SpaceMonger140[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

SpaceMonger140.exe
Size

212KB
MD5

7ee9773349f4be107e2f710ce5b98860
SHA1

f4a38d2f0dbc6b1f1c6177754d269aba55ac8568
SHA256

4710ca1e81164c78416e55ea7e54c3136038689e6c5fd1e5220875800e3cef5b
SHA512

599d236cc9c14671409447fe9ee2658dc627a881cbdd09915f956586187e82c313cf369dc122f13e5df826de8756de8bb00eafb833aaa05997be143b69751448
SSDEEP

3072:kJi7Gz5fqnOFOl3QvTDF8br40u/vOpnebqzIF1oTUC7Fz:zSsnXg+Y36ebqzIG7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SpaceMonger140.exe

Files

SpaceMonger140.exe
.exe windows:4 windows x86

dabc5019c94f3e88d51d12734e01b9a0

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

HeapReAlloc
RaiseException
TerminateProcess
GetACP
HeapSize
HeapDestroy
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
HeapCreate
VirtualFree
GetStdHandle
ExitProcess
RtlUnwind
GetModuleFileNameA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
SetStdHandle
lstrcpyA
GetModuleHandleA
GlobalLock
GlobalUnlock
GlobalFree
LockResource
FindResourceA
LoadResource
GetCommandLineA
GetStartupInfoA
HeapFree
HeapAlloc
GetFullPathNameA
FlushFileBuffers
SetFilePointer
WriteFile
GetCurrentProcess
SetErrorMode
GetCurrentDirectoryA
WritePrivateProfileStringA
GetOEMCP
GetCPInfo
GetProcessVersion
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetLastError
GlobalFlags
Sleep
GetFileType
lstrcmpA
GlobalAlloc
GetDriveTypeA
FileTimeToSystemTime
GetCurrentThread
lstrcpynA
SetLastError
LocalFree
MulDiv
InterlockedIncrement
MultiByteToWideChar
WideCharToMultiByte
GetVersion
InterlockedDecrement
lstrlenA
GlobalGetAtomNameA
lstrcatA
GetCurrentThreadId
GlobalFindAtomA
lstrcmpiA
GlobalAddAtomA
SetUnhandledExceptionFilter
GlobalDeleteAtom
GetStringTypeA
GetEnvironmentStringsW
SetHandleCount
FindFirstFileA
GetDiskFreeSpaceA
GetTickCount
FreeLibrary
GetProcAddress
LoadLibraryA
CreateFileA
FindClose
FindNextFileA
CloseHandle
DeviceIoControl

user32

PostMessageA
SetDlgItemInt
SetDlgItemTextA
IsDialogMessageA
SetWindowTextA
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
ModifyMenuA
GetMenuState
LoadBitmapA
GetMenuCheckMarkDimensions
GetWindowDC
TabbedTextOutA
DrawTextA
GrayStringA
SetRectEmpty
InvalidateRect
PtInRect
LoadAcceleratorsA
TranslateAcceleratorA
ReleaseCapture
SetCursor
GetDesktopWindow
LoadMenuA
SetMenu
ReuseDDElParam
UnpackDDElParam
ValidateRect
GetMessageA
InflateRect
LoadStringA
GetDCEx
LockWindowUpdate
SetCapture
SetParent
GetTopWindow
MessageBoxA
IsChild
GetCapture
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
GetSubMenu
GetMenuItemID
SetRect
ShowOwnedPopups
GetKeyState
PostQuitMessage
GetFocus
GetClassLongA
GetPropA
CallWindowProcA
RemovePropA
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
RegisterWindowMessageA
IntersectRect
SystemParametersInfoA
IsIconic
GetNextDlgTabItem
EndDialog
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetParent
GetDlgItem
CreateWindowExA
GetWindowLongA
DefWindowProcA
SetWindowLongA
BeginPaint
DrawIcon
EndPaint
SetTimer
KillTimer
ShowWindow
GetWindowRect
SetWindowPos
GetCursorPos
IsWindowEnabled
BringWindowToTop
WindowFromPoint
GetClassNameA
ScreenToClient
LoadCursorA
RegisterClassExA
GetSystemMetrics
LoadImageA
GetWindow
LoadIconA
GetSystemMenu
AppendMenuA
GetWindowPlacement
UpdateWindow
OffsetRect
GetSysColor
GetSysColorBrush
FrameRect
FillRect
GetMenuItemCount
InsertMenuItemA
ClientToScreen
CreatePopupMenu
TrackPopupMenuEx
DestroyMenu
RedrawWindow
GetDC
ReleaseDC
GetClientRect
IsWindow
PeekMessageA
TranslateMessage
DispatchMessageA
AdjustWindowRectEx
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
IsWindowVisible
SendDlgItemMessageA
MapWindowPoints
SetWindowsHookExA
SetFocus
CallNextHookEx
GetWindowTextLengthA
GetWindowTextA
GetDlgCtrlID
SendMessageA
EnableWindow
SetPropA
GetMessageTime
UnhookWindowsHookEx
UnregisterClassA

gdi32

SelectObject
CreateSolidBrush
CreatePalette
CreateFontA
RealizePalette
CreateRectRgn
GetTextExtentPoint32A
GetTextMetricsA
SetTextColor
TextOutA
SetTextAlign
SetBkMode
GetStockObject
GetClipBox
DeleteObject
GetObjectA
CreateBitmap
SetBkColor
CreateRectRgnIndirect
DeleteDC
PatBlt
SaveDC
RestoreDC
SelectPalette
SetROP2
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
GetDeviceCaps
CreatePatternBrush
PtVisible
RectVisible
ExtTextOutA
Escape
StretchDIBits
CreateCompatibleBitmap
GetCharWidthA
CreateFontIndirectA
SetRectRgn
CombineRgn
BitBlt
CreateCompatibleDC

winspool.drv

DocumentPropertiesA
ClosePrinter
OpenPrinterA

advapi32

RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegCreateKeyA
RegSetValueExA
RegOpenKeyA
RegQueryValueExA

shell32

DragQueryFileA
ShellExecuteExA
SHFileOperationA
ShellExecuteA
SHGetFileInfoA
DragFinish

comctl32

ord17
ImageList_Create
ImageList_ReplaceIcon

Sections

.text
Size: 140KB - Virtual size: 137KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dabc5019c94f3e88d51d12734e01b9a0

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

advapi32

shell32

comctl32

Sections

.text Size: 140KB - Virtual size: 137KB

.rdata Size: 32KB - Virtual size: 31KB

.data Size: 8KB - Virtual size: 21KB

.rsrc Size: 28KB - Virtual size: 24KB

.text
Size: 140KB - Virtual size: 137KB

.rdata
Size: 32KB - Virtual size: 31KB

.data
Size: 8KB - Virtual size: 21KB

.rsrc
Size: 28KB - Virtual size: 24KB