parasite_in_city[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

parasite_in_city.exe
Size

2.7MB
MD5

704a2cb030f8a39747e5ffac0bb1a250
SHA1

61b52d2896b52d0b68e5a65f9d8cbfc1d47e0f5c
SHA256

64ad0c4a4881fc6d327432997aede559c5188f8845bbe02901a05499d2b8f017
SHA512

4265d853eb2941363b33938e1556bbac5b41955d6ed1dd54597a67418b9aec42679baf6c679c3325a132351dea792527c69257df559da6e507bd3d29587eb1ae
SSDEEP

49152:Ze2fbBru7701GeMA7P3d4XF9zChLHObkqVl9dUl+NjMHTtem:+775lChLubkqTUl+NjMZem

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
parasite_in_city.exe

Files

parasite_in_city.exe
.exe windows x86

9e3226f009dace399342915ac4e6b711

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wininet

InternetCloseHandle
InternetWriteFile
HttpEndRequestW
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetOpenA
HttpQueryInfoA
InternetReadFile
InternetGetConnectedState

d3dx9_43

D3DXCreateTextureFromFileW
D3DXGetPixelShaderProfile
D3DXCompileShader
D3DXGetVertexShaderProfile
D3DXCreateTextureFromFileInMemoryEx

dbghelp

MiniDumpWriteDump

winmm

mciSendStringA
joyGetPosEx
joyGetPos
joyGetDevCapsA
timeGetTime
mciGetErrorStringA

ws2_32

WSACleanup
WSAStartup
closesocket
accept
WSAGetLastError
getpeername
htonl
htons
__WSAFDIsSet
listen
gethostbyname
setsockopt
ioctlsocket
socket
bind
select
recv
inet_ntoa
recvfrom
send
getaddrinfo
inet_addr
connect
sendto
shutdown

gdiplus

GdiplusStartup
GdiplusShutdown

comctl32

InitCommonControlsEx

kernel32

EnumSystemLocalesA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetProcessHeap
SetEndOfFile
LCMapStringW
LCMapStringA
InitializeCriticalSectionAndSpinCount
SetConsoleCtrlHandler
SetFilePointer
SetStdHandle
ReadFile
VirtualAlloc
VirtualFree
HeapDestroy
HeapCreate
FatalAppExitA
FlushFileBuffers
GetConsoleMode
GetConsoleCP
WriteFile
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapSize
SetLastError
GetStdHandle
SetHandleCount
GetTimeZoneInformation
IsDebuggerPresent
TerminateProcess
GetModuleHandleA
GetStartupInfoA
CreateFileA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetFileType
PeekNamedPipe
GetFileInformationByHandle
HeapReAlloc
FindNextFileA
GetDateFormatA
IsValidLocale
GetLocaleInfoW
MultiByteToWideChar
GetConsoleWindow
GetModuleHandleW
GlobalUnlock
GlobalLock
GlobalAlloc
WideCharToMultiByte
OutputDebugStringW
FormatMessageW
GetProcAddress
LoadLibraryW
GetFullPathNameA
GetCurrentDirectoryA
WriteConsoleA
LocalFree
InterlockedDecrement
InterlockedIncrement
CreateThread
GetExitCodeThread
CloseHandle
Sleep
FreeLibrary
LoadLibraryA
GetExitCodeProcess
CreateProcessW
FindClose
DeleteFileW
FindNextFileW
RemoveDirectoryW
FindFirstFileW
GetFileAttributesA
CreateDirectoryA
GetEnvironmentVariableW
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
GetCommandLineW
SetCurrentDirectoryA
SetThreadPriority
SetPriorityClass
GetCurrentProcess
GetCurrentThread
GetVersionExW
GetUserDefaultLCID
ExpandEnvironmentStringsA
GetModuleFileNameW
MoveFileA
GetModuleFileNameA
GetCommandLineA
GetCurrentProcessId
GetCurrentThreadId
CreateFileW
IsBadWritePtr
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
TlsAlloc
TlsSetValue
TlsGetValue
TlsFree
ExitThread
WaitForSingleObject
DeleteFileA
GetFileAttributesW
SetFileAttributesW
FindFirstFileA
GetDriveTypeA
FileTimeToLocalFileTime
FileTimeToSystemTime
ExitProcess
HeapAlloc
HeapFree
RtlUnwind
GetSystemTimeAsFileTime
RaiseException
InterlockedExchange
LocalAlloc
GetConsoleOutputCP
WriteConsoleW
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetLastError
SetFileAttributesA
GetTimeFormatA

user32

CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
SetWindowPos
SetWindowPlacement
UpdateWindow
ScrollWindow
SetScrollInfo
GetScrollInfo
GetWindowRect
GetScrollPos
SetFocus
GetDlgItemTextW
DialogBoxParamW
MoveWindow
GetClientRect
SetCursorPos
MapWindowPoints
GetCursorPos
SetActiveWindow
GetActiveWindow
DispatchMessageW
CreateDialogParamW
GetMessageW
EnumDisplaySettingsW
ChangeDisplaySettingsW
SetWindowLongW
EnumDisplaySettingsExW
keybd_event
SetWindowTextA
IsClipboardFormatAvailable
GetClipboardData
ReleaseDC
GetDC
MessageBoxA
SetDlgItemTextA
IsDialogMessageW
PeekMessageW
GetForegroundWindow
GetAsyncKeyState
GetWindowPlacement
SendDlgItemMessageW
SetWindowTextW
wsprintfW
GetDlgItem
ShowWindow
EndDialog
InvalidateRect
SetDlgItemTextW
GetFocus
TranslateMessage
LoadImageW
GetSystemMetrics
AdjustWindowRectEx
LoadIconW
LoadCursorW
RegisterClassExW
CreateWindowExW
SendMessageW
DefWindowProcW
SetCursor
DestroyWindow
PostMessageW
GetKeyState
CallNextHookEx
MessageBoxW
GetParent

gdi32

CreateFontA
GetDeviceCaps
DeleteObject

comdlg32

GetOpenFileNameW
GetSaveFileNameW

shell32

SHGetSpecialFolderPathA
SHGetFolderPathA
CommandLineToArgvW
ShellExecuteW

Sections

.text
Size: 2.0MB - Virtual size: 2.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 368KB - Virtual size: 368KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 169KB - Virtual size: 608KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.mydata
Size: 512B - Virtual size: 8B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 189KB - Virtual size: 188KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9e3226f009dace399342915ac4e6b711

Headers

DLL Characteristics

File Characteristics

Imports

wininet

d3dx9_43

dbghelp

winmm

ws2_32

gdiplus

comctl32

kernel32

user32

gdi32

comdlg32

shell32

Sections

.text Size: 2.0MB - Virtual size: 2.0MB

.rdata Size: 368KB - Virtual size: 368KB

.data Size: 169KB - Virtual size: 608KB

.mydata Size: 512B - Virtual size: 8B

.rsrc Size: 189KB - Virtual size: 188KB

.text
Size: 2.0MB - Virtual size: 2.0MB

.rdata
Size: 368KB - Virtual size: 368KB

.data
Size: 169KB - Virtual size: 608KB

.mydata
Size: 512B - Virtual size: 8B

.rsrc
Size: 189KB - Virtual size: 188KB