mip[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

mip.exe
Size

1.3MB
MD5

e07ae3aa3e1b61d0da4e0361c474524d
SHA1

5fdfda0f309e959107fa658346a96ceeae90ee85
SHA256

ece72751ff39db2432d62724076e8b8690635c7f69c466a39ecd7fde6de5503a
SHA512

3efd7a5640d1eda1aed45810a204319b44c25c0e997a9b1849153ba61b87d6d1e5104fb9383ca3e881ae5e851557a17480149978181e05eb8952bc0634a8bba1
SSDEEP

24576:9A/s+TTrLdK0jsjW1OSBVRD6ZvOgVjdemKINEaxWqqCk4QBb3Gsa20yICk:9yTjsiZBrDORiINEaxkCZm3Gf2d3k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mip.exe

Files

mip.exe
.exe windows:10 windows x86

a401fa46d29063c6043f7057d3355474

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegQueryInfoKeyW
RegEnumKeyExW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegDeleteValueW
RegQueryValueExW
RegQueryValueExA
RegOpenKeyExA

kernel32

GetTickCount
MulDiv
GetCurrentThreadId
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
CreateMutexExW
SetLastError
CreateSemaphoreExW
GetCurrentProcessId
InitOnceComplete
InitializeCriticalSection
LeaveCriticalSection
InitOnceBeginInitialize
GetCommandLineW
HeapSetInformation
CreateEventW
OpenEventW
LockResource
GetModuleFileNameW
FindResourceExW
LoadResource
SizeofResource
MultiByteToWideChar
RaiseException
lstrcmpiW
GetModuleHandleW
FreeLibrary
OpenSemaphoreW
WaitForSingleObject
HeapAlloc
GetProcessHeap
HeapFree
DeleteCriticalSection
EnterCriticalSection
WaitForSingleObjectEx
ReleaseMutex
ReleaseSemaphore
CloseHandle
SetEvent
OutputDebugStringW
GetLastError
GetProcAddress
LoadLibraryExW
GetModuleFileNameA
GetACP
GetSystemDefaultLCID
GetVersionExA
GetProfileIntA
GetUserDefaultLCID
GetSystemDefaultLangID
DisableThreadLibraryCalls
ResetEvent
WaitForMultipleObjects
TryEnterCriticalSection
ResumeThread
SetThreadPriority
CreateThread
GetLocaleInfoW
GetUserDefaultUILanguage
FreeResource
FindResourceW
LoadLibraryW
LocalFree
LocalAlloc
OutputDebugStringA
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetModuleHandleA
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetStartupInfoW
Sleep
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
IsProcessorFeaturePresent
DecodePointer
EncodePointer
LoadLibraryExA
VirtualAlloc
GetCurrentProcess
VirtualFree
WideCharToMultiByte
GetStringTypeExW
HeapDestroy
HeapReAlloc
HeapSize
FormatMessageW
GetModuleHandleExW

gdi32

BitBlt
CreateDIBSection
GetRegionData
CreateSolidBrush
ExtSelectClipRgn
SetDIBColorTable
GetObjectW
SetStretchBltMode
OffsetRgn
ExtCreateRegion
GetDIBColorTable
StretchBlt
CreateFontIndirectW
GetTextMetricsW
GetTextExtentPointW
GetTextColor
SetBkMode
CreateCompatibleBitmap
CreateBitmap
GetBitmapBits
GetStockObject
Ellipse
SetDCBrushColor
SetROP2
CreateFontW
Polyline
SetLayout
SetWindowExtEx
StretchDIBits
GetTextFaceW
GetCharABCWidthsW
GetCharWidthA
GetCharWidth32A
CreateCompatibleDC
GetOutlineTextMetricsA
ExtTextOutA
ExtTextOutW
CreatePalette
SetBkColor
GetObjectType
Escape
SelectPalette
RealizePalette
RestoreDC
DeleteDC
GetDeviceCaps
SetViewportOrgEx
SetWindowOrgEx
SetMapMode
SaveDC
LPtoDP
CreateDCW
CombineRgn
CreateRectRgnIndirect
DeleteObject
SelectClipRgn
PatBlt
PtInRegion
CreateRectRgn
CreatePen
SelectObject
MoveToEx
LineTo
SetTextColor
CreateRoundRectRgn
GetCharWidthW
SetTextAlign
ScriptTextOut
ScriptGetLogicalWidths
ScriptItemize
ScriptPlace
ScriptShape
ScriptFreeCache
ScriptGetCMap
ScriptGetProperties
GetGlyphIndicesW
GetCurrentObject
GetBkColor
GetGlyphOutlineW
GetOutlineTextMetricsW
GetFontData
TranslateCharsetInfo
GetPixel
GetTextCharsetInfo
GetTextMetricsA
GetObjectA
CreateFontIndirectA
CreateICW
EnumFontFamiliesExW

