Scantrak[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

Scantrak.exe
Size

304KB
MD5

50f3cb9545894553370f964a2a26ec44
SHA1

8bcb98108f17a0401dd8b6b28196b390d656c04a
SHA256

5d4dcd720038cd772cf234f32c099b4964d67d9671b101d16fd340ffc69584f7
SHA512

a2aea019c8a9aa6373eda1ad8d6232786b567f5ae34e1d3455c7b589592941bf89c80e9fe8612e87a2b3e48c81f9192556d7907bcfdaf45cef2840660bc36918
SSDEEP

6144:mBbCtAI7/7n8onnLEUQKAb+pWNcS+O8GnhHkE94:mFCtAIH8un8Nc68GnhHkE9

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Scantrak.exe

Files

Scantrak.exe
.exe windows:4 windows x86 arch:x86

7f1214ba7d55e4cc7ab690e2515e940d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetTickCount
lstrcpyA
lstrlenA
MapViewOfFile
CreateFileMappingA
UnmapViewOfFile
CreateFileA
DeleteFileA
CreateMutexA
CloseHandle
OutputDebugStringA
GetModuleHandleA
GetComputerNameA
TerminateThread
GetTempPathA
FindFirstChangeNotificationA
FindNextChangeNotification
FindCloseChangeNotification
CompareFileTime
GetPrivateProfileIntW
GetTempFileNameA
WritePrivateProfileStringA
lstrcpynW
lstrcpyW
GetPrivateProfileStringW
GetPrivateProfileIntA
CreatePipe
SetHandleInformation
CreateProcessA
PeekNamedPipe
GetLastError
FormatMessageA
GetModuleFileNameA
CreateThread
CreateDirectoryA
lstrcmpiA
CopyFileA
RemoveDirectoryA
GetPrivateProfileSectionA
MoveFileA
GetPrivateProfileStringA
WideCharToMultiByte
MultiByteToWideChar
SetEndOfFile
SetFilePointerEx
SetFilePointer
ReadFile
SetFileTime
GetFileTime
GetFileSize
GetFileSizeEx
GetCurrentProcessId
OpenProcess
GlobalAlloc
GlobalLock
GlobalUnlock
GlobalFree
lstrcpynA
lstrcatA
CreateProcessW
DeleteFileW
GetTempPathW
GetTempFileNameW
CreateFileW
WriteFile
WritePrivateProfileStringW
WaitForSingleObject
GetLocalTime
GetCurrentThreadId
ReleaseMutex
Sleep
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetStdHandle
GetComputerNameW
SetLocalTime
FileTimeToSystemTime
FileTimeToLocalFileTime
InterlockedIncrement
InterlockedDecrement
FindClose
SetLastError
FindFirstFileA
FindNextFileA
lstrcmpA
LocalFree
GlobalFlags
InitializeCriticalSection
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetVersion
LocalAlloc
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsSetValue
LocalReAlloc
TlsGetValue
GetProcessVersion
GetProcAddress
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
FreeLibrary
LoadLibraryA
GetCPInfo
GetOEMCP
GetCurrentDirectoryA
GetCurrentProcess
FlushFileBuffers
GetFullPathNameA
RtlUnwind
HeapFree
HeapAlloc
HeapReAlloc
HeapSize
GetStartupInfoA
GetCommandLineA
ExitProcess
RaiseException
GetTimeZoneInformation
GetSystemTime
GetACP
TerminateProcess
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
SetUnhandledExceptionFilter
GetDriveTypeA
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr

user32

SetWindowLongA
SetWindowPos
TabbedTextOutA
GrayStringA
IsIconic
SystemParametersInfoA
RegisterWindowMessageA
GetForegroundWindow
GetMessagePos
GetMessageTime
RemovePropA
CallWindowProcA
GetPropA
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
GetKeyState
GetMenu
GetClassInfoA
WinHelpA
GetCapture
GetTopWindow
CopyRect
AdjustWindowRectEx
MapWindowPoints
PostMessageA
GetNextDlgTabItem
EnableMenuItem
CheckMenuItem
SetMenuItemBitmaps
LoadBitmapA
GetMenuCheckMarkDimensions
DestroyMenu
GetWindowTextA
GetMenuItemID
GetMenuState
GetMenuItemCount
LoadStringA
GetClassNameA
GetWindowLongA
GetSysColorBrush
GetSystemMetrics
UnhookWindowsHookEx
GetLastActivePopup
IsWindowEnabled
PtInRect
GetWindowRect
GetDlgCtrlID
GetWindow
ClientToScreen
SendMessageA
ModifyMenuA
SetWindowTextA
MsgWaitForMultipleObjects
PeekMessageA
GetDC
ScrollWindowEx
BeginPaint
FillRect
EndPaint
InvalidateRect
GetSysColor
GetWindowDC
GetClientRect
DrawTextA
ReleaseDC
CreateWindowExA
GetSystemMenu
AppendMenuA
DefWindowProcA
LoadMenuA
GetSubMenu
GetCursorPos
TrackPopupMenu
LoadCursorA
RegisterClassA
CreateDialogParamA
GetMessageA
IsDialogMessageA
TranslateMessage
DispatchMessageA
DestroyWindow
UnregisterClassA
SendDlgItemMessageA
GetDlgItem
GetParent
GetFocus
SetFocus
GetDlgItemTextA
PostQuitMessage
GetWindowPlacement
ShowWindow
SetForegroundWindow
LoadIconA
wsprintfW
MessageBoxA
wsprintfA
EnableWindow

gdi32

ExtTextOutA
GetDeviceCaps
DeleteDC
SaveDC
RestoreDC
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SetBkColor
SetTextColor
TextOutA
CreateBrushIndirect
CreateFontIndirectA
SelectObject
DeleteObject
GetStockObject
PtVisible
RectVisible
Escape
GetObjectA
CreateBitmap

winspool.drv

DocumentPropertiesW
OpenPrinterW
DocumentPropertiesA
OpenPrinterA
GetPrinterA
ClosePrinter

shell32

Shell_NotifyIconA

psapi

EnumProcesses
EnumProcessModules
GetModuleBaseNameA

ws2_32

__WSAFDIsSet
socket
htons
bind
listen
select
recv
ioctlsocket
send
setsockopt
closesocket
connect
inet_addr
gethostbyaddr
gethostbyname
WSAGetLastError
accept
WSACleanup
WSAStartup

shlwapi

PathFileExistsA

comctl32

ord17

Sections

.text
Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 40KB - Virtual size: 230KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7f1214ba7d55e4cc7ab690e2515e940d

Headers

File Characteristics

Imports

kernel32

user32

gdi32

winspool.drv

shell32

psapi

ws2_32

shlwapi

comctl32

Sections

.text Size: 236KB - Virtual size: 235KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 40KB - Virtual size: 230KB

.rsrc Size: 4KB - Virtual size: 2KB

.text
Size: 236KB - Virtual size: 235KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 40KB - Virtual size: 230KB

.rsrc
Size: 4KB - Virtual size: 2KB