controller[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

controller.exe
Size

3.1MB
MD5

6e4a9029ae12f6333081b1c3d6930997
SHA1

cc0ed5cc35011f24e2b9822d6c22c06cefbb19ed
SHA256

083af6a4b5ac46ec86e41d3f49e416407b9d2ead74cae5d2a0084fe4aaaf5b7e
SHA512

438942599b9f23393054226f71eea1665b8c4d572303b479c13661ca8234b3890c4a597c795ddee9621fe66b8a26662f3c0731cd7877533d063714f76942911b
SSDEEP

49152:arCnWgLeSmDsTrqhqBPWehsHf2rIL7sQ45tHmL1TVwZwevfC8fnc+mmm:adCmNmPWdLSGZ+CJ+mmm

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
controller.exe

Files

controller.exe
.exe windows:6 windows x64

e17d4eee2718d8e4727a6cbe2a8660e4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

kernel32

IsProcessorFeaturePresent
TerminateProcess
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
GetConsoleProcessList
AddVectoredExceptionHandler
SetThreadStackGuarantee
GetLastError
GetCommandLineW
GetStdHandle
CloseHandle
QueryPerformanceCounter
GetCurrentThreadId
DeviceIoControl
CreateFileA
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
SetThreadErrorMode
LoadLibraryExW
GetProcAddress
FreeLibrary
SwitchToThread
GetConsoleMode
GetFileType
GetFileInformationByHandleEx
GetModuleHandleW
LoadLibraryW
GlobalLock
GlobalSize
WideCharToMultiByte
GlobalUnlock
MultiByteToWideChar
GlobalAlloc
GlobalFree
CreateThread
Sleep
GetModuleHandleA
GetCurrentThread
TryAcquireSRWLockExclusive
WaitForSingleObject
WriteConsoleW
SetLastError
QueryPerformanceFrequency
FormatMessageW
GetCurrentDirectoryW
GetCurrentProcess
ReleaseMutex
WaitForSingleObjectEx
LoadLibraryA
GetCurrentProcessId
CreateMutexA
RtlCaptureContext
RtlLookupFunctionEntry
GetEnvironmentVariableW
GetModuleFileNameW
CreateFileW
GetFileInformationByHandle
GetFullPathNameW
SetFilePointerEx
FindFirstFileW
FindClose
ExitProcess
GetSystemTimeAsFileTime
AcquireSRWLockShared
ReleaseSRWLockShared
SetConsoleMode
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
InitializeSListHead
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter

opengl32

wglMakeCurrent
wglGetCurrentContext
wglGetCurrentDC
wglGetProcAddress
wglShareLists
wglCreateContext
wglDeleteContext

user32

SystemParametersInfoA
GetWindowRect
MessageBoxA
SetWindowLongA
RegisterRawInputDevices
FindWindowA
SetClipboardData
EmptyClipboard
CloseClipboard
GetClipboardData
SetWindowPos
RegisterWindowMessageA
GetClassInfoExW
GetClassNameW
CreateWindowExW
RegisterClassExW
InvalidateRgn
MsgWaitForMultipleObjectsEx
GetWindowLongPtrW
DestroyIcon
SetWindowPlacement
GetWindowPlacement
ChangeDisplaySettingsExW
RedrawWindow
IsProcessDPIAware
SetForegroundWindow
ShowCursor
MapVirtualKeyW
ClipCursor
GetClipCursor
GetActiveWindow
GetDC
RegisterTouchWindow
GetSystemMetrics
AdjustWindowRectEx
GetMenu
GetWindowLongW
GetUpdateRect
PeekMessageW
PostThreadMessageW
ValidateRect
GetRawInputData
GetKeyboardState
GetMonitorInfoW
MonitorFromWindow
MonitorFromRect
SetWindowLongW
CloseTouchInputHandle
GetTouchInputInfo
MapVirtualKeyA
ReleaseCapture
DefWindowProcW
SendMessageW
SetCapture
TrackMouseEvent
SetWindowLongPtrW
DestroyWindow
GetKeyState
ToUnicodeEx
GetKeyboardLayout
OpenClipboard
DispatchMessageW
TranslateMessage
GetMessageW
ShowWindow
SetCursor
LoadCursorW
SetWindowDisplayAffinity
SendMessageA
MoveWindow
GetFocus
GetClientRect
SetActiveWindow
SetWindowLongPtrA
GetWindowLongPtrA
GetAsyncKeyState
ScreenToClient
GetCursorPos
SetCursorPos
ClientToScreen
PostMessageW
SendInput

shell32

IsUserAnAdmin
DragFinish
DragQueryFileW

gdi32

GetPixelFormat
DescribePixelFormat
SetPixelFormat
DeleteObject
ChoosePixelFormat
SwapBuffers
CreateRectRgn
GetDeviceCaps

ole32

CoUninitialize
RegisterDragDrop
RevokeDragDrop
OleInitialize
CoInitializeEx
CoCreateInstance

imm32

ImmGetCompositionStringW
ImmGetContext
ImmAssociateContextEx
ImmReleaseContext

dwmapi

DwmEnableBlurBehindWindow

winmm

timeEndPeriod
timeGetDevCaps
timeBeginPeriod

ntdll

NtWriteFile
NtReadFile
RtlNtStatusToDosError

oleaut32

SysFreeString
SysStringLen
GetErrorInfo

uxtheme

SetWindowTheme

vcruntime140

memset
memmove
memcmp
__CxxFrameHandler3
strstr
memchr
__C_specific_handler
__current_exception
__current_exception_context
memcpy

api-ms-win-crt-math-l1-1-0

roundf
floor
trunc
ceilf
round
pow
floorf
acosf
atan2f
cosf
__setusermatherr
fmodf
log
logf
sqrtf
sinf
powf

api-ms-win-crt-string-l1-1-0

strncmp
strcmp
strlen
strncpy

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
_seh_filter_exe
_set_app_type
_configure_narrow_argv
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
exit
terminate
_crt_atexit
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argv
__p___argc
_exit
_wassert
_register_onexit_function

api-ms-win-crt-stdio-l1-1-0

__p__commode
fclose
__stdio_common_vfprintf
fflush
_set_fmode
fopen
fread
fseek
__stdio_common_vsscanf
ftell
fwrite
__acrt_iob_func
__stdio_common_vsprintf

api-ms-win-crt-heap-l1-1-0

_set_new_mode
malloc
free

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-convert-l1-1-0

atof

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Sections

.text
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 587KB - Virtual size: 587KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 2KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e17d4eee2718d8e4727a6cbe2a8660e4

Headers

DLL Characteristics

File Characteristics

Imports

bcrypt

advapi32

kernel32

opengl32

user32

shell32

gdi32

ole32

imm32

dwmapi

winmm

ntdll

oleaut32

uxtheme

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-locale-l1-1-0

Sections

.text Size: 2.5MB - Virtual size: 2.5MB

.rdata Size: 587KB - Virtual size: 587KB

.data Size: 2KB - Virtual size: 47KB

.pdata Size: 46KB - Virtual size: 45KB

.rsrc Size: 9KB - Virtual size: 8KB

.reloc Size: 13KB - Virtual size: 12KB

.text
Size: 2.5MB - Virtual size: 2.5MB

.rdata
Size: 587KB - Virtual size: 587KB

.data
Size: 2KB - Virtual size: 47KB

.pdata
Size: 46KB - Virtual size: 45KB

.rsrc
Size: 9KB - Virtual size: 8KB

.reloc
Size: 13KB - Virtual size: 12KB