NA_NA_38c466103f762cexeexe_JC[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

NA_NA_38c466103f762cexeexe_JC.exe
Size

3.3MB
MD5

38c466103f762c908888056bcc6d8f92
SHA1

f71f66fcdda69801ac31e693668a9bea6ff73213
SHA256

3b73ed7f89322fb1b91f82e6ad1405ea0bd15dd36b5d2bdc122383b64929f993
SHA512

107524c0171d17d13ece7ca5a658da9a67e8be5721a101e8755bd859519dac49d1077d2b465024d2de4c9d98569664fdf94eeffb94087dba511be70755035e74
SSDEEP

98304:Z6Q0bYlszLMpKX6FLyQTua7iI68/0i2NeDzXXkM+QDoj9ghi1RebMIg9Cbk/V8:cZLuKX6Sa7iI68PXXkM+QDojDIg9Cbki

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NA_NA_38c466103f762cexeexe_JC.exe

Files

NA_NA_38c466103f762cexeexe_JC.exe
.exe windows x86

5f3ab75c630c5f7935ee308554b9bf0d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetModuleFileNameA
CreateActCtxW
DeleteCriticalSection
GetModuleFileNameW
SetThreadPriority
ResumeThread
WaitForSingleObject
GetCurrentDirectoryA
MulDiv
lstrlenW
LocalFree
FormatMessageA
CopyFileA
lstrcmpA
GetLocaleInfoA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
GetPrivateProfileIntA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetTickCount
SystemTimeToFileTime
ReplaceFileA
SetFileTime
GetFileTime
GetTempFileNameA
GetFullPathNameA
GetDiskFreeSpaceA
FileTimeToSystemTime
FileTimeToLocalFileTime
LocalAlloc
GetStringTypeExA
GetThreadLocale
lstrcmpiA
DeleteFileA
MoveFileA
ReadFile
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetVolumeInformationA
GetShortPathNameA
GlobalFlags
TlsGetValue
GlobalHandle
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GetCPInfo
GetOEMCP
GetACP
GetProfileIntA
Sleep
SearchPathA
GetTempPathA
GetFileAttributesExA
LocalFileTimeToFileTime
GetFileSizeEx
SetErrorMode
VirtualProtect
GetWindowsDirectoryA
GetNumberFormatA
CreateFileA
EncodePointer
DecodePointer
HeapAlloc
HeapFree
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RtlUnwind
RaiseException
VirtualAlloc
GetSystemInfo
VirtualQuery
ExitThread
CreateThread
GetSystemTimeAsFileTime
HeapReAlloc
ExitProcess
HeapQueryInformation
HeapSize
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
HeapCreate
SetHandleCount
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
IsProcessorFeaturePresent
IsValidCodePage
GetStringTypeW
LCMapStringW
CompareStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
WriteConsoleW
GetProcessHeap
CreateFileW
SetEnvironmentVariableA
InitializeCriticalSectionAndSpinCount
GlobalAlloc
GlobalReAlloc
GlobalFree
GlobalSize
FindResourceA
FreeResource
GetCurrentThreadId
GlobalFindAtomA
GlobalDeleteAtom
GetVersionExA
FreeLibrary
CompareStringA
LoadLibraryW
lstrcmpW
GlobalLock
GlobalUnlock
GetCurrentProcessId
lstrlenA
GlobalGetAtomNameA
GlobalAddAtomA
MultiByteToWideChar
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
GetFileSize
CloseHandle
FindResourceExW
GetFileAttributesA
lstrcpyA
InterlockedDecrement
InterlockedIncrement
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
ActivateActCtx
GetProcAddress
GetModuleHandleA
LoadLibraryA
GetLastError
DeactivateActCtx
ReleaseActCtx
SetLastError

