run_this_i_dare_you[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

run_this_i_dare_you.exe
Size

569KB
MD5

875f4557305e4993a69ccd07d9049204
SHA1

d4c037486289544efd90b3d8e1ea8e1e21f48441
SHA256

3e2489dfd211047d3e3de027e8ec9bf3f5a17ea82a725dc0424cb69a295f0c71
SHA512

d2970d3d159c77ebdaf8d574aed4713c179400663c884a5f0853d4d78ea21ead6deea2125c25c049323e92f401957eea44ca85b70ee62703b5f785ea63509e58
SSDEEP

12288:6KWfbgWEMPxjzGhd3JMOV0dElzobCyvm4CTPppTv:6KCbgWHPxjYJMjdMDyO4CTPppT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
run_this_i_dare_you.exe

Files

run_this_i_dare_you.exe
.exe windows:6 windows x64 arch:x64

6da3b869014633a8f02f0ecae2bf1c64

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

gdi32

EnumFontFamiliesExW
GetObjectW
SetTextColor
SetBkMode
SelectObject
GetStockObject
GetPixel
ExtFloodFill
CreateFontIndirectW
GetObjectA
CreateDIBSection
DeleteObject
CreateSolidBrush
CreateBitmap
RemoveFontResourceW
AddFontResourceExW
GetDeviceCaps
CreateFontIndirectA

uxtheme

OpenThemeData
GetThemeColor
SetWindowTheme
CloseThemeData

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
DuplicateIcon
ExtractIconExW
Shell_NotifyIconW
SHGetFileInfoW

user32

GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SetWindowTextA
RedrawWindow
InvalidateRect
GetWindowDC
UpdateWindow
DrawTextW
DrawMenuBar
GetSystemMetrics
IsWindowEnabled
GetDlgItem
BringWindowToTop
SetWindowPlacement
GetWindowPlacement
CreateWindowExW
CallWindowProcA
HideCaret
PostMessageA
GetMessagePos
LoadIconA
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TranslateAcceleratorW
EnableWindow
LoadCursorA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
EnumThreadWindows
GetParent
GetProcessDefaultLayout
ScreenToClient
MapWindowPoints
GetSysColor
FillRect
GetWindowLongA
SetWindowLongA
EnumChildWindows
DestroyIcon
CreateIconFromResourceEx
GetMenuBarInfo
SetMenu
AdjustWindowRectEx
DestroyMenu
GetMenuItemCount
AppendMenuW
RemoveMenu
SetMenuInfo
GetAsyncKeyState
GetFocus
GetActiveWindow
SetFocus
GetNextDlgTabItem
IsWindowVisible
SetWindowPos
ShowWindow
DestroyWindow
RegisterClassExA
SendMessageW
SendMessageA
PeekMessageA
DispatchMessageA
TranslateMessage
GetDesktopWindow
GetWindowRect
ShowScrollBar
ReleaseDC
GetDC
DeleteMenu
GetSystemMenu
InsertMenuItemW
GetMenuItemInfoW
SetWindowLongPtrA
SetMenuItemInfoW
CreateIconIndirect
GetKeyboardLayout
PostMessageW
DefWindowProcA
PostQuitMessage
VkKeyScanExW
CreateAcceleratorTableW
MessageBoxW
CharUpperBuffW
CharLowerBuffW
ExitWindowsEx
OpenClipboard
CloseClipboard
SetClipboardData
GetClientRect
CreatePopupMenu
GetWindowLongPtrA
GetSysColorBrush
GetClipboardData
EmptyClipboard
keybd_event
GetCursorPos
SetCursor
DestroyAcceleratorTable
CopyAcceleratorTableW
CreateMenu
TrackPopupMenu
BeginPaint
EndPaint
SystemParametersInfoA
MonitorFromWindow
GetMonitorInfoA

