Skin_CreativOS[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

Skin_CreativOS.exe
Size

2.3MB
MD5

926dab8f339b94af9612fc8430b6c769
SHA1

d878566cfe7985bb7dede6fa0eeeb7111c4d0b85
SHA256

1608e05e23e6c5e1a55c702a369a2769359b7e8f908f53d106a40d570e12453c
SHA512

860f7427e7820e7ab7f657af9f6f3a40b3c3a91fc5054ecd428ba3ab9c34ae63ab16139428a275fbd72ac650d0d8350f17f3ac39482d2df08ab08b9bd37946ab
SSDEEP

49152:LMpRYQX2m2/ChEt0cspgky2l5T+nfdxjVjNjo9Ee:M8m2/6E3spgkr5K1PNjOE

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Skin_CreativOS.exe

Files

Skin_CreativOS.exe
.exe windows:5 windows x86 arch:x86

Password: 99ds8d8fd8fd8fd8gsdfgdfgdgd

4b7dd2430a64f03cd0ade24b39e3c2c2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

lua5.1

lua_type

winmm

mixerOpen

wsock32

socket

version

VerQueryValueA

msacm32

acmStreamOpen

user32

GetDC

gdi32

LPtoDP

msimg32

AlphaBlend

comdlg32

GetFileTitleA

winspool.drv

ClosePrinter

advapi32

FreeSid

shell32

DragFinish

comctl32

_TrackMouseEvent

shlwapi

PathIsUNCA

oledlg

ord1

ole32

DoDragDrop

oleaut32

VariantTimeToSystemTime

urlmon

URLDownloadToFileA

gdiplus

GdipFree

netapi32

Netbios

imm32

ImmGetContext

imagehlp

ImageDirectoryEntryToData

Sections

.MPRESS1
Size: 2.1MB - Virtual size: 6.4MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 107KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

Password: 99ds8d8fd8fd8fd8gsdfgdfgdgd

4b7dd2430a64f03cd0ade24b39e3c2c2

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

lua5.1

winmm

wsock32

version

msacm32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

urlmon

gdiplus

netapi32

imm32

imagehlp

Sections

.MPRESS1 Size: 2.1MB - Virtual size: 6.4MB

.MPRESS2 Size: 4KB - Virtual size: 4KB

.rsrc Size: 107KB - Virtual size: 107KB

.MPRESS1
Size: 2.1MB - Virtual size: 6.4MB

.MPRESS2
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 107KB - Virtual size: 107KB