LargeCanvas[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

LargeCanvas.exe
Size

3.8MB
MD5

651ed86d2c101d0a3cf562d07bf35355
SHA1

dec624ae7dd2479ca889b5551c1ba5511c33970f
SHA256

61beebf3dfb890f982f62edbf5e25bb7de2c6e60a73656b91fc542959d626c3f
SHA512

677fd5a427ade4f02fb94433598cc9082acb6f2eaa1960064314d68f5a575e36b7f9a656db82b7321d47d63335939f0b8f31f8284c8ce68ccd8f590e371b720e
SSDEEP

98304:g2+9z4n6Yw2GLN08NESM8BWfXSy3y7jCwQf:g2EBh08owWfXbN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
LargeCanvas.exe

Files

LargeCanvas.exe
.exe windows:5 windows x86 arch:x86

36bc8523b5be1e47e4fc8fa4e0c2dce9

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shell32

ShellExecuteA

wsock32

gethostbyaddr
shutdown
sendto
select
gethostbyname
listen
getsockopt
bind
accept
__WSAFDIsSet
setsockopt
gethostname
inet_addr
htons
htonl
getsockname
getpeername
WSAGetLastError
WSACleanup
WSAStartup
socket
send
recv
inet_ntoa
connect
closesocket
ntohs
recvfrom

user32

DefWindowProcA
PostQuitMessage
RegisterClassA
UnregisterClassA
GetClassInfoA
ShowWindow
IsZoomed
SetFocus
ToAsciiEx
ToUnicode
SetCapture
ReleaseCapture
SetTimer
KillTimer
GetMenu
BeginPaint
EndPaint
GetClientRect
GetWindowRect
AdjustWindowRect
SetCursor
GetCursorPos
ClipCursor
ClientToScreen
MapWindowPoints
WindowFromPoint
GetWindowLongA
ChangeDisplaySettingsA
GetSystemMetrics
SetForegroundWindow
GetDC
PostMessageA
InvalidateRect
AdjustWindowRectEx
SetWindowLongA
GetParent
DestroyIcon
EnumDisplaySettingsA
GetForegroundWindow
SetWindowTextA
SetCursorPos
SetClassLongA
CreateIconFromResourceEx
GetCursor
ScreenToClient
CreateCursor
DestroyCursor
GetDesktopWindow
LoadKeyboardLayoutA
GetKeyboardLayoutNameA
GetMessageA
CallWindowProcA
CreateWindowExA
DestroyWindow
GetKeyState
GetKeyboardState
MapVirtualKeyExA
MapVirtualKeyA
MsgWaitForMultipleObjects
DispatchMessageA
TranslateMessage
GetKeyboardLayout
PeekMessageA
ReleaseDC
SendMessageA
SetWindowPos
GetWindowPlacement
OpenClipboard
CloseClipboard
SetClipboardData
GetClipboardData
EmptyClipboard
PtInRect
LoadImageA
MonitorFromPoint
GetMonitorInfoA

advapi32

RegOpenKeyExA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegCloseKey

ws2_32

getaddrinfo
freeaddrinfo

gdi32

SetPixelFormat
DescribePixelFormat
ChoosePixelFormat
GetDeviceCaps
SetDeviceGammaRamp
GetDeviceGammaRamp
UnrealizeObject
SetDIBColorTable
CreateDIBSection
SetSystemPaletteUse
SetPaletteEntries
SelectPalette
SelectObject
RealizePalette
GetSystemPaletteUse
GetSystemPaletteEntries
GetDIBits
DeleteObject
DeleteDC
CreatePalette
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
SwapBuffers

winmm

timeKillEvent
timeSetEvent
mciGetErrorStringA
mciSendCommandA
timeGetTime
timeBeginPeriod
timeEndPeriod
waveOutGetErrorTextA
waveOutOpen
waveOutClose
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite
joyGetPosEx
joyGetNumDevs
joyGetDevCapsA