kernel32

InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
GetCurrentProcessId
GetCurrentThreadId
LocalAlloc
GetExitCodeThread
CreateThread
GetTickCount
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
DeleteFileA
FindResourceA
LoadLibraryW
SizeofResource
LockResource
LoadResource
VirtualProtect
lstrcmpiW
SetLastError
GetCurrentDirectoryW
SetCurrentDirectoryA
TerminateProcess
PeekNamedPipe
CreatePipe
SetHandleInformation
WriteFile
ReadConsoleW
FileTimeToSystemTime
MoveFileW
CopyFileW
SetFileTime
SetFileAttributesW
RemoveDirectoryW
GetFullPathNameW
GetFileTime
GetFileSizeEx
FileTimeToLocalFileTime
CreateFileW
GetTimeFormatW
GetDateFormatW
SystemTimeToFileTime
GetLocalTime
CompareFileTime
WideCharToMultiByte
FindNextFileW
FindFirstFileW
FindClose
CreateDirectoryW
GetConsoleWindow
SetCurrentConsoleFontEx
GetCurrentConsoleFontEx
SetConsoleTitleW
GetConsoleTitleW
SetConsoleTextAttribute
SetConsoleCursorPosition
GetConsoleScreenBufferInfo
SetConsoleCursorInfo
GetConsoleCursorInfo
FillConsoleOutputAttribute
GetSystemTimeAsFileTime
FreeLibrary
GetModuleFileNameW
GetProcAddress
LoadLibraryA
GetLastError
GetModuleFileNameA
LoadLibraryExA
FormatMessageA
SetCurrentDirectoryW
CreateDirectoryA
DeleteFileW
GetFileAttributesW
GetTempFileNameW
GetTempPathW
Beep
CloseHandle
QueryPerformanceCounter
QueryPerformanceFrequency
WaitForSingleObject
GetCurrentProcess
GetExitCodeProcess
CreateProcessW
GetTickCount64
AssignProcessToJobObject
SetInformationJobObject
GetModuleHandleA
GlobalAlloc
GlobalUnlock
GlobalLock
LocalFree
CreateJobObjectA
MultiByteToWideChar
SetConsoleOutputCP
GetStdHandle
SetStdHandle
CreateFileA
ReadFile
Sleep
MulDiv
AllocConsole
GetConsoleMode
SetConsoleMode
ReadConsoleInputA
ReadConsoleInputW
FillConsoleOutputCharacterA

dwmapi

DwmGetWindowAttribute
DwmSetWindowAttribute

comdlg32

GetSaveFileNameW
GetOpenFileNameW
ChooseColorA
ChooseFontW

ole32

CoTaskMemFree
CoCreateInstance
CoInitializeEx
CoUninitialize
CLSIDFromProgID
CLSIDFromString
CoCreateGuid

shlwapi

PathFindFileNameW
PathIsRelativeW
PathFindFileNameA
PathFindExtensionW
PathRemoveFileSpecW
PathIsDirectoryEmptyW

oleaut32

VariantTimeToSystemTime
VarDateFromStr
SysAllocString
SysFreeString
VariantInit
VariantClear
VariantChangeType
GetActiveObject

comctl32

ImageList_Remove
ImageList_ReplaceIcon
ord413
ord412
ord410
ImageList_SetImageCount
ImageList_Destroy
ImageList_GetImageCount
ImageList_Create
InitCommonControlsEx

crypt32

CryptStringToBinaryA
CryptDecodeObjectEx
CryptBinaryToStringA
CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
PFXImportCertStore
CertFindExtension
CertFreeCertificateContext
CertFindCertificateInStore

wininet

InternetCanonicalizeUrlA
InternetCrackUrlA
InternetCloseHandle
InternetConnectA
InternetReadFileExA
InternetCrackUrlW
FtpCommandW
FtpGetCurrentDirectoryW
FtpSetCurrentDirectoryW
FtpCreateDirectoryW
FtpRenameFileW
FtpDeleteFileW
FtpPutFileW
FtpGetFileW
InternetWriteFile
InternetOpenA
FtpFindFirstFileW
InternetGetLastResponseInfoA
InternetFindNextFileW
InternetReadFile
InternetSetCookieA
HttpQueryInfoA
HttpEndRequestA
HttpSendRequestExA
HttpSendRequestA
HttpAddRequestHeadersA
HttpOpenRequestA
InternetSetStatusCallback
InternetSetOptionA
FtpRemoveDirectoryW

ws2_32

accept
bind
closesocket
connect
ioctlsocket
getnameinfo
WSACleanup
WSAStartup
gethostname
gethostbyname
inet_addr
__WSAFDIsSet
inet_ntop
inet_pton
WSAAddressToStringA
WSAGetLastError
WSASetLastError
socket
shutdown
setsockopt
send
select
recv
ntohs
listen
inet_ntoa
htons
htonl
getsockopt

secur32

QueryContextAttributesA
FreeContextBuffer
EncryptMessage
FreeCredentialsHandle
InitializeSecurityContextA
DecryptMessage
DeleteSecurityContext
AcquireCredentialsHandleA
AcceptSecurityContext

