e053e1f5ffc27d61b066e53ab46160b0[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

e053e1f5ffc27d61b066e53ab46160b0.exe
Size

140KB
MD5

e053e1f5ffc27d61b066e53ab46160b0
SHA1

0d32712e1adbd901e7c82f9670b4c530be4c3c05
SHA256

0abc13489dbbb4dc6602655afa9b16a4733e38739c993fbcfea1a675e3976345
SHA512

4a1d5f478c39adf77cd315ec7f389ea6e44ae17a886ddb6156ef530d4ecd2a707ac0355f007a69f12136f20719238061bd81dd6cb5b9f8e9a0279034d7836429
SSDEEP

3072:rirv5MbVNPT0qPXn8OovgbSa6N48SAQqK3Agn8st2pFHJV2P:rirv5gPT0qPMOggb1k4pCgnFiHJ8P

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e053e1f5ffc27d61b066e53ab46160b0.exe

Files

e053e1f5ffc27d61b066e53ab46160b0.exe
.exe windows:5 windows x86 arch:x86

e1ce1b04cc934bd19a31c98356b2c4d3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

FreeSid
SetSecurityDescriptorOwner
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
SetEntriesInAclW
AllocateAndInitializeSid
CloseServiceHandle
OpenServiceW
OpenSCManagerW
DeleteService
ReportEventW
RegisterEventSourceW
SetServiceStatus
DeregisterEventSource
RegCloseKey
RegSetValueExW
RegCreateKeyW
CreateServiceW
RegisterServiceCtrlHandlerExW
StartServiceCtrlDispatcherW

ole32

CoUninitialize

user32

UnregisterClassW
UnregisterDeviceNotification
RegisterDeviceNotificationW
MessageBoxW
RegisterClassW
GetDesktopWindow
CreateWindowExW
SetWindowLongW
GetWindowLongW
DefWindowProcW
PeekMessageW
TranslateMessage
DispatchMessageW
DestroyWindow

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

msvcr90

_cexit
_exit
_XcptFilter
__winitenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
_encode_pointer
__set_app_type
?terminate@@YAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
_except_handler4_common
_invoke_watson
_controlfp_s
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_purecall
wprintf
_wcsicmp
malloc
free
memset
setlocale
??2@YAPAXI@Z
??3@YAXPAX@Z
exit
__CxxFrameHandler3
__wgetmainargs
_amsg_exit

intl

libintl_gettext

glib-2.0

g_strdup
g_str_has_suffix
g_dir_read_name_utf8
g_ptr_array_new
g_dir_open_utf8
g_free
g_array_new
g_ptr_array_remove_index
g_array_free
g_thread_join
g_queue_remove
g_log
g_idle_add_full
g_ptr_array_remove
g_queue_pop_tail
g_thread_pool_push
g_queue_push_head
g_queue_delete_link
g_queue_find_custom
g_thread_create_full
g_queue_new
g_thread_pool_set_max_unused_threads
g_thread_pool_set_max_idle_time
g_malloc
g_key_file_get_integer
g_ptr_array_add
g_thread_pool_free
g_print
g_printerr
g_win32_error_message
g_option_context_free
g_option_context_parse
g_option_group_set_error_hook
g_option_context_get_main_group
g_option_context_add_main_entries
g_option_context_set_summary
g_option_context_new
g_key_file_get_boolean
g_ptr_array_free
g_array_append_vals
g_clear_error
g_main_loop_run
g_source_remove
g_timeout_add
g_threads_got_initialized
g_main_context_default
g_main_loop_new
g_main_context_unref
g_key_file_new
g_key_file_free
g_main_loop_unref
g_dir_close
g_ptr_array_sort
g_queue_free
g_file_test_utf8
g_idle_add
g_source_set_callback
g_main_loop_get_context
g_source_attach
g_source_unref
g_str_has_prefix
g_main_loop_is_running
g_main_loop_quit
g_logv
g_thread_pool_new
g_strdup_printf
g_malloc0
g_thread_functions_for_glib_use

gmodule-2.0

g_module_symbol
g_module_open_utf8
g_module_close
g_module_error
g_module_make_resident

gobject-2.0

g_signal_emit_by_name
g_object_unref
g_object_set
g_object_new
g_type_init
g_signal_connect_data
g_signal_lookup
g_signal_parse_name
g_value_set_boolean
g_value_get_boolean
g_value_set_pointer
g_value_get_pointer
g_value_set_uint
g_value_get_uint
g_object_notify
g_type_check_instance_cast
g_type_register_static
g_type_check_class_cast
g_cclosure_marshal_VOID__POINTER
g_signal_new
g_type_class_peek_parent
g_object_class_install_property
g_param_spec_pointer
g_value_peek_pointer

gthread-2.0

g_thread_init

vmtools

BackdoorChannel_New
GuestApp_GetConfPath
StrUtil_GetNextToken
RpcChannel_SetRetVals
RpcOut_sendOne
VMTools_GetString
GuestApp_GetInstallPath
RpcChannel_RegisterCallback
VmCheck_IsVirtualWorld
VMTools_LoadConfig
RpcChannel_Setup
Unicode_InitW
VMTools_ConfigLogging
VMTools_BindTextDomain
VMTools_AttachConsole
CodeSet_Utf8ToUtf16le
RpcChannel_Destroy
Str_SafeVaswprintf
Str_Aswprintf
vm_free
Hostinfo_GetOSType
Str_Wcscpy
Str_Snwprintf
Str_Vaswprintf
Panic
Str_Vasprintf
VMTools_NewHandleSource

kernel32

IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
SetUnhandledExceptionFilter
InterlockedCompareExchange
Sleep
InterlockedExchange
LocalAlloc
LoadLibraryW
GetProcAddress
FreeLibrary
OutputDebugStringA
OutputDebugStringW
GetModuleFileNameW
OpenEventW
WaitForSingleObject
GetLastError
GetModuleHandleW
CreateEventW
SetConsoleCtrlHandler
GetCurrentProcess
SetPriorityClass
GetCurrentThread
SetThreadPriority
LocalFree
SetErrorMode
SetEvent
CloseHandle

Sections

.text
Size: 23KB - Virtual size: 22KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 15KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.xtrdat
Size: 78KB - Virtual size: 77KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

e1ce1b04cc934bd19a31c98356b2c4d3

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

ole32

user32

version

msvcr90

intl

glib-2.0

gmodule-2.0

gobject-2.0

gthread-2.0

vmtools

kernel32

Sections

.text Size: 23KB - Virtual size: 22KB

.rdata Size: 15KB - Virtual size: 14KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 12KB - Virtual size: 12KB

.reloc Size: 2KB - Virtual size: 2KB

.xtrdat Size: 78KB - Virtual size: 77KB

.text
Size: 23KB - Virtual size: 22KB

.rdata
Size: 15KB - Virtual size: 14KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 12KB - Virtual size: 12KB

.reloc
Size: 2KB - Virtual size: 2KB

.xtrdat
Size: 78KB - Virtual size: 77KB