NA_0227f4e5defbadexe_JC[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NA_0227f4e5defbadexe_JC.exe
Size

2.0MB
MD5

0227f4e5defbad2ddace65901ae606de
SHA1

7b170e2d04a705a494a269df9382b6982212abbd
SHA256

884104d6f1adf1b329a461535f4d0ba21c4dbd314d7c5861e1f97a4bee86c26f
SHA512

0ab0325fe96b0ebcfdc3604a618e6bcf177011a6cc2c9f583fe497bec5e6e278f5acdcbe1e545450df3454c520bbbbad59abb87100da0e43efc105b19a4edaf2
SSDEEP

24576:Em0PSpyAWNwBw1aF8uY3X8TxrY89DEV20f7EM/Gi57L:yPSpFWNwBNF8uY3X8TxrY89DEffIQ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NA_0227f4e5defbadexe_JC.exe

Files

NA_0227f4e5defbadexe_JC.exe
.exe windows x86

33c48bab68081c772d9f63770a21bb50

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
WritePrivateProfileStringA
MoveFileA
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationA
GetFullPathNameA
GetFileAttributesA
SetErrorMode
RtlUnwind
ExitProcess
ExitThread
CreateThread
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetTimeZoneInformation
HeapReAlloc
HeapSize
SetStdHandle
QueryPerformanceCounter
TlsGetValue
GetSystemTimeAsFileTime
SetHandleCount
GetStdHandle
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadCodePtr
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetLocaleInfoW
GlobalHandle
GlobalReAlloc
PeekNamedPipe
GetSystemDirectoryA
DeviceIoControl
FreeConsole
OutputDebugStringA
InterlockedExchangeAdd
AllocConsole
LocalAlloc
FileTimeToLocalFileTime
InterlockedDecrement
SuspendThread
GetCurrentThread
lstrcmpA
ConvertDefaultLocale
EnumResourceLanguagesA
SetLastError
MulDiv
GlobalAlloc
FormatMessageA
LocalFree
GlobalLock
GlobalUnlock
GlobalFree
InterlockedIncrement
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcmpW
lstrcpynA
CreateSemaphoreA
TerminateThread
ReleaseSemaphore
IsBadReadPtr
IsBadWritePtr
SystemTimeToFileTime
DuplicateHandle
GetFileType
GetFileInformationByHandle
FileTimeToSystemTime
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
GetTempFileNameA
MoveFileExA
FlushFileBuffers
SetFilePointer
CompareStringW
CompareStringA
lstrcmpiA
GetVersion
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetSystemTime
TerminateProcess
GetCurrentProcess
GetProcessHeap
HeapAlloc
HeapFree
OpenProcess
FreeLibrary
ReadFile
FreeResource
lstrcatA
lstrlenA
WinExec
GetLocalTime
GetFileSize
lstrcpyA
LoadLibraryA
GetProcAddress
GetPrivateProfileSectionNamesA
GetPrivateProfileStringA
GetDiskFreeSpaceExA
CreateEventA
ResetEvent
CreateDirectoryA
WriteFile
FindFirstFileA
CreateFileA
GetFileTime
FindNextFileA
FindClose
GetTickCount
MultiByteToWideChar
WaitForSingleObject
SetEvent
ResumeThread
CreateMutexA
GetLastError
CloseHandle
GetTempPathA
GetModuleHandleA
GetPrivateProfileIntA
GetModuleFileNameA
Sleep
SetFileAttributesA
DeleteFileA
CopyFileA
CreateProcessA
SetEnvironmentVariableA
GetCommandLineA
WideCharToMultiByte
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetCurrentDirectoryA
GetShortPathNameA
FindResourceA
LoadResource
LockResource
GetCurrentProcessId
SizeofResource

