1de06dcaaeb075exe_JC[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

1de06dcaaeb075exe_JC.exe
Size

3.5MB
MD5

1de06dcaaeb075c497823945a248a746
SHA1

09b085772c5d91d5f3389b0c16f73e36030815c3
SHA256

6d7b1b9e005e459b8f72533681c11731df56afdf615fa3f2c2d68f0db64ea37f
SHA512

6441354f5eca0311087364cfa7e68def9394367e47270ad5b464d1e42f1920fe608c6af390cf17f838af26254b1e148bf09ad21088a85748377da2c2eafb2edf
SSDEEP

98304:FRnLAwt0NC4zQXhyLE9uYY0r4Uku9mAtRDBOBbP9PORRV7wY0DGiy1uSXd2t3NcR:7L7D6eXUt3NcA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1de06dcaaeb075exe_JC.exe

Files

1de06dcaaeb075exe_JC.exe
.exe windows x86

1ba3950801e8ac021f64d6f742e27617

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

shlwapi

PathFindExtensionW
PathIsUNCW
PathRemoveFileSpecW
StrFormatKBSizeW
PathFindFileNameW
PathStripToRootW
PathFileExistsW

gdiplus

GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromHBITMAP
GdipSetInterpolationMode
GdipDrawImageRectI
GdipDeleteGraphics
GdipCreateFromHDC
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipDrawImageI
GdipCreateBitmapFromScan0
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdipCloneImage
GdipLoadImageFromStream
GdiplusShutdown
GdiplusStartup
GdipAlloc
GdipFree

kernel32

lstrcpyW
VerSetConditionMask
VerifyVersionInfoW
GetTickCount
GetProfileIntW
SearchPathW
GetUserDefaultLCID
SetErrorMode
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetFileSizeEx
GetFileAttributesExW
GlobalGetAtomNameW
InitializeCriticalSectionAndSpinCount
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
GetCurrentThread
ResumeThread
WriteConsoleW
SetThreadPriority
CreateEventW
SetEvent
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
EncodePointer
SystemTimeToTzSpecificLocalTime
lstrcmpiW
LoadLibraryA
LoadLibraryExW
DuplicateHandle
FindResourceExW
LockFile
GetVolumeInformationW
GetFullPathNameW
FlushFileBuffers
lstrcmpA
GlobalFree
GlobalSize
LoadLibraryExA
VirtualQuery
VirtualProtect
GetSystemInfo
FileTimeToSystemTime
ReleaseMutex
CreateMutexW
FormatMessageA
GetSystemTimeAsFileTime
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetLocalTime
GetCurrentThreadId
QueryPerformanceCounter
MulDiv
SetCurrentDirectoryW
GetStdHandle
SetFileTime
CreateDirectoryW
GetFileSize
SetFilePointer
WriteFile
SetEndOfFile
FindNextFileW
FindFirstFileExW
LocalFileTimeToFileTime
DosDateTimeToFileTime
FileTimeToLocalFileTime
GetCurrentProcessId
OutputDebugStringA
OutputDebugStringW
LCMapStringW
DeleteCriticalSection
GetProcessHeap
HeapSize
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
UnlockFile
GetStringTypeW
GetCPInfo
RtlUnwind
InterlockedPushEntrySList
RemoveDirectoryW
VirtualAlloc
HeapFree
HeapReAlloc
HeapAlloc
GlobalFlags
RaiseException
DecodePointer
GetTempPathW
GetTempFileNameW
SetEnvironmentVariableW
DeviceIoControl
GetACP
Wow64RevertWow64FsRedirection
Wow64DisableWow64FsRedirection
GetFileTime
CompareFileTime
GetCurrentDirectoryW
GetExitCodeThread
TerminateThread
CreateThread
GetDefaultCommConfigW
LocalAlloc
GetTickCount64
MoveFileW
CopyFileW
SetLastError
WriteProfileStringW
GetProfileStringW
FormatMessageW
LocalFree
CreateProcessW
GetExitCodeProcess
CreatePipe
SetHandleInformation
ReadFile
GetWindowsDirectoryW
GetFileAttributesW
GlobalLock
GlobalUnlock
GlobalAlloc
GetModuleHandleW
WideCharToMultiByte
GetSystemDirectoryW
FindFirstFileW
FindClose
WaitForSingleObject
SetFileAttributesW
GetLocaleInfoA
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GetModuleFileNameW
CloseHandle
DeleteFileW
CreateFileW
GetCommandLineW
MultiByteToWideChar
MoveFileExW
FindResourceW
SizeofResource
LockResource
LoadResource
GetVersionExW
GetCurrentProcess
GetLastError
LoadLibraryW
GetProcAddress
FreeLibrary
Sleep
FreeLibraryAndExitThread
GetModuleHandleExW
GetCommandLineA
SetStdHandle
GetFileType
HeapQueryInformation
QueryPerformanceFrequency
ExitProcess
GetDateFormatW
GetTimeFormatW
IsValidLocale
EnumSystemLocalesW
GetConsoleCP
GetConsoleMode
SetFilePointerEx
GetTimeZoneInformation
GetDriveTypeW
ReadConsoleW
IsValidCodePage
GetOEMCP
ExitThread
GetEnvironmentStringsW
FreeEnvironmentStringsW
IsProcessorFeaturePresent

