6cf2f2a2bf2e620119659dbfcb7cc350_exe32[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

6cf2f2a2bf2e620119659dbfcb7cc350_exe32.exe
Size

1.1MB
MD5

6cf2f2a2bf2e620119659dbfcb7cc350
SHA1

89e98635f1ca7525cb964b9154ba070d4742ef64
SHA256

b2bb20b84b9bc430cbdbab388a495a124b4b0cf24c4703007d8ac3b28636f4c7
SHA512

272304f34a1f3937914081c4628918d837b32a0dc0933c707a2b723824c2612b2f117a7ffecd517becd325e6da6bc3fe3f2d1eb3674f78dfa7536ac3751a475b
SSDEEP

24576:+YdMhzmCijpgT9KVS6QFi80tKel4/7px5ACUunFCPnWT9T9T:ZehzmjY9ujSel4hCPnWT9T9T

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6cf2f2a2bf2e620119659dbfcb7cc350_exe32.exe

Files

6cf2f2a2bf2e620119659dbfcb7cc350_exe32.exe
.exe windows:4 windows x86

f1edeca0759b218ddf3ab6090ec0610a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

GetUserNameA
RegCloseKey
RegOpenKeyA
RegQueryValueExA

comdlg32

GetOpenFileNameW
PrintDlgA

crtdll

__GetMainArgs
_cexit
_control87
_environ_dll
_errno
_fileno
_fmode_dll
_fpreset
_iob
_setjmp
_setmode
_strdup
_tzset
acos
atan
atexit
atoi
atol
calloc
cos
ctime
exit
exp
fclose
feof
fflush
fgetc
fgetpos
floor
fopen
fread
free
freopen
frexp
fscanf
fseek
ftell
getchar
getenv
isdigit
ldexp
log
longjmp
malloc
memcpy
memmove
memset
modf
pow
realloc
remove
setvbuf
signal
sin
sprintf
sqrt
sscanf
strcat
strchr
strcmp
strcpy
strncmp
strncpy
strrchr
strstr
strtoul
tan
time
vfprintf
wcslen
_stat
_strdup
_strnicmp

dinput

DirectInputCreateA

gdi32

BitBlt
CreateCompatibleDC
CreateDCA
CreateDIBSection
CreatePalette
CreateRectRgn
DeleteDC
DeleteObject
DescribePixelFormat
EndDoc
EndPage
GetDIBits
GetDeviceCaps
GetEnhMetaFileHeader
GetObjectA
GetPixelFormat
GetStockObject
PlayEnhMetaFile
RealizePalette
SelectClipRgn
SelectObject
SelectPalette
SetDIBitsToDevice
SetMapMode
SetPixelFormat
SetRectRgn
StartDocA
StartPage
StretchDIBits
SwapBuffers

kernel32

CloseHandle
CreateDirectoryW
CreateEventA
CreateFileA
CreateFileW
CreateMutexA
CreatePipe
CreateThread
DeleteFileW
ExitProcess
ExitThread
ExpandEnvironmentStringsW
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
FindFirstFileA
FindFirstFileW
FindNextFileA
FindNextFileW
FlushFileBuffers
FormatMessageA
FreeLibrary
GetCommState
GetCommandLineA
GetCommandLineW
GetCurrentDirectoryA
GetCurrentProcess
GetCurrentThread
GetFileSize
GetFullPathNameW
GetLastError
GetLocalTime
GetLocaleInfoA
GetLogicalDrives
GetModuleFileNameW
GetModuleHandleA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcAddress
GetStartupInfoA
GetStdHandle
GetSystemDirectoryA
GetSystemInfo
GetTempFileNameA
GetTempPathA
GetTickCount
GetTimeZoneInformation
GetVersion
GetVersionExA
GlobalAlloc
GlobalFree
GlobalHandle
GlobalLock
GlobalMemoryStatus
GlobalReAlloc
GlobalSize
GlobalUnlock
LoadLibraryA
LocalFree
MoveFileW
MulDiv
MultiByteToWideChar
OpenFile
PurgeComm
ReadFile
ReleaseMutex
RemoveDirectoryW
ResetEvent
ResumeThread
SetCommState
SetCommTimeouts
SetCurrentDirectoryA
SetEndOfFile
SetEvent
SetFilePointer
SetLastError
SetThreadPriority
SetUnhandledExceptionFilter
SetupComm
Sleep
TerminateThread
VirtualAlloc
VirtualFree
WaitForSingleObject
WideCharToMultiByte
WriteFile
WritePrivateProfileStringA
_lclose
_lwrite
lstrcatA
lstrcmpA
lstrcpyA
lstrlenA

ole32

CoCreateGuid
CoCreateInstance
CoInitialize
CoUninitialize
OleInitialize
OleUninitialize
RegisterDragDrop
RevokeDragDrop

opengl32

glBegin
glBindTexture
glBlendFunc
glClear
glClearColor
glClearDepth
glColor4d
glColorMaterial
glColorPointer
glDeleteTextures
glDepthFunc
glDepthMask
glDisable
glDisableClientState
glDrawArrays
glDrawElements
glEnable
glEnableClientState
glEnd
glFinish
glFlush
glFogf
glFogfv
glFogi
glFrontFace
glGenTextures
glGetError
glGetIntegerv
glGetString
glHint
glIsEnabled
glIsTexture
glLightModelfv
glLightModeli
glLightf
glLightfv
glLineWidth
glLoadIdentity
glLoadMatrixf
glMaterialf
glMaterialfv
glMatrixMode
glNormalPointer
glPointSize
glPolygonMode
glPopAttrib
glPopMatrix
glPushAttrib
glPushMatrix
glScaled
glShadeModel
glTexCoord2d
glTexCoordPointer
glTexEnvi
glTexImage2D
glTexParameteri
glTexSubImage2D
glTranslated
glVertex2i
glVertexPointer
glViewport
wglCreateContext
wglDeleteContext
wglMakeCurrent