user32

SetWindowLongW
CharUpperW
PostThreadMessageW
SetProcessDPIAware
PeekMessageW
GetKeyboardLayout
GetKeyboardLayoutList
UnregisterClassW
IsWindowUnicode
LoadCursorA
LoadBitmapA
LoadBitmapW
GetUserObjectInformationW
GetThreadDesktop
CharNextW
DispatchMessageW
MsgWaitForMultipleObjectsEx
SendMessageA
GetDoubleClickTime
SetCaretBlinkTime
InvertRect
DestroyCaret
MenuItemFromPoint
WindowFromDC
GetSystemMetrics
DeleteMenu
MonitorFromRect
SetMenuItemInfoW
DestroyIcon
GetMessageTime
SetFocus
DestroyCursor
RegisterClassW
GetClassInfoW
CreateCursor
GetDesktopWindow
GetWindowDC
DrawTextW
SystemParametersInfoW
GetParent
DrawFrameControl
InflateRect
GetMessagePos
NotifyWinEvent
SendMessageW
GetPropW
TrackMouseEvent
SetPropW
RemovePropW
ScreenToClient
FrameRect
GetSysColorBrush
FillRect
SetWindowRgn
ValidateRect
GetUpdateRect
EndDeferWindowPos
GetWindowRect
DeferWindowPos
BeginDeferWindowPos
GetSysColor
EqualRect
DrawIconEx
IntersectRect
CreateWindowExW
GetClassInfoExW
RegisterClassExW
IsWindow
DestroyWindow
GetKeyState
PtInRect
UnionRect
IsChild
GetFocus
BeginPaint
GetClientRect
GetDC
ReleaseDC
EndPaint
GetClipboardFormatNameW
CallNextHookEx
GetWindowThreadProcessId
WindowFromPoint
AdjustWindowRectEx
OffsetRect
DestroyMenu
PostQuitMessage
SetMenuDefaultItem
AppendMenuW
GetCursorPos
CreatePopupMenu
KillTimer
SetTimer
LoadIconW
SendInput
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
RegisterClipboardFormatW
ClientToScreen
InvalidateRect
RegisterWindowMessageW
SetRectEmpty
UnhookWindowsHookEx
UnhookWinEvent
TrackPopupMenuEx
SetWinEventHook
SetWindowsHookExW
EndMenu
LoadCursorW
SetCursor
IsRectEmpty
CopyRect
CallWindowProcW
DefWindowProcW
GetWindowLongW
UnregisterClassA
ReleaseCapture
ShowWindow
EnumDisplayMonitors
GetMonitorInfoW
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
PostMessageW
SetCapture

msvcrt

memcmp
floor
ceil
_ftol2_sse
strchr
_ltow
_ltow_s
_wcsnicmp
_wcslwr_s
wcstol
iswdigit
_wtol
_wcsicmp
_wtoi
memmove
_ftol2
__CxxFrameHandler3
_CxxThrowException
_CIsqrt
_except_handler4_common
_controlfp
realloc
_errno
_onexit
__dllonexit
_unlock
_lock
??1type_info@@UAE@XZ
?terminate@@YAXXZ
_wcmdln
_initterm
__setusermatherr
__p__fmode
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
__p__commode
_XcptFilter
memset
_callnewh
vswprintf_s
_vscwprintf
wcsncmp
calloc
swprintf_s
_resetstkoflw
_purecall
wcscat_s
wcscpy_s
memmove_s
wcsncpy_s
_vsnprintf_s
memcpy_s
_vsnwprintf
??0exception@@QAE@XZ
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
free
malloc
memcpy

