compiled[.]rar

Sharing

Copy URL Twitter E-mail

General

Target

compiled.rar
Size

2.1MB
MD5

ea9c71a4fa7f3f11b68865e33914729d
SHA1

ac2c8e1f52ec5271a6179452864da7356c17ae09
SHA256

e33bafcfda412f34449a0fb39dfd25f85712130578cee9e7c1be4db0a0eab0a8
SHA512

20609d6dccd58fe0e4331f403e369ae87f4e94547d9188527ff5b47e5a9deb1f178556d9170aa76822a5f1bece71c445ad2cad02fce8ec9dfbcc83fd1d166d32
SSDEEP

49152:Bhh/vvHA54eYNxuE//7vQNnqxC6SSiJ0Gale6rkQ64oPr:Bn/vPA51WuErvQN/6SgeqkP4oPr

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/compiled/compiled.exe

Files

compiled.rar
.rar
compiled/compiled.exe
.exe windows:5 windows x86 arch:x86

900abf6c5e7f9427362b347dd1ed3af8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

inet_addr
htonl
getservbyname
htons
WSAGetLastError
gethostbyname
ioctlsocket
gethostbyaddr
inet_ntoa
ntohs
WSAAsyncSelect
recv
send
WSAStartup
socket
closesocket
WSACleanup
shutdown
gethostname
getservbyport
WSASetLastError
connect

winmm

joyGetPosEx
mciSendStringA
mixerOpen
waveOutGetVolume
mixerGetDevCapsA
mixerGetLineInfoA
mixerClose
mixerGetLineControlsA
mixerSetControlDetails
joyGetDevCapsA
waveOutSetVolume
mixerGetControlDetailsA

version

GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA

comctl32

ImageList_GetIconSize
ord6
ImageList_ReplaceIcon
ImageList_AddMasked
ImageList_Destroy
ImageList_Create

shlwapi

HashData

crypt32

CryptBinaryToStringA

psapi

GetModuleFileNameExA
GetProcessImageFileNameA
GetModuleBaseNameA

wininet

InternetOpenA
InternetOpenUrlA
InternetCloseHandle
InternetReadFileExA
InternetReadFile

kernel32

GetProcAddress
GetCurrentThread
CheckRemoteDebuggerPresent
GetCurrentProcess
GetProcessTimes
GetSystemTimeAsFileTime
VirtualProtect
InitializeCriticalSection
SetErrorMode
LoadLibraryA
AddVectoredExceptionHandler
GlobalLock
GlobalUnlock
GetSystemDirectoryA
FreeLibrary
WideCharToMultiByte
GetCurrentThreadId
GetEnvironmentVariableA
SuspendThread
ResumeThread
EnterCriticalSection
LeaveCriticalSection
OpenThread
lstrcmpiA
GetStringTypeExA
CreateThread
SetThreadPriority
GetExitCodeThread
CloseHandle
CreateMutexA
GetLastError
MultiByteToWideChar
SystemTimeToFileTime
SetFilePointerEx
ReadFile
SetFilePointer
GlobalSize
lstrcpyA
lstrlenA
lstrcmpA
LocalFileTimeToFileTime
CreateDirectoryA
CreateDirectoryW
IsBadReadPtr
CreateFileW
CreateFileA
WriteFile
SetFileTime
DuplicateHandle
LoadResource
LockResource
SizeofResource
GetCurrentDirectoryA
GetLocalTime
FileTimeToDosDateTime
GetFileInformationByHandle
GetFileSize
lstrlenW
FindClose
FindFirstFileA
FindNextFileA
UnmapViewOfFile
CreateFileMappingA
MapViewOfFile
SetLastError
_lclose
GetTempPathA
HeapAlloc
HeapReAlloc
VirtualAlloc
VirtualFree
GetProcessHeap
HeapCreate
HeapFree
HeapDestroy
GetCommandLineA
WaitForSingleObject
GetThreadLocale
VirtualQuery
GetVersionExW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetFileAttributesA
OpenProcess
GetCurrentProcessId
GetFullPathNameA
LocalFree
GetModuleFileNameW
GetCommandLineW
GetACP
GetShortPathNameA
FileTimeToLocalFileTime
SetEnvironmentVariableA
Beep
MoveFileA
OutputDebugStringA
CreateProcessA
GetExitCodeProcess
WriteProcessMemory
ReadProcessMemory
TerminateProcess
SetPriorityClass
GetDateFormatA
GetTimeFormatA
GetDiskFreeSpaceExA
SetVolumeLabelA
DeviceIoControl
GetDriveTypeA
GetVolumeInformationA
GetDiskFreeSpaceA
DeleteFileA
CopyFileA
SetFileAttributesA
GetFileSizeEx
GetSystemTime
GetSystemDefaultUILanguage
GetComputerNameA
GetSystemWindowsDirectoryA
TryEnterCriticalSection
QueryDosDeviceA
CompareStringA
GetFullPathNameW
RemoveDirectoryA
CreateToolhelp32Snapshot
Process32First
Process32Next
FormatMessageA
GetPrivateProfileStringA
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
WritePrivateProfileStringA
WritePrivateProfileSectionA
HeapWalk
HeapSize
SetEndOfFile
GetFileType
GetStdHandle
FileTimeToSystemTime
VirtualAllocEx
VirtualFreeEx
EnumResourceNamesA
LoadLibraryExA
RemoveVectoredExceptionHandler
ExitProcess
ExitThread
IsProcessorFeaturePresent
_lopen
_lread
GetModuleFileNameA
GlobalAlloc
GetModuleHandleA
FindResourceA
GetCPInfo
SetCurrentDirectoryA
Sleep
IsDebuggerPresent
GetTickCount
MulDiv
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
InitializeSListHead
OutputDebugStringW
GlobalFree
FlushInstructionCache