dnsapi

DnsQuery_A
DnsFree

iphlpapi

GetAdaptersAddresses

urlmon

FindMimeFromData

sensapi

IsNetworkAlive

advapi32

RegOpenKeyExW
RegDeleteKeyValueW
RegSetKeyValueW
RegDeleteTreeW
RegGetValueW
CryptDestroyKey
CryptSetKeyParam
CryptImportKey
CryptEncrypt
CryptDestroyHash
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptGenRandom
CryptCreateHash
OpenProcessToken
AdjustTokenPrivileges
LookupPrivilegeValueA
RegCloseKey
CryptHashData

msvcp140

?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

__std_exception_destroy
__std_exception_copy
wcschr
memmove
memchr
strrchr
wcsstr
memcmp
memcpy
longjmp
strchr
strstr
_CxxThrowException
__C_specific_handler
__intrinsic_setjmp
__current_exception
memset
__current_exception_context

api-ms-win-crt-heap-l1-1-0

_set_new_mode
realloc
calloc
malloc
free
_callnewh

api-ms-win-crt-runtime-l1-1-0

_initialize_onexit_table
terminate
_seh_filter_exe
strerror
system
_cexit
_crt_atexit
abort
_register_onexit_function
_register_thread_local_exe_atexit_callback
_c_exit
exit
_exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_errno
_set_app_type
_initialize_narrow_environment
_configure_narrow_argv
__p___argv
_invalid_parameter_noinfo_noreturn

api-ms-win-crt-stdio-l1-1-0

freopen_s
_fileno
fwrite
__p__commode
_set_fmode
_kbhit
__stdio_common_vfprintf
_get_osfhandle
clearerr
_fseeki64
fgets
_pclose
_popen
setvbuf
tmpfile
ungetc
getc
freopen
fread
fopen
fflush
ferror
feof
fclose
tmpnam
_wfopen
fputc
__stdio_common_vsprintf
puts
fputs
_wfsopen
__acrt_iob_func
_telli64
_chsize_s
__stdio_common_vsprintf_s
fputwc
fgetws
fputws
_setmode
__stdio_common_vswprintf
fseek
__stdio_common_vsscanf
_ftelli64

api-ms-win-crt-math-l1-1-0

frexp
ldexp
tanh
tan
__setusermatherr
sinh
pow
floor
sin
log10
log
sqrt
exp
cosh
fmod
acos
asin
atan2
ceil
cos

api-ms-win-crt-locale-l1-1-0

setlocale
localeconv
_configthreadlocale

api-ms-win-crt-convert-l1-1-0

strtod

api-ms-win-crt-string-l1-1-0

strncpy
strncmp
strcoll
_strdup
isdigit
isalnum
toupper
wcsncpy
_wcsdup
tolower
iscntrl
isgraph
ispunct
isspace
isxdigit
islower
isupper
isalpha
iswctype
strpbrk
strspn

api-ms-win-crt-time-l1-1-0

_gmtime64
_localtime64
_difftime64
strftime
_localtime64_s
_time64
_mktime64
_wutime64
clock