user32

MonitorFromPoint
UpdateLayeredWindow
UnionRect
DrawIcon
FrameRect
CopyIcon
SetCursorPos
GetSystemMenu
IsZoomed
DrawFrameControl
DrawEdge
SetParent
SetWindowRgn
SetClassLongW
DrawStateW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
EnumDisplayMonitors
SetLayeredWindowAttributes
InvertRect
HideCaret
EnableScrollBar
MessageBeep
GetIconInfo
DrawIconEx
IsRectEmpty
GetNextDlgGroupItem
GetMenuDefaultItem
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
CreatePopupMenu
TranslateAcceleratorW
LoadAcceleratorsW
BringWindowToTop
LoadImageW
TrackMouseEvent
WindowFromPoint
ReleaseCapture
SetCapture
WaitMessage
DestroyIcon
DeleteMenu
CopyImage
SystemParametersInfoW
GetMenuItemInfoW
DestroyMenu
RealChildWindowFromPoint
LoadCursorW
GetSysColorBrush
NotifyWinEvent
DrawFocusRect
InflateRect
MapVirtualKeyW
GetKeyNameTextW
OffsetRect
SetRectEmpty
SendDlgItemMessageA
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
LoadMenuW
ClientToScreen
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
MapDialogRect
GetWindowThreadProcessId
SetCursor
ShowOwnedPopups
PostQuitMessage
GetCursorPos
GetActiveWindow
TranslateMessage
GetMessageW
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
SetDlgItemTextW
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
CallNextHookEx
SetWindowsHookExW
GetLastActivePopup
PostThreadMessageW
GetClassLongW
SetWindowLongW
GetWindowLongW
PtInRect
EqualRect
CopyRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
GetWindowRgn
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
GetDlgCtrlID
GetDlgItem
IsIconic
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetFocus
UnhookWindowsHookEx
CharUpperW
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
wsprintfW
GetSystemMetrics
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetRect
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
MessageBoxA
wvsprintfW
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
UnregisterClassW
GetAsyncKeyState
LoadBitmapW
ReleaseDC
GetWindowDC
GetDC
GetWindowRect
InvalidateRect
KillTimer
SetTimer
SendNotifyMessageW
GetParent
PostMessageW
FillRect
GetSysColor
GetClientRect
EnableWindow
GetWindow
SendMessageW
GetDesktopWindow
MessageBoxW
ExitWindowsEx
GetComboBoxInfo
GetClassNameW
CreateMenu
DestroyCursor
GetTopWindow
IntersectRect

