Nenyooo v1[.]0[.]3028[.]0[.]3[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Nenyooo v1.0.3028.0.3.exe
Size

6.6MB
MD5

a54a6766fb9b53990c97fe10a51acf45
SHA1

d083a455a4cc1c11d76e6f58b356f12c35e8e762
SHA256

d5dcd40637389d4c77e92d5531397ba048f57ac76be31f7159cdd5250e458354
SHA512

a81f3e7d2c25ee8ea98d4e87693eb1283c731fad10b533b45d1a466116f55112ca2606b47d6cada9697c27dbdf3ce2ec22e62eaf26699928e8e48d7b082cf071
SSDEEP

98304:DhbzhABjmKQjjr3wULRu+a4hc/Hsz2vsFX/2HryVukQA2s0:D/bRu+a4hc/Hsz2va/2HryVukQp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Nenyooo v1.0.3028.0.3.exe

Files

Nenyooo v1.0.3028.0.3.exe
.exe windows:6 windows x64 arch:x64

aea1540c3e341e916d224c0ea1a4ec62

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

d3d11

D3D11CreateDeviceAndSwapChain

kernel32

GetModuleHandleA
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
VerSetConditionMask
GetModuleHandleW
FreeLibrary
QueryPerformanceCounter
WriteProcessMemory
RtlAddFunctionTable
Sleep
VirtualProtectEx
VirtualAllocEx
ReadProcessMemory
CreateRemoteThread
VirtualFreeEx
GetExitCodeProcess
FormatMessageA
GetLocaleInfoEx
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
GetFileAttributesExW
GetFileInformationByHandle
AreFileApisANSI
CopyFileW
GetFileInformationByHandleEx
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
GlobalUnlock
GetCurrentProcess
OpenProcess
GetLastError
LocalFree
CloseHandle
IsWow64Process
WideCharToMultiByte
GlobalLock
GlobalFree
GlobalAlloc
MultiByteToWideChar

user32

GetAsyncKeyState
DispatchMessageW
TranslateMessage
PostQuitMessage
UpdateWindow
GetWindowLongW
DefWindowProcW
AdjustWindowRectEx
PeekMessageW
GetKeyState
GetCursorPos
DestroyWindow
GetDC
SetWindowPos
MonitorFromWindow
FindWindowA
SetCursorPos
MoveWindow
MessageBoxW
GetWindowRect
GetWindowThreadProcessId
SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
EnumDisplayMonitors
CreateWindowExW
ScreenToClient
UnregisterClassW
SetWindowTextW
RegisterClassExW
WindowFromPoint
ShowWindow
GetCapture
GetMonitorInfoW
ClientToScreen
IsChild
TrackMouseEvent
GetForegroundWindow
SetLayeredWindowAttributes
SetFocus
BringWindowToTop
LoadCursorW
SetCapture
SetCursor
SetWindowLongW
GetClientRect
SetProcessDPIAware
ReleaseCapture
SetForegroundWindow
IsIconic
ReleaseDC

gdi32

GetDeviceCaps

advapi32

OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueW

shell32

ShellExecuteW

msvcp140

?good@ios_base@std@@QEBA_NXZ
_Query_perf_frequency
?_Winerror_map@std@@YAHH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Syserror_map@std@@YAPEBDH@Z
_Query_perf_counter
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?uncaught_exceptions@std@@YAHXZ
?_Xout_of_range@std@@YAXPEBD@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z

imm32

ImmReleaseContext
ImmSetCompositionWindow
ImmAssociateContextEx
ImmSetCandidateWindow
ImmGetContext

d3dcompiler_47

D3DCompile

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memset
_CxxThrowException
__C_specific_handler
__current_exception_context
__current_exception
strstr
__std_terminate
__std_exception_destroy
memcmp
memchr
__std_exception_copy
memcpy
memmove

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_register_onexit_function
_initialize_onexit_table
_cexit
terminate
_seh_filter_exe
_set_app_type
_configure_wide_argv
_initterm_e
_exit
_c_exit
_initialize_wide_environment
_register_thread_local_exe_atexit_callback
exit
_get_wide_winmain_command_line
_initterm
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-heap-l1-1-0

_callnewh
_set_new_mode
free
malloc

api-ms-win-crt-string-l1-1-0

strncpy
strcmp
strncmp

api-ms-win-crt-stdio-l1-1-0

fseek
fclose
fflush
__acrt_iob_func
__stdio_common_vfprintf
ftell
__stdio_common_vsscanf
_set_fmode
fwrite
__stdio_common_vsprintf
_wfopen
__p__commode
fread

api-ms-win-crt-utility-l1-1-0

rand
qsort

api-ms-win-crt-locale-l1-1-0

_configthreadlocale
___lc_codepage_func

api-ms-win-crt-math-l1-1-0

pow
cosf
ceilf
sqrtf
__setusermatherr
acosf
sinf
sin

Sections

.text
Size: 320KB - Virtual size: 319KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 731KB - Virtual size: 731KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5.1MB - Virtual size: 5.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 402KB - Virtual size: 401KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 316B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

aea1540c3e341e916d224c0ea1a4ec62

Headers

DLL Characteristics

File Characteristics

Imports

d3d11

kernel32

user32

gdi32

advapi32

shell32

msvcp140

imm32

d3dcompiler_47

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-math-l1-1-0

Sections

.text Size: 320KB - Virtual size: 319KB

.rdata Size: 731KB - Virtual size: 731KB

.data Size: 5.1MB - Virtual size: 5.1MB

.pdata Size: 15KB - Virtual size: 14KB

.rsrc Size: 402KB - Virtual size: 401KB

.reloc Size: 512B - Virtual size: 316B

.text
Size: 320KB - Virtual size: 319KB

.rdata
Size: 731KB - Virtual size: 731KB

.data
Size: 5.1MB - Virtual size: 5.1MB

.pdata
Size: 15KB - Virtual size: 14KB

.rsrc
Size: 402KB - Virtual size: 401KB

.reloc
Size: 512B - Virtual size: 316B