW
CM_Get_DevNode_Status
CM_Get_Device_ID_List_SizeW
CM_Get_Device_ID_ListW
CM_Get_Device_IDW
SetupUninstallOEMInfW
SetupDiGetINFClassW
SetupDiGetClassDevsW
SetupDiGetDriverInfoDetailW
SetupDiSetSelectedDriverW
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupDiSetClassRegistryPropertyW
SetupGetStringFieldW
SetupDiSetDeviceRegistryPropertyW
SetupDiGetSelectedDriverW
SetupDiEnumDriverInfoW
SetupDiBuildDriverInfoList
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInfo
SetupDiDeleteDeviceInfo
SetupDiOpenDeviceInfoW
SetupDiGetDeviceInstanceIdW

userenv

UnloadUserProfile

Sections

.text
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 347KB - Virtual size: 347KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 31KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 147KB - Virtual size: 147KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 652KB - Virtual size: 656KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

24925edd85dc766aeee616d039f0eea8

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

sfc

wintrust

kernel32

user32

advapi32

shell32

oleaut32

rpcrt4

version

setupapi

userenv

Sections

.text Size: 1.4MB - Virtual size: 1.4MB

.rdata Size: 347KB - Virtual size: 347KB

.data Size: 31KB - Virtual size: 39KB

.rsrc Size: 147KB - Virtual size: 147KB

.reloc Size: 652KB - Virtual size: 656KB

.text
Size: 1.4MB - Virtual size: 1.4MB

.rdata
Size: 347KB - Virtual size: 347KB

.data
Size: 31KB - Virtual size: 39KB

.rsrc
Size: 147KB - Virtual size: 147KB

.reloc
Size: 652KB - Virtual size: 656KB