gdi32

GetBkColor
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
SetROP2
GetTextFaceW
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
CreateCompatibleBitmap
EnumFontFamiliesExW
GetTextMetricsW
DPtoLP
SetRectRgn
CreateFontIndirectW
CombineRgn
PatBlt
CreateRectRgnIndirect
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
SetBkColor
CreateBitmap
GetDeviceCaps
CreateDCW
GetTextExtentPoint32W
SetTextAlign
GetViewportOrgEx
CopyMetaFileW
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateCompatibleDC
BitBlt
GetObjectW
SetTextColor

msimg32

TransparentBlt
AlphaBlend

winspool.drv

GetPrinterDataExW
GetPrinterDataW
DeletePrinter
EnumJobsW
SetJobW
AddPortW
AddMonitorW
ConfigurePortW
AddPrinterConnectionW
AddPrinterW
GetPrintProcessorDirectoryW
DeletePrinterConnectionW
ord203
EnumPortsW
EnumMonitorsW
DeletePrinterDriverW
DeletePrinterDriverPackageW
EnumPrinterDriversW
OpenPrinterW
ClosePrinter
EnumPrintersW
GetPrinterW
SetPrinterW
GetPrinterDriverDirectoryW
DocumentPropertiesW
ord204

advapi32

SetEntriesInAclW
AdjustTokenPrivileges
RegQueryValueW
ConvertStringSecurityDescriptorToSecurityDescriptorW
ReportEventW
RegisterEventSourceW
DeregisterEventSource
RegQueryInfoKeyW
OpenServiceW
OpenSCManagerW
StartServiceW
QueryServiceStatus
ControlService
CloseServiceHandle
GetExplicitEntriesFromAclW
OpenProcessToken
RegSetKeySecurity
RegOpenKeyExW
RegGetKeySecurity
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
GetSecurityDescriptorDacl
GetAclInformation
EqualSid
RegEnumKeyW
RegQueryValueExW
RegOpenKeyW
RegCreateKeyExW
RegCloseKey
RegSetValueExW
FreeSid
AllocateAndInitializeSid
LookupPrivilegeValueW

shell32

SHGetPathFromIDListW
SHBrowseForFolderW
ShellExecuteExW
ord155
SHGetFolderLocation
SHChangeNotify
SHCreateDirectoryExW
SHGetKnownFolderPath
SHAppBarMessage
SHGetDesktopFolder
SHGetSpecialFolderLocation
DragFinish
DragQueryFileW
SHGetFileInfoW
ShellExecuteW

comctl32

ord17

uxtheme

GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
IsAppThemed
DrawThemeText
DrawThemeParentBackground
GetThemeColor
IsThemeBackgroundPartiallyTransparent

ole32

CoLockObjectExternal
OleGetClipboard
DoDragDrop
RevokeDragDrop
CoInitializeEx
OleLockRunning
CreateStreamOnHGlobal
CoTaskMemFree
CoTaskMemAlloc
OleDuplicateData
ReleaseStgMedium
CoUninitialize
CoCreateGuid
CoCreateInstance
CoDisconnectObject
RegisterDragDrop
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoInitialize

oleaut32

VarBstrFromDate
VariantCopy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
LoadTypeLi
SysAllocString
SysFreeString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen

dbghelp

MiniDumpWriteDump

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 532KB - Virtual size: 531KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 55KB - Virtual size: 74KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 700KB - Virtual size: 704KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

1ba3950801e8ac021f64d6f742e27617

Headers

DLL Characteristics

File Characteristics

Imports

version

shlwapi

gdiplus

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

uxtheme

ole32

oleaut32

dbghelp

oleacc

imm32

winmm

Sections

.text Size: 2.2MB - Virtual size: 2.2MB

.rdata Size: 532KB - Virtual size: 531KB

.data Size: 55KB - Virtual size: 74KB

.rsrc Size: 700KB - Virtual size: 704KB

.text
Size: 2.2MB - Virtual size: 2.2MB

.rdata
Size: 532KB - Virtual size: 531KB

.data
Size: 55KB - Virtual size: 74KB

.rsrc
Size: 700KB - Virtual size: 704KB