Minix[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

Minix.exe
Size

488KB
MD5

96e82e455b9c78086fbb8aea3dceaf86
SHA1

53b5a6fa79bb32a7e8aeb02b72ceaca43dc2f2b8
SHA256

32846c4cde7b4958aada04a2fb18b6e65b41aa947a6d1015e0a05462e238e8ec
SHA512

e963de92cf572fb88655ea224a59f2538040b014cea2480badf3658b3d5623b6c95847ebedb5ca235fa2fbdd5720992ea49a5f68a7e4b7ece4dfe2a9ddcb18c7
SSDEEP

3072:guHOX7HbnuRdok1J558agI7uEPD0Wcjiwqs1DtugBPbh/S:gJeT1Jlgd3Qg91/S

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Minix.exe

Files

Minix.exe
.exe windows:4 windows x86

af7c465a29650d5bf0b8db22f6f2d3e8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_AddMasked
ord17

mfc42

ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4425
ord768
ord489
ord4258
ord6334
ord2302
ord825
ord823
ord4376
ord4853
ord5280
ord4837
ord3597
ord800
ord765
ord616
ord609
ord641
ord860
ord540
ord324
ord2370
ord4234
ord6199
ord2818
ord6215
ord535
ord858
ord1200
ord3874
ord2645
ord4710
ord924
ord941
ord356
ord3663
ord5834
ord5450
ord6394
ord2448
ord2044
ord2575
ord6055
ord1776
ord4396
ord5290
ord3402
ord4424
ord3574
ord567
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord3698
ord4099
ord2614
ord939
ord537
ord6907
ord922
ord2017
ord639
ord5712
ord6877
ord1668
ord1953
ord322
ord6283
ord6282
ord6007
ord3998
ord4000
ord6008
ord4275
ord1908
ord4715
ord1690
ord2528
ord5288
ord4439
ord2054
ord4431
ord496
ord497
ord771
ord4259
ord3610
ord656
ord5981
ord3876
ord2864
ord2379
ord2362
ord2642
ord3880
ord3810
ord2574
ord3572
ord3571
ord3626
ord2414
ord665
ord3790
ord354
ord5710
ord4129
ord2764
ord6929
ord6927
ord5440
ord6383
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord2648
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord561
ord815
ord317
ord635
ord1978
ord5181
ord1168
ord807
ord554
ord5655
ord6625
ord6197
ord6880
ord3092
ord2109
ord1008
ord1768
ord755
ord470
ord3287
ord4125
ord4299
ord2086
ord1146
ord4163
ord1979
ord3318
ord5186
ord3316
ord3314
ord5242
ord6121
ord1774
ord2490
ord5010
ord3069
ord3062
ord5658
ord2395
ord6322
ord2609
ord1006
ord1787
ord6123
ord1994
ord5192
ord3703
ord775
ord397
ord503
ord699
ord4204
ord3466
ord5593
ord4291
ord4188
ord3438
ord4072
ord5705
ord5708
ord5696
ord5699
ord5706
ord5703
ord5694
ord5692
ord393
ord5572
ord2915
ord1265
ord5216
ord2813
ord536
ord912
ord3758
ord3408
ord3227
ord3054
ord3425
ord832
ord5933
ord1261
ord692
ord2301
ord1771
ord6366
ord2413
ord2024
ord4219
ord2581
ord4401
ord3639
ord790
ord795
ord6646
ord5148
ord3721
ord3716
ord693
ord3996
ord3286
ord2582
ord4402
ord3370
ord3640
ord6508
ord2363
ord6639
ord6741
ord809
ord556
ord5875
ord3797
ord3619
ord1641
ord2860
ord1669
ord2652
ord3733
ord686
ord810
ord2096
ord384
ord4271
ord6270
ord3303
ord1175
ord4220
ord2584
ord3654
ord2438
ord2863
ord1644
ord3398
ord2862
ord4441
ord4835
ord3798
ord5287
ord4353
ord6374
ord5163
ord2385
ord5241
ord4407
ord1775
ord4078
ord6052
ord2514
ord4998
ord4854
ord4377
ord5265
ord4358
ord4948
ord4976
ord4742
ord4905
ord5160
ord5162
ord5161
ord1907
ord5199
ord1576

msvcrt

memset
memcmp
_ftol
atol
??1type_info@@UAE@XZ
memmove
_setmbcp
atof
atoi
_mbscmp
memcpy
__CxxFrameHandler
_XcptFilter
exit
_acmdln
__getmainargs
_initterm
_exit
?terminate@@YAXXZ
_except_handler3
_onexit
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
__dllonexit
_controlfp

kernel32

SetFilePointer
CreateFileA
ReadFile
GlobalLock
GetModuleHandleA
GetStartupInfoA
CreateMutexA
GetLastError
CloseHandle
GlobalUnlock
GetModuleHandleW
GetModuleFileNameA
GetProcAddress
LocalFree
LocalUnlock
LocalLock
LocalAlloc
LoadLibraryA
MoveFileExA
GetFileSize
FreeLibrary
GetSystemDirectoryA
GetCurrentDirectoryA

user32

ClientToScreen
LoadMenuA
GetSubMenu
LoadBitmapA
SetCursor
SetWindowLongA
LoadIconA
GetWindow
RedrawWindow
GetWindowRect
IsIconic
DrawIcon
OffsetRect
GetSystemMetrics
InvalidateRect
MessageBeep
GetParent
GetNextDlgTabItem
GetKeyState
SendMessageA
EnableWindow
wsprintfA
MessageBoxA
GetClientRect

gdi32

CreateFontIndirectA
GetObjectA
GetStockObject

shell32

SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteA

msvcirt

?close@ifstream@@QAEXXZ
??_Difstream@@QAEXXZ
?fail@ios@@QBEHXZ
?open@ifstream@@QAEXPBDHH@Z
?openprot@filebuf@@2HB
??0ifstream@@QAE@XZ
??_Dofstream@@QAEXXZ
?close@ofstream@@QAEXXZ
??6ostream@@QAEAAV0@P6AAAV0@AAV0@@Z@Z
??6ostream@@QAEAAV0@PBD@Z
??6ostream@@QAEAAV0@D@Z
?endl@@YAAAVostream@@AAV1@@Z
?open@ofstream@@QAEXPBDHH@Z
??0ofstream@@QAE@XZ
?getline@istream@@QAEAAV1@PADHD@Z
??Bios@@QBEPAXXZ

Sections

.text
Size: 88KB - Virtual size: 87KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 364KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

af7c465a29650d5bf0b8db22f6f2d3e8

Headers

File Characteristics

Imports

comctl32

mfc42

msvcrt

kernel32

user32

gdi32

shell32

msvcirt

Sections

.text Size: 88KB - Virtual size: 87KB

.rdata Size: 24KB - Virtual size: 22KB

.data Size: 8KB - Virtual size: 5KB

.rsrc Size: 364KB - Virtual size: 363KB

.text
Size: 88KB - Virtual size: 87KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 8KB - Virtual size: 5KB

.rsrc
Size: 364KB - Virtual size: 363KB