user32

LoadCursorW
LoadCursorA
MessageBeep
GetCursorPos
NotifyWinEvent
GetAsyncKeyState
CharUpperA
AppendMenuA
GetMenuDefaultItem
IsMenu
DrawIconEx
SetMenuDefaultItem
DrawStateA
FillRect
OpenClipboard
CopyImage
SetClipboardData
CloseClipboard
EmptyClipboard
LoadImageW
SetRect
UnionRect
GetUpdateRect
LockWindowUpdate
GetDC
ReleaseDC
GetKeyNameTextA
MapVirtualKeyA
GetMenuItemInfoA
GetMenuStringA
SystemParametersInfoA
RegisterClipboardFormatA
SetClassLongA
GetSysColorBrush
ValidateRect
TranslateMessage
GetMessageA
DestroyAcceleratorTable
EnableScrollBar
UpdateLayeredWindow
MonitorFromPoint
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
GetWindowDC
BeginPaint
EndPaint
RemoveMenu
InsertMenuA
DrawEdge
DrawFrameControl
DrawFocusRect
EnumDisplayMonitors
SetLayeredWindowAttributes
PostQuitMessage
MapDialogRect
SetWindowContextHelpId
LoadAcceleratorsW
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
PostThreadMessageA
WaitMessage
ShowOwnedPopups
GetIconInfo
CharUpperBuffA
FrameRect
InvertRect
HideCaret
SetCursorPos
RealChildWindowFromPoint
CopyIcon
CopyAcceleratorTableA
ToAsciiEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableA
SubtractRect
UnregisterClassA
IsClipboardFormatAvailable
GetDoubleClickTime
EnumChildWindows
CharNextA
InvalidateRgn
GetNextDlgGroupItem
DestroyCursor
DrawIcon
CreateMenu
IsCharLowerA
MapVirtualKeyExA
GetWindowRgn
GetTabbedTextExtentW
ModifyMenuA
GetMenuState
EnableMenuItem
CheckMenuItem
RegisterWindowMessageA
LoadIconA
SendDlgItemMessageA
SetWindowsHookExA
CallNextHookEx
SetPropA
WindowFromPoint
RemovePropA
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
DispatchMessageA
BeginDeferWindowPos
EndDeferWindowPos
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoA
MapWindowPoints
ScrollWindow
TrackPopupMenu
SetScrollRange
GetScrollRange
SetScrollPos
GetScrollPos
ShowScrollBar
MessageBoxA
CreateWindowExA
GetClassInfoExA
RegisterClassA
AdjustWindowRectEx
DeferWindowPos
GetScrollInfo
SetScrollInfo
PtInRect
SetWindowPlacement
GetWindowPlacement
DefWindowProcA
CallWindowProcA
GetClassNameA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
DestroyMenu
WinHelpA
SetWindowPos
DestroyIcon
SetFocus
GetWindowThreadProcessId
GetActiveWindow
IsWindowEnabled
EqualRect
GetDlgItem
SetWindowLongA
GetDlgCtrlID
GetKeyState
LoadIconW
SetCursor
PeekMessageA
ReleaseCapture
LoadAcceleratorsA
SetActiveWindow
InsertMenuItemA
GetMenuItemID
GetMenuItemCount
CreatePopupMenu
GetClassInfoA
IntersectRect
GetMenu
GetLastActivePopup
BringWindowToTop
SetMenu
GetDesktopWindow
ShowWindow
GetWindowLongA
TranslateAcceleratorA
IsWindow
DestroyWindow
GetClassLongA
SetForegroundWindow
SetParent
GetTopWindow
GetCapture
IsWindowVisible
SetWindowRgn
IsZoomed
IsIconic
PostMessageA
OffsetRect
IsRectEmpty
CopyRect
GetWindow
GetParent
SetRectEmpty
LoadMenuW
GetSubMenu
SendMessageA
ScreenToClient
GetClientRect
InvalidateRect
UpdateWindow
GetWindowRect
InflateRect
GetSysColor
LoadBitmapW
EnableWindow
IsChild
GetFocus
ClientToScreen
LoadImageA
GetSystemMetrics
RedrawWindow
SetCapture
KillTimer
SetTimer
GetSystemMenu
DeleteMenu
SetWindowTextA
MoveWindow
IsDialogMessageA
SetDlgItemTextA
CheckDlgButton
TranslateMDISysAccel
GetMenuCheckMarkDimensions
DefMDIChildProcA
DefFrameProcA
GetPropA
SetMenuItemBitmaps
DrawMenuBar

