Everything[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Everything.exe
Size

2.1MB
MD5

bf28a76455b1ce4c19f52b6e820c1c8a
SHA1

325166bc3e10f69fbf909999187c0d7f3154bc56
SHA256

a32abb79f818097fe06cfcde3a062c98203f9d02d5947fe19493e507028a6e53
SHA512

7556eab5cc412340b1eff7efaa500fd0d253cdca06752414aaac6e06c24f5fb6d2d9b75184adddbdce0207d55d1d0c11cd72fe92fb4c1344c7f6fa102d732d1f
SSDEEP

49152:zoEGlGs4PGXPNQ+7pPSTC+hF5RD9XM/+sfjEGqF1CkZrKNrK:zoh++c1HqWsAKNO

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Everything.exe

Files

Everything.exe
.exe windows:4 windows x64

93361d03a80c49b94ad1cc4ff704ad4b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

comctl32

ImageList_GetIconSize
InitCommonControlsEx
ImageList_DrawEx
_TrackMouseEvent

ws2_32

WSAAsyncSelect
send
recv
connect
setsockopt
WSAGetLastError
WSACleanup
htons
gethostbyname
inet_addr
accept
getsockname
ntohs
getpeername
bind
listen
shutdown
WSAStartup
socket
closesocket

shlwapi

PathCombineW
PathIsRootW
SHRegGetUSValueW
PathRemoveFileSpecW

imm32

ImmGetVirtualKey

urlmon

CopyStgMedium

kernel32

SetConsoleScreenBufferSize
SetStdHandle
AllocConsole
FreeConsole
CreateFileW
GetTempPathW
SetFilePointer
FileTimeToSystemTime
GetSystemTime
FreeResource
LockResource
LoadResource
SizeofResource
FindResourceW
GetSystemDefaultLangID
LoadLibraryA
Sleep
CopyFileW
TerminateProcess
OpenProcess
CreateMutexW
SetLastError
VirtualFree
VirtualAlloc
QueryDosDeviceW
SetErrorMode
DeleteFileW
MoveFileW
MoveFileExW
CreateDirectoryW
GetFileAttributesW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
GetComputerNameW
GetVolumeInformationW
GetDiskFreeSpaceW
GetFullPathNameW
GetFileSize
FindFirstFileW
FindNextFileW
QueryPerformanceFrequency
GetDriveTypeW
GetThreadPriority
CreateEventW
GetProcAddress
FreeLibrary
LoadLibraryW
GetModuleFileNameW
GetWindowsDirectoryW
GetCurrentDirectoryW
GetFileAttributesExW
LocalFileTimeToFileTime
SystemTimeToFileTime
FileTimeToLocalFileTime
SystemTimeToTzSpecificLocalTime
WaitForMultipleObjects
CreateThread
GetSystemInfo
GetVersionExA
ExpandEnvironmentStringsW
ConnectNamedPipe
LocalFree
CreateNamedPipeW
GetTimeZoneInformation
__C_specific_handler
MulDiv
GetTimeFormatW
GetNumberFormatW
GetDateFormatW
MultiByteToWideChar
WideCharToMultiByte
CloseHandle
GetLastError
ReadFile
GetModuleHandleW
GetCurrentThreadId
GetCommandLineW
HeapAlloc
GetProcessHeap
HeapFree
ExitProcess
QueryPerformanceCounter
WriteFile
GetStdHandle
GetFileType
GetConsoleScreenBufferInfo
SetConsoleTextAttribute
WriteConsoleW
GetLocaleInfoW
GetCalendarInfoW
DeviceIoControl
GetOverlappedResult
ResetEvent
FindNextChangeNotification
FindFirstChangeNotificationW
GetFileInformationByHandle
GetLocalTime
FindCloseChangeNotification
FindClose
GetSystemTimeAsFileTime
GetCurrentThread
SetThreadPriority
InitializeCriticalSection
WaitForSingleObject
DeleteCriticalSection
EnterCriticalSection
GetTickCount
LeaveCriticalSection
SetEvent
GetStartupInfoW
RemoveDirectoryW