kernel32

HeapFree
HeapAlloc
GetTimeZoneInformation
QueryPerformanceFrequency
GetTempPathW
CreateProcessA
FreeLibraryAndExitThread
ExitThread
HeapReAlloc
PeekNamedPipe
GetFileInformationByHandle
FileTimeToSystemTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
CreatePipe
SystemTimeToTzSpecificLocalTime
FindFirstFileExW
GetFullPathNameA
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleMode
ReadConsoleW
SetFilePointerEx
OutputDebugStringW
GetConsoleCP
FlushFileBuffers
DeleteFileW
CreateDirectoryW
MoveFileExW
SetStdHandle
RemoveDirectoryW
GetExitCodeProcess
GetFileAttributesExW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
CreateThread
GetCommandLineW
GetDriveTypeW
SetConsoleCtrlHandler
GetCurrentDirectoryW
GetCurrentDirectoryA
SetCurrentDirectoryA
WriteConsoleW
GetModuleFileNameW
GetFileType
GetStdHandle
GetModuleHandleExW
ExitProcess
HeapSize
RtlUnwind
Sleep
GetTickCount
GetModuleFileNameA
GetModuleHandleA
GlobalAlloc
GlobalUnlock
GlobalLock
DeleteFileA
GetLastError
MoveFileA
FindClose
FindFirstFileW
FindNextFileW
GetFullPathNameW
MultiByteToWideChar
WideCharToMultiByte
GetSystemTimeAsFileTime
CloseHandle
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
GetCommandLineA
FreeLibrary
LoadLibraryA
GetEnvironmentVariableA
SetEnvironmentVariableA
GetVersionExA
GetACP
GetLocaleInfoA
ReleaseMutex
WaitForSingleObject
CreateMutexA
TerminateThread
ReleaseSemaphore
CreateSemaphoreA
GetCurrentThread
SetThreadPriority
CreateEventA
GetDriveTypeA
CreateFileA
CreateFileW
ReadFile
SetFilePointer
WriteFile
SetErrorMode
FormatMessageA
SetEndOfFile
SetLastError
GetThreadPriority
ResumeThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetThreadContext
SetThreadContext
GetSystemDirectoryA
WaitForMultipleObjects
EncodePointer
DecodePointer
InitializeCriticalSectionAndSpinCount
CompareStringW
LCMapStringW
GetLocaleInfoW
GetStringTypeW
GetCPInfo
RaiseException
LoadLibraryExW
DuplicateHandle