ntdll

EtwEventRegister
EtwEventWrite
EtwEventWriteTransfer
EtwEventSetInformation
EtwEventUnregister

ole32

CreateStreamOnHGlobal
CoGetClassObject
CoCreateFreeThreadedMarshaler
OleLockRunning
CoTaskMemAlloc
CoTaskMemFree
CoTaskMemRealloc
OleInitialize
OleUninitialize
CoUninitialize
CoInitialize
StringFromGUID2
CoCreateInstance
RegisterDragDrop
RevokeDragDrop
OleRegGetMiscStatus
CreateOleAdviseHolder
OleRegGetUserType
OleRegEnumVerbs

oleaut32

UnRegisterTypeLi
RegisterTypeLi
SysAllocStringLen
LoadTypeLi
VariantClear
VariantInit
DispCallFunc
LoadRegTypeLi
VarBstrCat
VarUI4FromStr
SafeArrayUnaccessData
SafeArrayAccessData
VarBstrCmp
OleCreatePropertyFrame
SysAllocStringByteLen
SysStringByteLen
SysStringLen
SafeArrayCreateVector
SafeArrayDestroy
SysFreeString
SysAllocString

oleacc

LresultFromObject
AccessibleObjectFromWindow

gdiplus

GdipCloneImage
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipCreateBitmapFromStream
GdipCreateFromHWND
GdiplusShutdown
GdipCreateSolidFill
GdipDeleteBrush
GdipDisposeImage
GdipAlloc
GdipCreatePen2
GdipSetPenDashStyle
GdipSetPenDashArray
GdipDrawRectangleI
GdipCloneBrush
GdipCreateFromHDC
GdipDeleteGraphics
GdipFillRectangleI
GdipSetSolidFillColor
GdipCreatePen1
GdipGetDC
GdipReleaseDC
GdipFillEllipseI
GdipDrawEllipseI
GdipGetImageGraphicsContext
GdipFree
GdipDrawImageI
GdipSetPenColor
GdipDrawLineI
GdipDeletePen
GdipCreateLineBrushI
GdipSetClipRectI
GdiplusStartup

shell32

ShellAboutW
Shell_NotifyIconW

version

GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW

comctl32

ord8

uxtheme

CloseThemeData
GetThemeMargins
GetThemePartSize
GetThemeColor
GetThemeBackgroundRegion
IsThemeActive
OpenThemeData
DrawThemeTextEx
DrawThemeBackground
DrawThemeEdge
DrawThemeIcon
DrawThemeText

msimg32

TransparentBlt
GradientFill
AlphaBlend

dwmapi

DwmEnableBlurBehindWindow
DwmIsCompositionEnabled

Exports

Exports

?REExtendedRegisterClass@@YGHXZ

Sections

.text
Size: 843KB - Virtual size: 843KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 30KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 383KB - Virtual size: 383KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 31KB - Virtual size: 31KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

a401fa46d29063c6043f7057d3355474

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

kernel32

gdi32

user32

msvcrt

ntdll

ole32

oleaut32

oleacc

gdiplus

shell32

version

comctl32

uxtheme

msimg32

dwmapi

Exports

Exports

Sections

.text Size: 843KB - Virtual size: 843KB

.data Size: 27KB - Virtual size: 30KB

.idata Size: 12KB - Virtual size: 12KB

.rsrc Size: 383KB - Virtual size: 383KB

.reloc Size: 31KB - Virtual size: 31KB

.text
Size: 843KB - Virtual size: 843KB

.data
Size: 27KB - Virtual size: 30KB

.idata
Size: 12KB - Virtual size: 12KB

.rsrc
Size: 383KB - Virtual size: 383KB

.reloc
Size: 31KB - Virtual size: 31KB