user32

MapVirtualKeyExA
MapVirtualKeyA
UnregisterClassA
IsCharAlphaA
DestroyWindow
DestroyIcon
DestroyAcceleratorTable
LoadCursorA
RegisterClassExA
CreateWindowExA
LoadAcceleratorsA
SetClipboardViewer
ChangeClipboardChain
LoadImageA
CheckMenuItem
GetMenu
BlockInput
IsWindowVisible
SetWindowTextA
GetIconInfo
SetRect
DrawTextA
AdjustWindowRectEx
SystemParametersInfoA
GetClientRect
GetWindowRect
MoveWindow
EnumChildWindows
SetActiveWindow
GetWindowTextA
SetWindowRgn
SetWindowPos
SetLayeredWindowAttributes
InvalidateRect
EnableWindow
GetWindowTextLengthA
EnumWindows
IsZoomed
IsIconic
EnumDisplayMonitors
GetMonitorInfoA
RegisterWindowMessageA
GetSysColor
GetSysColorBrush
DrawIconEx
FillRect
DefWindowProcA
SetForegroundWindow
DialogBoxParamA
SendDlgItemMessageA
GetDlgItem
SetWindowTextW
SetDlgItemTextA
MessageBeep
ClientToScreen
GetCursorInfo
GetLastInputInfo
GetSystemMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuStringA
ExitWindowsEx
SetScrollInfo
ScrollWindow
SetMenu
FlashWindow
GetPropA
SetPropA
RemovePropA
MapWindowPoints
RedrawWindow
SetParent
SendMessageW
GetClassInfoExA
DefDlgProcA
GetAncestor
UpdateWindow
GetMessagePos
GetClassLongA
CallWindowProcA
CheckRadioButton
IntersectRect
PtInRect
CreateDialogIndirectParamA
CreateAcceleratorTableA
InsertMenuItemA
SetMenuDefaultItem
RemoveMenu
SetMenuItemInfoA
IsMenu
GetMenuItemInfoA
CreateMenu
CreatePopupMenu
SetMenuInfo
AppendMenuA
DestroyMenu
TrackPopupMenuEx
GetDesktopWindow
CopyImage
CreateIconIndirect
CreateIconFromResourceEx
EnumClipboardFormats
GetWindow
BringWindowToTop
GetTopWindow
GetQueueStatus
mouse_event
GetSystemMetrics
keybd_event
SetKeyboardState
GetKeyboardState
GetCursorPos
PostMessageW
GetAsyncKeyState
AttachThreadInput
SendInput
UnregisterHotKey
RegisterHotKey
PostQuitMessage
SendMessageTimeoutA
UnhookWindowsHookEx
SetWindowsHookExA
PostThreadMessageA
IsCharAlphaNumericA
IsCharUpperA
IsCharLowerA
ToAsciiEx
GetKeyboardLayout
CallNextHookEx
CharLowerA
ReleaseDC
GetDC
MessageBoxA
OpenClipboard
GetClipboardData
GetClipboardFormatNameA
CloseClipboard
SetClipboardData
EmptyClipboard
PostMessageA
FindWindowA
EndDialog
IsWindow
DispatchMessageA
TranslateMessage
ShowWindow
CountClipboardFormats
SetWindowLongA
ScreenToClient
IsDialogMessageA
WindowFromPoint
SendMessageA
IsWindowEnabled
GetWindowLongA
GetKeyState
TranslateAcceleratorA
KillTimer
PeekMessageA
GetFocus
GetWindowThreadProcessId
GetForegroundWindow
GetMessageA
SetTimer
GetScrollInfo
GetParent
GetDlgCtrlID
CharUpperA
IsClipboardFormatAvailable
VkKeyScanExA
GetUpdateRect
GetGUIThreadInfo
GetClassNameA
SetFocus