Exports

Exports

SDL_AddTimer
SDL_AllocRW
SDL_AudioDriverName
SDL_AudioInit
SDL_AudioQuit
SDL_BuildAudioCVT
SDL_CDClose
SDL_CDEject
SDL_CDName
SDL_CDNumDrives
SDL_CDOpen
SDL_CDPause
SDL_CDPlay
SDL_CDPlayTracks
SDL_CDResume
SDL_CDStatus
SDL_CDStop
SDL_ClearError
SDL_CloseAudio
SDL_ConvertAudio
SDL_ConvertSurface
SDL_CreateCursor
SDL_CreateMutex
SDL_CreateRGBSurface
SDL_CreateRGBSurfaceFrom
SDL_CreateSemaphore
SDL_CreateThread
SDL_CreateYUVOverlay
SDL_Delay
SDL_DestroyMutex
SDL_DestroySemaphore
SDL_DisplayFormat
SDL_DisplayFormatAlpha
SDL_DisplayYUVOverlay
SDL_EnableKeyRepeat
SDL_EnableUNICODE
SDL_Error
SDL_EventState
SDL_FillRect
SDL_Flip
SDL_FreeCursor
SDL_FreeRW
SDL_FreeSurface
SDL_FreeYUVOverlay
SDL_GL_GetAttribute
SDL_GL_GetProcAddress
SDL_GL_LoadLibrary
SDL_GL_Lock
SDL_GL_SetAttribute
SDL_GL_SwapBuffers
SDL_GL_Unlock
SDL_GL_UpdateRects
SDL_GetAppState
SDL_GetAudioStatus
SDL_GetClipRect
SDL_GetCursor
SDL_GetError
SDL_GetEventFilter
SDL_GetKeyName
SDL_GetKeyRepeat
SDL_GetKeyState
SDL_GetModState
SDL_GetMouseState
SDL_GetRGB
SDL_GetRGBA
SDL_GetRelativeMouseState
SDL_GetThreadID
SDL_GetTicks
SDL_GetVideoInfo
SDL_GetVideoSurface
SDL_GetWMInfo
SDL_Has3DNow
SDL_Has3DNowExt
SDL_HasAltiVec
SDL_HasMMX
SDL_HasMMXExt
SDL_HasRDTSC
SDL_HasSSE
SDL_HasSSE2
SDL_Init
SDL_InitSubSystem
SDL_JoystickClose
SDL_JoystickEventState
SDL_JoystickGetAxis
SDL_JoystickGetBall
SDL_JoystickGetButton
SDL_JoystickGetHat
SDL_JoystickIndex
SDL_JoystickName
SDL_JoystickNumAxes
SDL_JoystickNumBalls
SDL_JoystickNumButtons
SDL_JoystickNumHats
SDL_JoystickOpen
SDL_JoystickOpened
SDL_JoystickUpdate
SDL_KillThread
SDL_Linked_Version
SDL_ListModes
SDL_LockAudio
SDL_LockSurface
SDL_LockYUVOverlay
SDL_LowerBlit
SDL_MapRGB
SDL_MapRGBA
SDL_NumJoysticks
SDL_OpenAudio
SDL_PauseAudio
SDL_PeepEvents
SDL_PollEvent
SDL_PumpEvents
SDL_PushEvent
SDL_Quit
SDL_QuitSubSystem
SDL_RWFromConstMem
SDL_RWFromFP
SDL_RWFromFile
SDL_RWFromMem
SDL_ReadBE16
SDL_ReadBE32
SDL_ReadBE64
SDL_ReadLE16
SDL_ReadLE32
SDL_ReadLE64
SDL_RegisterApp
SDL_RemoveTimer
SDL_SemPost
SDL_SemTryWait
SDL_SemValue
SDL_SemWait
SDL_SemWaitTimeout
SDL_SetAlpha
SDL_SetClipRect
SDL_SetColorKey
SDL_SetColors
SDL_SetCursor
SDL_SetError
SDL_SetEventFilter
SDL_SetModState
SDL_SetModuleHandle
SDL_SetPalette
SDL_SetTimer
SDL_SetVideoMode
SDL_ShowCursor
SDL_SoftStretch
SDL_ThreadID
SDL_UnlockAudio
SDL_UnlockSurface
SDL_UnlockYUVOverlay
SDL_UnregisterApp
SDL_UpdateRect
SDL_UpdateRects
SDL_UpperBlit
SDL_VideoDriverName
SDL_VideoInit
SDL_VideoModeOK
SDL_VideoQuit
SDL_WM_GetCaption
SDL_WM_GrabInput
SDL_WM_IconifyWindow
SDL_WM_SetCaption
SDL_WM_SetIcon
SDL_WM_ToggleFullScreen
SDL_WaitEvent
SDL_WaitThread
SDL_WarpMouse
SDL_WasInit
SDL_WriteBE16
SDL_WriteBE32
SDL_WriteBE64
SDL_WriteLE16
SDL_WriteLE32
SDL_WriteLE64
SDL_getenv
SDL_iconv
SDL_iconv_close
SDL_iconv_open
SDL_iconv_string
SDL_lltoa
SDL_mutexP
SDL_mutexV
SDL_putenv
SDL_revcpy
SDL_snprintf
SDL_strdup
SDL_strlcat
SDL_strlcpy
SDL_strtoull
SDL_ulltoa
SDL_vsnprintf
_BZ2_bzBuffToBuffCompress@28
_BZ2_bzBuffToBuffDecompress@24
_BZ2_bzCompress@8
_BZ2_bzCompressEnd@4
_BZ2_bzCompressInit@16
_BZ2_bzDecompress@4
_BZ2_bzDecompressEnd@4
_BZ2_bzDecompressInit@12
_BZ2_bzRead@16
_BZ2_bzReadClose@8
_BZ2_bzReadGetUnused@16
_BZ2_bzReadOpen@24
_BZ2_bzWrite@16
_BZ2_bzWriteClose64@28
_BZ2_bzWriteClose@20
_BZ2_bzWriteOpen@20
_BZ2_bzclose@4
_BZ2_bzdopen@8
_BZ2_bzerror@8
_BZ2_bzflush@4
_BZ2_bzlibVersion@0
_BZ2_bzopen@8
_BZ2_bzread@12
_BZ2_bzwrite@12

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 719KB - Virtual size: 719KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 41KB - Virtual size: 225KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 512B - Virtual size: 472B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.ctors
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.dtors
Size: 512B - Virtual size: 4B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 113KB - Virtual size: 113KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 115KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

36bc8523b5be1e47e4fc8fa4e0c2dce9

Headers

DLL Characteristics

File Characteristics

Imports

shell32

wsock32

user32

advapi32

ws2_32

gdi32

winmm

kernel32

Exports

Exports

Sections

.text Size: 2.8MB - Virtual size: 2.8MB

.rdata Size: 719KB - Virtual size: 719KB

.data Size: 41KB - Virtual size: 225KB

.gfids Size: 512B - Virtual size: 472B

.tls Size: 512B - Virtual size: 9B

.ctors Size: 512B - Virtual size: 4B

.dtors Size: 512B - Virtual size: 4B

.rsrc Size: 113KB - Virtual size: 113KB

.reloc Size: 115KB - Virtual size: 115KB

.text
Size: 2.8MB - Virtual size: 2.8MB

.rdata
Size: 719KB - Virtual size: 719KB

.data
Size: 41KB - Virtual size: 225KB

.gfids
Size: 512B - Virtual size: 472B

.tls
Size: 512B - Virtual size: 9B

.ctors
Size: 512B - Virtual size: 4B

.dtors
Size: 512B - Virtual size: 4B

.rsrc
Size: 113KB - Virtual size: 113KB

.reloc
Size: 115KB - Virtual size: 115KB