user32

SetCapture
InvalidateRgn
CopyAcceleratorTableA
IsRectEmpty
GetSysColorBrush
wsprintfA
DestroyMenu
GetWindowDC
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetWindowContextHelpId
MapDialogRect
GetMessageA
ValidateRect
GetDesktopWindow
GetActiveWindow
CreateDialogIndirectParamA
GetNextDlgTabItem
EndDialog
CharNextA
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
GetMenuCheckMarkDimensions
ShowWindow
MoveWindow
IsDialogMessageA
RegisterWindowMessageA
WinHelpA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
IsWindow
SetFocus
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
MapWindowPoints
MessageBoxA
GetKeyState
GetScrollPos
SetForegroundWindow
IsWindowVisible
GetMenu
GetSubMenu
GetMenuItemID
EnableWindow
SetTimer
IsCharAlphaNumericA
KillTimer
SetWindowLongA
InvalidateRect
SendMessageA
FindWindowA
DefWindowProcA
UpdateWindow
CreateWindowExA
RegisterClassExA
PtInRect
SetRect
GetMenuItemCount
AdjustWindowRectEx
ScreenToClient
EqualRect
GetScrollInfo
GetClassInfoA
RegisterClassA
GetDlgCtrlID
CallWindowProcA
SetWindowPos
IntersectRect
SystemParametersInfoA
GetWindowPlacement
CopyRect
GetWindow
MessageBeep
RegisterClipboardFormatA
MsgWaitForMultipleObjects
DispatchMessageA
PeekMessageA
TranslateMessage
OffsetRect
GetNextDlgGroupItem
ClientToScreen
WindowFromPoint
DrawEdge
GetCapture
ReleaseCapture
GetCursorPos
DrawFocusRect
PostThreadMessageA
SetActiveWindow
LoadBitmapA
DrawIcon
AppendMenuA
GetSystemMenu
IsIconic
SetWindowRgn
GetWindowRect
GetClientRect
GetDC
ReleaseDC
LoadIconA
GetSystemMetrics
PostQuitMessage
SetDlgItemTextW
GetWindowLongA
DestroyWindow
PostMessageA
SetWindowTextA
GetParent
GetDlgItem
EndPaint
GetSysColor
GetMessagePos
BeginPaint
IsWindowEnabled
SetCursor
LoadCursorA
CharUpperA
UnregisterClassA
DrawStateA
InflateRect
FillRect
FrameRect

gdi32

CreatePen
CreateSolidBrush
CreateRectRgnIndirect
GetMapMode
GetRgnBox
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
CreateFontA
MoveToEx
LineTo
SetMapMode
RestoreDC
SaveDC
GetTextColor
GetBkColor
GetDeviceCaps
GetStockObject
CreateBitmap
GetClipBox
SelectClipRgn
DeleteDC
StretchBlt
CreateCompatibleBitmap
DeleteObject
GetObjectA
CreateFontIndirectA
SelectObject
SetBkMode
SetTextColor
SetBkColor
CreateDIBitmap
GetPixel
BitBlt
CreateCompatibleDC
CombineRgn
CreateRectRgn

comdlg32

GetFileTitleA

winspool.drv

OpenPrinterA
DocumentPropertiesA
ClosePrinter

advapi32

RegQueryValueA
RegOpenKeyExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
RegOpenKeyA
RegQueryValueExA
RegDeleteKeyA
RegEnumKeyA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

shell32

SHFileOperationA

comctl32

ord17
_TrackMouseEvent

shlwapi

PathAddBackslashA
PathFindExtensionA
SHSetValueA
PathRemoveBackslashA
PathFindFileNameA
PathFileExistsA
PathAppendA
PathRemoveBlanksA
UrlUnescapeA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecA
SHGetValueA

oledlg

ord8

ole32

CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
CoTaskMemFree
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes

oleaut32

SysFreeString
VariantChangeType
VariantInit
SysAllocStringLen
OleCreateFontIndirect
SysStringLen
SysAllocStringByteLen
VariantCopy
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocString
GetErrorInfo
VariantClear

ws2_32

WSAGetLastError
inet_addr
htons
gethostbyname
select
closesocket
WSACleanup
WSAStartup
send
recv
connect
socket
__WSAFDIsSet
shutdown

wininet

InternetQueryOptionA
InternetSetStatusCallback
InternetConnectA
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestA
InternetOpenUrlA
InternetGetCookieA
InternetSetOptionA
HttpQueryInfoA
InternetReadFile
InternetOpenA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetCloseHandle

Exports

Exports

CreateSoDATask
DestroySoDATask
SoDACancelDownload
SoDACancelDownloadUrllist
SoDACommitFile
SoDADownloadUrl
SoDADownloadUrllist
SoDAGetPort
SoDAGetStatusInfo
SoDAInitLibrary
SoDAPauseDownload
SoDAPauseDownloadUrllist
SoDAResumeFile
SoDASetBlockMessage
SoDASetCallback
SoDASetCaller
SoDASetDownloadMode
SoDASetFileName
SoDASetIPCPort
SoDASetPingback
SoDASetUserID
SoDAWaitDownload

Sections

.text
Size: 480KB - Virtual size: 478KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.4MB - Virtual size: 1.4MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

33c48bab68081c772d9f63770a21bb50

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

wininet

Exports

Exports

Sections

.text Size: 480KB - Virtual size: 478KB

.rdata Size: 116KB - Virtual size: 115KB

.data Size: 12KB - Virtual size: 44KB

.rsrc Size: 1.4MB - Virtual size: 1.4MB

.text
Size: 480KB - Virtual size: 478KB

.rdata
Size: 116KB - Virtual size: 115KB

.data
Size: 12KB - Virtual size: 44KB

.rsrc
Size: 1.4MB - Virtual size: 1.4MB