gdi32

GetClipBox
GdiFlush
CreateDIBSection
EnumFontFamiliesExA
FillRgn
CreatePatternBrush
SetBkMode
ExcludeClipRect
SetTextColor
SetBkColor
GetClipRgn
SetBrushOrgEx
GetPixel
BitBlt
CreateCompatibleBitmap
GetSystemPaletteEntries
GetDIBits
CreateCompatibleDC
CreatePolygonRgn
CreateRectRgn
CreateRoundRectRgn
CreateEllipticRgn
DeleteDC
GetObjectA
GetTextMetricsA
GetTextFaceA
SelectObject
GetStockObject
CreateDCA
CreateSolidBrush
CreateFontA
DeleteObject
GetCharABCWidthsA
GetDeviceCaps

comdlg32

GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError

advapi32

CryptHashData
CryptCreateHash
CryptAcquireContextA
RegDeleteValueA
RegQueryValueExA
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
CloseServiceHandle
UnlockServiceDatabase
LockServiceDatabase
OpenSCManagerA
GetUserNameA
RegEnumValueA
RegQueryInfoKeyA
RegConnectRegistryA
RegCloseKey
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
CryptDeriveKey
CryptDestroyHash
CryptDestroyKey
RegEnumKeyExA
CryptReleaseContext

shell32

SHBrowseForFolderA
SHGetDesktopFolder
SHGetMalloc
SHGetFolderPathA
ExtractIconA
DragQueryPoint
SHEmptyRecycleBinA
SHFileOperationA
SHGetPathFromIDListA
ShellExecuteExA
CommandLineToArgvW
DragQueryFileA
DragFinish
Shell_NotifyIconA

ole32

StringFromGUID2
CoGetObject
CreateStreamOnHGlobal
CLSIDFromString
CoUninitialize
CoCreateInstance
CoInitialize
CLSIDFromProgID

oleaut32

SafeArrayUnaccessData
SafeArrayGetElemsize
SafeArrayAccessData
SafeArrayUnlock
SafeArrayPtrOfIndex
SafeArrayLock
OleLoadPicture
SafeArrayGetLBound
SafeArrayGetUBound
VariantCopyInd
SafeArrayCopy
VariantChangeType
VariantClear
SafeArrayCreate
SafeArrayGetDim
SysAllocString
SysFreeString
SafeArrayDestroy
GetActiveObject
SysStringLen

vcruntime140

memmove
memset
__current_exception_context
__current_exception
_CxxThrowException
__std_exception_destroy
__std_exception_copy
_except_handler4_common
strstr
strchr
_purecall
__std_terminate
_except_handler3
__RTDynamicCast
__CxxFrameHandler3
memcpy

api-ms-win-crt-convert-l1-1-0

_i64toa
strtod
mbstowcs
_ultoa
_strtoi64
_atoi64
_itoa
atof
wcstombs
strtoul
atoi
_strtoui64
strtol