shell32

DragFinish
DragQueryFileA
DragQueryFileW

user32

AdjustWindowRect
AppendMenuA
BeginPaint
BringWindowToTop
CheckMenuItem
CloseClipboard
CreateCursor
CreateIconIndirect
CreatePopupMenu
CreateWindowExA
DefWindowProcA
DefWindowProcW
DestroyCursor
DestroyWindow
DispatchMessageA
EmptyClipboard
EndPaint
GetClassNameA
GetClientRect
GetClipboardData
GetCursorPos
GetDC
GetFocus
GetKeyState
GetMessageA
GetParent
GetSystemMenu
GetSystemMetrics
GetTopWindow
GetUpdateRect
GetUpdateRgn
GetWindow
GetWindowLongA
GetWindowRect
InvalidateRect
IsClipboardFormatAvailable
IsIconic
IsRectEmpty
IsWindow
IsWindowVisible
LoadIconA
LoadImageA
MapWindowPoints
MessageBeep
MessageBoxA
MoveWindow
MsgWaitForMultipleObjects
OpenClipboard
PeekMessageA
PostMessageA
RegisterClassA
RegisterWindowMessageA
ReleaseCapture
ReleaseDC
ScreenToClient
SendMessageA
SetActiveWindow
SetCapture
SetClipboardData
SetCursor
SetFocus
SetForegroundWindow
SetWindowLongA
SetWindowLongW
SetWindowPos
SetWindowTextA
SetWindowTextW
ShowWindow
SystemParametersInfoA
TrackPopupMenu
TranslateMessage
UpdateWindow
wsprintfA
wvsprintfA

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

winmm

joyGetDevCapsA
joyGetNumDevs
joyGetPos
joyGetPosEx
midiInClose
midiInGetDevCapsA
midiInGetErrorTextA
midiInGetNumDevs
midiInOpen
midiInReset
midiInStart
midiInStop
midiOutClose
midiOutGetDevCapsA
midiOutGetErrorTextA
midiOutGetNumDevs
midiOutLongMsg
midiOutOpen
midiOutPrepareHeader
midiOutReset
midiOutShortMsg
timeBeginPeriod
timeEndPeriod
timeGetDevCaps
timeGetTime
timeKillEvent
timeSetEvent
waveInAddBuffer
waveInClose
waveInGetDevCapsA
waveInGetErrorTextA
waveInGetNumDevs
waveInOpen
waveInPrepareHeader
waveInReset
waveInStart
waveOutClose
waveOutGetDevCapsA
waveOutGetErrorTextA
waveOutGetNumDevs
waveOutGetVolume
waveOutOpen
waveOutPrepareHeader
waveOutReset
waveOutSetVolume
waveOutWrite

wsock32

WSACleanup
WSAGetLastError
WSAStartup
__WSAFDIsSet
accept
bind
closesocket
connect
gethostbyaddr
gethostbyname
gethostname
getpeername
getservbyname
getservbyport
getsockname
getsockopt
htonl
htons
inet_addr
inet_ntoa
ioctlsocket
listen
ntohl
ntohs
recv
recvfrom
select
send
sendto
setsockopt
socket

Exports

Exports

addGCRoot
callbackEnter
callbackLeave
dumpImage
moduleUnloaded
primitiveChangeClassWithClass
primitiveDisablePowerManager
primitiveForceTenure
primitiveIsRoot
primitiveIsYoung
primitivePluginBrowserReady
primitivePluginDestroyRequest
primitivePluginPostURL
primitivePluginRequestFileHandle
primitivePluginRequestState
primitivePluginRequestURL
primitivePluginRequestURLStream
primitiveRootTable
primitiveRootTableAt
primitiveScreenDepth
primitiveSetGCBiasToGrow
primitiveSetGCBiasToGrowGCLimit
primitiveSetGCSemaphore
removeGCRoot

Sections

.text
Size: 961KB - Virtual size: 960KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 70KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.bss
Size: - Virtual size: 237KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1024B - Virtual size: 836B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 13KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 108KB - Virtual size: 108KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

f1edeca0759b218ddf3ab6090ec0610a

Headers

File Characteristics

Imports

advapi32

comdlg32

crtdll

dinput

gdi32

kernel32

ole32

opengl32

shell32

user32

version

winmm

wsock32

Exports

Exports

Sections

.text Size: 961KB - Virtual size: 960KB

.data Size: 70KB - Virtual size: 70KB

.bss Size: - Virtual size: 237KB

.edata Size: 1024B - Virtual size: 836B

.idata Size: 13KB - Virtual size: 12KB

.rsrc Size: 108KB - Virtual size: 108KB

.text
Size: 961KB - Virtual size: 960KB

.data
Size: 70KB - Virtual size: 70KB

.bss
Size: - Virtual size: 237KB

.edata
Size: 1024B - Virtual size: 836B

.idata
Size: 13KB - Virtual size: 12KB

.rsrc
Size: 108KB - Virtual size: 108KB