mxbikes[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

mxbikes.exe
Size

3.8MB
MD5

d9fa576c93fd57772ccbf850f5cb25c2
SHA1

637c3cca5facbe44abfb97c72d0fd2d448c50565
SHA256

a1f11a4f8e42f95203ee0bd01f6c21174cbf57c2cd178f0048a69ba22566efba
SHA512

e68820a696cbdaa0e22ac6d460cc7b4a4a932b41f600b67cd169775fcd13bccdc2709061835d167de3f4a02b7fcc17fc707e49a6ee76c513d674861753e056a9
SSDEEP

98304:g6KPaQf407QdZqbBUrjHi0sPnv02U0VdOJ:TQf4LqbBgjC0sPH+

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mxbikes.exe

Files

mxbikes.exe
.exe windows x64

05e439f743272e3464bc82cce4734493

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime

user32

CloseClipboard
OpenClipboard
DispatchMessageA
SetWindowLongPtrA
ShowWindow
SetWindowPos
GetDesktopWindow
DefWindowProcA
EmptyClipboard
EnumDisplaySettingsA
GetMonitorInfoA
ChangeDisplaySettingsExA
SetWindowTextA
MessageBoxA
EnumDisplayMonitors
ChangeDisplaySettingsA
GetClipboardData
MapVirtualKeyA
CallWindowProcA
AdjustWindowRect
LoadCursorA
DestroyWindow
RegisterClassExA
ReleaseDC
PeekMessageA
LoadImageA
UpdateWindow
FillRect
SetClipboardData
CreateWindowExA
GetWindowLongA
UnregisterClassA
ShowCursor
TranslateMessage
GetDC
SendMessageA
GetClientRect
LoadIconA
PostQuitMessage
GetWindowLongPtrA

steam_api64

SteamAPI_Init
SteamAPI_RunCallbacks
SteamAPI_RestartAppIfNecessary
SteamAPI_Shutdown
SteamAPI_GetHSteamUser
SteamInternal_CreateInterface
SteamAPI_GetHSteamPipe
SteamAPI_UnregisterCallResult
SteamInternal_ContextInit
SteamAPI_RegisterCallResult

kernel32

RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
GetModuleFileNameA
GetStdHandle
SetCurrentDirectoryA
GlobalUnlock
FreeConsole
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetFileTime
TerminateProcess
GetStartupInfoA
GlobalSize
CreateFileA
CloseHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
FreeLibrary
GetProcAddress
LoadLibraryA
Sleep
AllocConsole
GlobalLock
GlobalAlloc

gdi32

GetStockObject
SelectObject
CreateCompatibleDC
CreateDIBSection
BitBlt
SetPixelFormat
DescribePixelFormat
ChoosePixelFormat
SwapBuffers
CreateSolidBrush
DeleteObject
SetTextColor
GetDeviceCaps
SetBkColor

shell32

SHGetSpecialFolderLocation
Shell_NotifyIconA
SHGetPathFromIDListA

ole32

CoTaskMemFree

msvcr90

sqrtf
??2@YAPEAX_K@Z
_HUGE
__CxxFrameHandler3
floorf
atan2f
_nextafterf
sprintf
vsprintf
memmove
abort
malloc
strchr
strncpy
strrchr
sscanf
strstr
tolower
atol
strncat
fopen
fprintf
fwrite
fclose
fread
__iob_func
printf
ftell
rename
remove
free
_findclose
ceilf
_time64
_purecall
fseek
fflush
atoi
_mkdir
setvbuf
_open_osfhandle
_localtime64
_fdopen
calloc
realloc
ldexp
qsort
exit
memchr
memset
memcpy
_create_locale
_atof_l
_free_locale
atof
_mktime64
asin
atan2
sin
cos
isspace
strlen
_stricmp_l
strcpy
strcat
strcmp
abs
pow
log
ceil
fmod
sqrt
atan
tan
acos
exp
rand
srand
floor
ferror
getenv
tmpfile
fputs
_sprintf_l
memcmp
fscanf
feof
fgets
_stricmp
_strupr
_strnicmp
_rmdir
_access
??3@YAXPEAX@Z
_amsg_exit
__getmainargs
__C_specific_handler
_XcptFilter
_exit
_ismbblead
_cexit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
powf
_fmode
_encode_pointer
__set_app_type
__crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
sinf
cosf
vfprintf
_vsnprintf
_findfirst64i32
_snprintf
_findnext64i32
_commode

opengl32

glGetError
glDisable
glEnable
glBindTexture
glBlendFunc
glAlphaFunc
glDepthMask
glFogfv
glDisableClientState
glTexGeni
glTexCoordPointer
glEnableClientState
glColorPointer
glNormalPointer
glVertexPointer
glGetFloatv
glGetIntegerv
wglGetProcAddress
glGetString
glViewport
glTexEnvi
glClearColor
glCullFace
glFrontFace
glDepthFunc
glReadPixels
glFlush
glReadBuffer
glClear
glVertex3f
glColor3fv
glTexImage2D
glTexParameterf
glTexParameteri
glGenTextures
glPixelStorei
glTexSubImage2D
glDeleteTextures
glDrawElements
glColor3f
glTexGenfv
glColor4f
glPolygonMode
glMaterialfv
glScissor
glMultMatrixf
glOrtho
glNormal3f
glColorMaterial
glFrustum
glMaterialf
glLightfv
glLightModelfv
glFogf
glFogi
wglMakeCurrent
wglGetCurrentContext
wglShareLists
wglCreateContext
wglGetCurrentDC
wglDeleteContext
glCopyTexSubImage2D
glLoadMatrixf
glMatrixMode
glEnd
glVertex3fv
glTexCoord2fv
glColor4ubv
glBegin
glLoadIdentity

dinput8

DirectInput8Create

ws2_32

ntohl
ioctlsocket
setsockopt
htons
closesocket
recvfrom
sendto
freeaddrinfo
getaddrinfo
getnameinfo
inet_pton
ntohs
bind
WSACleanup
inet_ntop
WSAStartup
htonl
socket

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 354KB - Virtual size: 353KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 13.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bind
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

05e439f743272e3464bc82cce4734493

Headers

DLL Characteristics

File Characteristics

Imports

winmm

user32

steam_api64

kernel32

gdi32

shell32

ole32

msvcr90

opengl32

dinput8

ws2_32

advapi32

Sections

.text Size: 3.0MB - Virtual size: 3.0MB

.rdata Size: 354KB - Virtual size: 353KB

.data Size: 105KB - Virtual size: 13.1MB

.pdata Size: 99KB - Virtual size: 99KB

.rsrc Size: 1024B - Virtual size: 944B

.reloc Size: 16KB - Virtual size: 15KB

.bind Size: 201KB - Virtual size: 201KB

.text
Size: 3.0MB - Virtual size: 3.0MB

.rdata
Size: 354KB - Virtual size: 353KB

.data
Size: 105KB - Virtual size: 13.1MB

.pdata
Size: 99KB - Virtual size: 99KB

.rsrc
Size: 1024B - Virtual size: 944B

.reloc
Size: 16KB - Virtual size: 15KB

.bind
Size: 201KB - Virtual size: 201KB