api-ms-win-crt-multibyte-l1-1-0

_mbsstr
_mbscmp
_mbschr
_mbsicmp
_ismbcspace
_mbsrchr
_mbsnbicmp
_mbsupr
_mbctoupper
_mbsnbcpy
_mbsnbcmp
_ismbcdigit
_mbscspn

api-ms-win-crt-heap-l1-1-0

realloc
malloc
_callnewh
_expand
free
calloc
_set_new_mode
_msize

api-ms-win-crt-string-l1-1-0

strcpy_s
strncpy_s
tolower
strncpy
strcat_s
_wcsnicmp
strncmp
_strnicmp
_strdup
isdigit
isxdigit
toupper
_isctype
_stricmp

api-ms-win-crt-runtime-l1-1-0

_initterm
terminate
_controlfp_s
__p___argv
_get_narrow_winmain_command_line
_beginthreadex
_set_app_type
__p___argc
_seh_filter_exe
_exit
_initterm_e
_cexit
_crt_atexit
_register_thread_local_exe_atexit_callback
exit
_c_exit
_register_onexit_function
_initialize_onexit_table
_configure_narrow_argv
_initialize_narrow_environment

api-ms-win-crt-stdio-l1-1-0

_set_fmode
ftell
fwrite
fclose
fread
fopen
__stdio_common_vsprintf_s
setvbuf
__stdio_common_vsprintf
__p__commode
__acrt_iob_func
fseek

api-ms-win-crt-utility-l1-1-0

qsort
bsearch
rand

api-ms-win-crt-filesystem-l1-1-0

_splitpath

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Exports

Exports

ADDFILE
ADDSCRIPT
AHKASSIGN
AHKEXEC
AHKEXECUTELINE
AHKFINDFUNC
AHKFINDLABEL
AHKFUNCTION
AHKGETVAR
AHKISUNICODE
AHKLABEL
AHKPAUSE
AHKPOSTFUNCTION
AddFile
AddScript
Addfile
Addscript
AhkAssign
AhkExec
AhkExecuteLine
AhkExecuteline
AhkFindFunc
AhkFindLabel
AhkFindfunc
AhkFindlabel
AhkFunction
AhkGetVar
AhkGetvar
AhkIsUnicode
AhkIsunicode
AhkLabel
AhkPause
AhkPostFunction
AhkPostfunction
Ahkassign
Ahkexec
AhkexecuteLine
Ahkexecuteline
AhkfindFunc
AhkfindLabel
Ahkfindfunc
Ahkfindlabel
Ahkfunction
AhkgetVar
Ahkgetvar
AhkisUnicode
Ahkisunicode
Ahklabel
Ahkpause
AhkpostFunction
Ahkpostfunction
MinHookDisable
MinHookEnable
addFile
addScript
addfile
addscript
ahkAssign
ahkExec
ahkExecuteLine
ahkExecuteline
ahkFindFunc
ahkFindLabel
ahkFindfunc
ahkFindlabel
ahkFunction
ahkGetVar
ahkGetvar
ahkIsUnicode
ahkIsunicode
ahkLabel
ahkPause
ahkPostFunction
ahkPostfunction
ahkassign
ahkexec
ahkexecuteLine
ahkexecuteline
ahkfindFunc
ahkfindLabel
ahkfindfunc
ahkfindlabel
ahkfunction
ahkgetVar
ahkgetvar
ahkisUnicode
ahkisunicode
ahklabel
ahkpause
ahkpostFunction
ahkpostfunction

Sections

.text
Size: 775KB - Virtual size: 775KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 78KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 154KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
compiled/config.json

Sharing

General

Malware Config

Signatures

Files

900abf6c5e7f9427362b347dd1ed3af8

Headers

File Characteristics

Imports

wsock32

winmm

version

comctl32

shlwapi

crypt32

psapi

wininet

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

vcruntime140

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-multibyte-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Exports

Exports

Sections

.text Size: 775KB - Virtual size: 775KB

.rdata Size: 78KB - Virtual size: 78KB

.data Size: 9KB - Virtual size: 154KB

.rsrc Size: 1.8MB - Virtual size: 1.8MB

.text
Size: 775KB - Virtual size: 775KB

.rdata
Size: 78KB - Virtual size: 78KB

.data
Size: 9KB - Virtual size: 154KB

.rsrc
Size: 1.8MB - Virtual size: 1.8MB