gdi32

BitBlt
PatBlt
GetDIBits
RealizePalette
SelectPalette
CreateRectRgn
CombineRgn
StretchBlt
GetObjectA
GetTextExtentPoint32A
GetStockObject
DeleteObject
CreateFontIndirectA
GetPixel
SetPixel
ExtTextOutA
GetTextMetricsA
SaveDC
SetDIBColorTable
GetTextColor
CreateRectRgnIndirect
CreateRoundRectRgn
CreatePen
CreateBitmap
SetBkColor
SetTextColor
CreateCompatibleBitmap
CreateDIBSection
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
GetClipBox
ExcludeClipRect
IntersectClipRect
LineTo
MoveToEx
SetTextAlign
GetLayout
SetLayout
SelectObject
DeleteDC
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
TextOutA
RectVisible
SelectClipRgn
PtVisible
StartDocA
GetWindowExtEx
CreateCompatibleDC
SetPixelV
EnumFontFamiliesExA
GetTextExtentPoint32W
GetTextExtentPointA
GetTextFaceA
GetTextAlign
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetNearestColor
GetBoundsRect
FrameRgn
FillRgn
PtInRegion
GetSystemPaletteEntries
GetNearestPaletteIndex
GetWindowOrgEx
SetPaletteEntries
GetPaletteEntries
CreatePalette
ExtFloodFill
LPtoDP
GetViewportOrgEx
GetRgnBox
OffsetRgn
GetCharWidthA
RoundRect
Rectangle
EndDoc
AbortDoc
SetAbortProc
EndPage
ExtSelectClipRgn
CreatePatternBrush
GetObjectType
GetDeviceCaps
CreateSolidBrush
CreateHatchBrush
SetRectRgn
GetMapMode
DPtoLP
CopyMetaFileA
CreateDCA
CreateEllipticRgn
CreatePolygonRgn
GetBkColor
Polyline
Ellipse
Polygon
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
StartPage
GetViewportExtEx

oleaut32

SysAllocString
SysAllocStringByteLen
SysStringLen
VariantCopy
SysFreeString
SysAllocStringLen
VariantInit
VariantClear
SafeArrayDestroy
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
OleCreateFontIndirect
VariantChangeType

msimg32

AlphaBlend
TransparentBlt

comctl32

ImageList_GetIconSize
ImageList_GetImageCount
ImageList_DrawEx
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_Create
ImageList_GetIcon
InitCommonControlsEx

shlwapi

PathIsUNCA
PathStripToRootA
UrlUnescapeA
PathFindFileNameA
PathFindExtensionA
PathRemoveFileSpecW

oledlg

ord8

gdiplus

GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipGetImagePalette
GdipFree
GdipAlloc
GdipDeleteGraphics
GdipDisposeImage
GdipCreateBitmapFromHBITMAP
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipCloneImage
GdipGetImageWidth
GdipDrawImageI

oleacc

LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

wininet

InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetOpenUrlA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetQueryDataAvailable
InternetCloseHandle
HttpQueryInfoA
InternetSetOptionExA

winmm

PlaySoundA

winspool.drv

ClosePrinter
OpenPrinterA
GetJobA
DocumentPropertiesA

comdlg32

GetFileTitleA

advapi32

RegOpenKeyExW
RegEnumValueA
RegCloseKey
RegSetValueA
RegQueryValueExA
RegOpenKeyExA
RegCreateKeyExA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
SetFileSecurityA
GetFileSecurityA
RegEnumKeyExA

shell32

DragFinish
SHGetFileInfoA
SHAppBarMessage
ShellExecuteA
SHAddToRecentDocs
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
ExtractIconA
DragQueryFileA

ole32

CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
CoInitializeEx
StringFromCLSID
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
CoRevokeClassObject
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoGetClassObject
OleLockRunning
OleGetClipboard
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
CoTaskMemFree
CreateStreamOnHGlobal
StgOpenStorageOnILockBytes
CLSIDFromString
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoCreateGuid
CoInitialize
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
OleDestroyMenuDescriptor

Sections

.text
Size: 1.5MB - Virtual size: 1.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 337KB - Virtual size: 337KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 180KB - Virtual size: 179KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f3ab75c630c5f7935ee308554b9bf0d

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

oleaut32

msimg32

comctl32

shlwapi

oledlg

gdiplus

oleacc

imm32

wininet

winmm

winspool.drv

comdlg32

advapi32

shell32

ole32

Sections

.text Size: 1.5MB - Virtual size: 1.5MB

.rdata Size: 337KB - Virtual size: 337KB

.data Size: 27KB - Virtual size: 56KB

.rsrc Size: 1.3MB - Virtual size: 1.3MB

.reloc Size: 180KB - Virtual size: 179KB

.text
Size: 1.5MB - Virtual size: 1.5MB

.rdata
Size: 337KB - Virtual size: 337KB

.data
Size: 27KB - Virtual size: 56KB

.rsrc
Size: 1.3MB - Virtual size: 1.3MB

.reloc
Size: 180KB - Virtual size: 179KB