user32

SetDlgItemTextW
InsertMenuW
FindWindowW
PtInRect
SetFocus
SetWindowLongPtrW
GetWindowLongPtrW
SetClipboardData
EmptyClipboard
CopyRect
GetParent
GetWindowTextW
GetWindowTextLengthW
IsZoomed
GetWindowPlacement
IsIconic
BringWindowToTop
SetActiveWindow
ShowWindow
GetLastActivePopup
GetKeyState
ScreenToClient
ClientToScreen
InvalidateRect
CreateDialogIndirectParamW
GetScrollInfo
LoadCursorW
GetKeyboardLayoutList
GetMenuItemInfoW
CheckDlgButton
EnumChildWindows
DrawTextW
UnregisterHotKey
RegisterHotKey
GetDoubleClickTime
KillTimer
GetForegroundWindow
DestroyMenu
TrackPopupMenu
SetMenuDefaultItem
CreateMenu
GetCursorPos
RegisterWindowMessageA
GetMessagePos
RedrawWindow
RegisterClipboardFormatW
SetMenu
ReleaseCapture
GetCapture
GetClientRect
GetAsyncKeyState
IsClipboardFormatAvailable
IsWindowVisible
SetCursor
SetCapture
ChangeClipboardChain
DrawEdge
DrawFrameControl
EqualRect
GetSubMenu
GetMenu
SetClipboardViewer
EnumWindows
ActivateKeyboardLayout
LoadIconW
IsDlgButtonChecked
SetScrollInfo
UpdateWindow
ScrollWindowEx
SetDlgItemInt
GetMenuState
RemoveMenu
SetForegroundWindow
GetMenuDefaultItem
EnableMenuItem
AdjustWindowRect
GetSysColorBrush
OffsetRect
InvalidateRgn
MessageBeep
SetCursorPos
GetDlgItemInt
SendDlgItemMessageW
GetDlgCtrlID
GetDesktopWindow
ValidateRect
CharLowerW
CharUpperW
CreateIconIndirect
CloseClipboard
FillRect
CreateWindowExW
GetClassInfoExW
RegisterClassExW
IsWindowEnabled
GetFocus
GetNextDlgTabItem
EnableWindow
SetWindowTextW
SetWindowLongW
MessageBoxW
DialogBoxIndirectParamW
GetMenuItemCount
CreatePopupMenu
AppendMenuW
DeleteMenu
SetMenuItemInfoW
GetWindowLongW
AdjustWindowRectEx
CallWindowProcW
GetDlgItem
GetWindowRect
BeginPaint
IntersectRect
GetMonitorInfoW
SystemParametersInfoW
GetDC
ReleaseDC
SetWindowsHookExW
PeekMessageW
WaitMessage
UnhookWindowsHookEx
CallNextHookEx
GetClassNameW
SendMessageW
PostQuitMessage
GetMessageW
TranslateMessage
DispatchMessageW
GetSystemMetrics
LoadImageW
GetKeyboardLayout
MapVirtualKeyExW
EndPaint
OpenClipboard
GetKeyNameTextW
IsWindow
GetWindowThreadProcessId
SendMessageTimeoutW
DefWindowProcW
DestroyWindow
SetTimer
DestroyIcon
PostMessageW
EndDialog
GetSysColor
PostThreadMessageW
GetMenuItemID
GetClipboardData
SetWindowPos
MapWindowPoints

gdi32

DeleteObject
EnumFontFamiliesExW
GetTextMetricsW
SelectObject
PatBlt
SetTextColor
SetBkColor
SetBrushOrgEx
CreatePatternBrush
CreateBitmapIndirect
SetBkMode
DeleteDC
GetTextExtentPoint32W
GetTextExtentExPointW
RectVisible
ExcludeClipRect
GetCurrentObject
TextOutW
CreateDIBSection
CreateRectRgn
CreateSolidBrush
GetNearestColor
CreateFontIndirectW
GetObjectW
ExtCreateRegion
GetRegionData
StretchDIBits
BitBlt
CreateCompatibleDC
GetDeviceCaps
GetTextAlign
SetStretchBltMode
GetDIBits
SelectClipRgn
GetStockObject
StretchBlt
SetTextAlign
CreateCompatibleBitmap
OffsetClipRgn
OffsetRgn
CombineRgn
GetDCOrgEx
GetRandomRgn

comdlg32

GetOpenFileNameW
GetSaveFileNameW
ChooseColorW
CommDlgExtendedError

advapi32

RegisterEventSourceW
RegCreateKeyExW
RegOpenKeyExW
RegEnumKeyW
RegSetValueExW
ReportEventW
DeregisterEventSource
CreateServiceW
StartServiceW
OpenSCManagerW
OpenServiceW
ControlService
CloseServiceHandle
DeleteService
StartServiceCtrlDispatcherW
RegisterServiceCtrlHandlerW
SetServiceStatus
GetUserNameW
RegDeleteKeyW
RegCloseKey
RegOpenKeyA
RegQueryValueW
QueryServiceConfigW
RegDeleteValueW
RegQueryValueExW

shell32

SHChangeNotify
SHGetPathFromIDListW
SHGetDesktopFolder
ShellExecuteExW
SHFileOperationW
ord16
SHGetSpecialFolderLocation
DragQueryFileW
SHBrowseForFolderW
Shell_NotifyIconW
DragAcceptFiles
DragFinish
DragQueryPoint
SHGetFileInfoW

ole32

CLSIDFromString
ReleaseStgMedium
CoTaskMemFree
CoUninitialize
CoInitializeEx
OleUninitialize
OleInitialize
CoCreateInstance
CreateStreamOnHGlobal
CoTaskMemAlloc
RevokeDragDrop
DoDragDrop
RegisterDragDrop

Sections

.text
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 286KB - Virtual size: 286KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 67KB - Virtual size: 68KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 48KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 39KB - Virtual size: 40KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

93361d03a80c49b94ad1cc4ff704ad4b

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

ws2_32

shlwapi

imm32

urlmon

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

Sections

.text Size: 1.7MB - Virtual size: 1.7MB

.rdata Size: 286KB - Virtual size: 286KB

.data Size: 67KB - Virtual size: 68KB

.pdata Size: 48KB - Virtual size: 48KB

.rsrc Size: 39KB - Virtual size: 40KB

.text
Size: 1.7MB - Virtual size: 1.7MB

.rdata
Size: 286KB - Virtual size: 286KB

.data
Size: 67KB - Virtual size: 68KB

.pdata
Size: 48KB - Virtual size: 48KB

.rsrc
Size: 39KB - Virtual size: 40KB