api-ms-win-crt-environment-l1-1-0

getenv
_wputenv
_wgetenv

api-ms-win-crt-filesystem-l1-1-0

remove
rename
_waccess
_wstat64

Exports

Exports

File_close
File_open
LoadFont
TBuffer
TCOM
TDatetime
TDirectory
TFile
TPipe
TWidget
TWidgetItem
TWindow
TZip
WIDGET_METHODS
WM_LUAMAX
console_finalize
detectBOM
fontsize_fromheight
luaL_addgsub
luaL_addlstring
luaL_addstring
luaL_addvalue
luaL_argerror
luaL_buffinit
luaL_buffinitsize
luaL_callmeta
luaL_checkFilename
luaL_checkany
luaL_checkinteger
luaL_checklstring
luaL_checknumber
luaL_checkoption
luaL_checkstack
luaL_checktype
luaL_checkudata
luaL_checkversion_
luaL_embedclose
luaL_embedopen
luaL_error
luaL_execresult
luaL_fileresult
luaL_getlasterror
luaL_getmetafield
luaL_getsubtable
luaL_gsub
luaL_len
luaL_loadbufferx
luaL_loadfilex
luaL_loadstring
luaL_newmetatable
luaL_newstate
luaL_openlibs
luaL_optinteger
luaL_optlstring
luaL_optnumber
luaL_prepbuffsize
luaL_pushresult
luaL_pushresultsize
luaL_ref
luaL_require
luaL_requiref
luaL_setfuncs
luaL_setmetatable
luaL_setrawfuncs
luaL_testudata
luaL_tolstring
luaL_traceback
luaL_typeerror
luaL_unref
luaL_where
lua_absindex
lua_arith
lua_atpanic
lua_callk
lua_checkcinstance
lua_checkinstance
lua_checkstack
lua_close
lua_closeslot
lua_closethread
lua_compare
lua_concat
lua_copy
lua_createcinstance
lua_createinstance
lua_createtable
lua_dump
lua_error
lua_gc
lua_getallocf
lua_getevent
lua_getfield
lua_getglobal
lua_gethook
lua_gethookcount
lua_gethookmask
lua_geti
lua_getinfo
lua_getiuservalue
lua_getlocal
lua_getmetatable
lua_getstack
lua_gettable
lua_gettask
lua_gettop
lua_getupvalue
lua_iscfunction
lua_iscinstance
lua_isinstance
lua_isinteger
lua_isnumber
lua_isobject
lua_isstring
lua_isuserdata
lua_isyieldable
lua_len
lua_load
lua_newstate
lua_newthread
lua_newuserdatauv
lua_next
lua_objectname
lua_optstring
lua_pcallk
lua_pushboolean
lua_pushcclosure
lua_pushfstring
lua_pushinteger
lua_pushlightuserdata
lua_pushlstring
lua_pushlwstring
lua_pushnewinstance
lua_pushnewinstancebyname
lua_pushnil
lua_pushnumber
lua_pushstring
lua_pushtask
lua_pushthread
lua_pushvalue
lua_pushvfstring
lua_rawequal
lua_rawget
lua_rawgeti
lua_rawgetp
lua_rawlen
lua_rawset
lua_rawseti
lua_rawsetp
lua_registerevent
lua_registermodule
lua_registerobject
lua_registerwidget
lua_resetthread
lua_resume
lua_rotate
lua_schedule
lua_setallocf
lua_setcstacklimit
lua_setfield
lua_setglobal
lua_sethook
lua_seti
lua_setiuservalue
lua_setlocal
lua_setmetatable
lua_settable
lua_settop
lua_setupvalue
lua_setwarnf
lua_sleep
lua_status
lua_stringtonumber
lua_super
lua_toBuffer
lua_toboolean
lua_tocfunction
lua_tocinstance
lua_toclose
lua_tointegerx
lua_tolstring
lua_tolwstring
lua_tonumberx
lua_topointer
lua_toself
lua_tothread
lua_touserdata
lua_type
lua_typename
lua_upvalueid
lua_upvaluejoin
lua_version
lua_warning
lua_widgetconstructor
lua_widgetdestructor
lua_widgetinitialize
lua_widgetproc
lua_xmove
lua_yieldk
luaopen_base
luaopen_compression
luaopen_console
luaopen_coroutine
luaopen_crypto
luaopen_debug
luaopen_embed
luaopen_io
luaopen_math
luaopen_net
luaopen_os
luaopen_package
luaopen_string
luaopen_sys
luaopen_table
luaopen_utf8
luart_tobuffer
search_task

Sections

.text
Size: 421KB - Virtual size: 421KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 26KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

6da3b869014633a8f02f0ecae2bf1c64

Headers

DLL Characteristics

File Characteristics

Imports

gdi32

uxtheme

shell32

user32

kernel32

dwmapi

comdlg32

ole32

shlwapi

oleaut32

comctl32

crypt32

wininet

ws2_32

secur32

dnsapi

iphlpapi

urlmon

sensapi

advapi32

msvcp140

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

Exports

Exports

Sections

.text Size: 421KB - Virtual size: 421KB

.rdata Size: 91KB - Virtual size: 91KB

.data Size: 6KB - Virtual size: 9KB

.pdata Size: 26KB - Virtual size: 25KB

.rsrc Size: 19KB - Virtual size: 18KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 421KB - Virtual size: 421KB

.rdata
Size: 91KB - Virtual size: 91KB

.data
Size: 6KB - Virtual size: 9KB

.pdata
Size: 26KB - Virtual size: 25KB

.rsrc
Size: 19KB - Virtual size: 18KB

.reloc
Size: 4KB - Virtual size: 3KB