danabot | PID-DJ Felli Fel, Diddy, Akon, Ludacris, Lil Jon - Get Buck In Here (Album Version Explicit)[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
PID-DJ Felli Fel, Diddy, Akon, Ludacris, Lil Jon - Get Buck In Here (Album Version Explicit).exe
Size 46.7MB
Sample240413-3nv35abd89
SHA256 c74091d558422be1f8c5946690aee954dd7ef5c92e91d279b9a1ebb3029237ff
MD5 1b4aa220446f1f655a2c9d9de105887f
SHA1 2bb77e522d549c167d1554916824b6e697c0e3ab
SHA512 a1576954ae7b0b018e3cfa1da65ea8a0d46c8a88a34e2c69d188ed984c3398403e5160c6bf0183cd7234aba62da1dc8b126376c40bad0d83e00a989db1297809
SSDEEP 786432:XUI/0+n83H7c0GkNnvHhqf+xEg1eIHqvRUJjGE7GCDsuhQG6gAecQ/q/MZq:++n8rcDkNvHsfSEuK5x4ZDC9Oy/M8
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

danabot

Malware Config

Signatures

Danabot family
danabot

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
PID-DJ Felli Fel, Diddy, Akon, Ludacris, Lil Jon - Get Buck In Here (Album Version Explicit).exe

File Explorer

PID-DJ Felli Fel, Diddy, Akon, Ludacris, Lil Jon - Get Buck In Here (Album Version Explicit).exe

.exe 46.7MB

PID-DJ Felli Fel, Diddy, Akon, Ludacris, Lil Jon - Get Buck In Here (Album Version Explicit).exe

IMPHASH 698c4a76200e125e6076e2f5aa3562be
SHA256 c74091d558422be1f8c5946690aee954dd7ef5c92e91d279b9a1ebb3029237ff
MD5 1b4aa220446f1f655a2c9d9de105887f
SHA1 2bb77e522d549c167d1554916824b6e697c0e3ab
SHA512 a1576954ae7b0b018e3cfa1da65ea8a0d46c8a88a34e2c69d188ed984c3398403e5160c6bf0183cd7234aba62da1dc8b126376c40bad0d83e00a989db1297809
SSDEEP 786432:XUI/0+n83H7c0GkNnvHhqf+xEg1eIHqvRUJjGE7GCDsuhQG6gAecQ/q/MZq:++n8rcDkNvHsfSEuK5x4ZDC9Oy/M8
MD5 SHA1 SHA512 SSDEEP

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

3278292

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_BYTES_REVERSED_LO IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_BYTES_REVERSED_HI

PDB paths

winmm

timeGetTime

comdlg32

GetOpenFileNameW

comctl32

FlatSB_SetScrollInfo InitCommonControls ImageList_DragMove ImageList_Destroy _TrackMouseEvent ImageList_DragShowNolock ImageList_Add ImageList_GetDragImage FlatSB_SetScrollProp ImageList_Create ImageList_EndDrag ImageList_DrawEx ImageList_SetImageCount FlatSB_GetScrollPos FlatSB_SetScrollPos InitializeFlatSB FlatSB_GetScrollInfo ImageList_Write ImageList_GetBkColor ImageList_SetBkColor ImageList_BeginDrag ImageList_GetIcon ImageList_GetImageCount ImageList_DragEnter ImageList_GetIconSize ImageList_SetIconSize ImageList_Read ImageList_DragLeave ImageList_Draw ImageList_Remove

shell32

DragFinish DragQueryFileW DragAcceptFiles Shell_NotifyIconW SHGetSpecialFolderPathW SHAppBarMessage ShellExecuteW ShellExecuteExW

user32

CopyImage CreateWindowExW ChildWindowFromPoint GetMenuItemInfoW SetMenuItemInfoW DefFrameProcW GetDCEx PeekMessageW MonitorFromWindow GetDlgCtrlID SetTimer WindowFromPoint BeginPaint RegisterClipboardFormatW FrameRect MapVirtualKeyW OffsetRect IsWindowUnicode RegisterWindowMessageW FillRect GetMenuStringW DispatchMessageW SendMessageA DefMDIChildProcW EnumWindows GetClassInfoW ShowOwnedPopups GetSystemMenu GetScrollRange GetScrollPos SetScrollPos GetActiveWindow SetActiveWindow DrawEdge GetKeyboardLayoutList LoadBitmapW DrawFocusRect EnumChildWindows GetScrollBarInfo ReleaseCapture UnhookWindowsHookEx LoadCursorW GetCapture SetCapture CreatePopupMenu ScrollWindow ShowCaret GetMenuItemID GetLastActivePopup CharLowerBuffW GetSystemMetrics SetWindowLongW PostMessageW DrawMenuBar SetParent IsZoomed CharUpperBuffW GetClientRect IsChild IntersectRect ClientToScreen GetClipboardData SetClipboardData SetWindowPlacement IsIconic CallNextHookEx GetMonitorInfoW ShowWindow CheckMenuItem CharUpperW DefWindowProcW GetForegroundWindow SetForegroundWindow GetWindowTextW EnableWindow DestroyWindow IsDialogMessageW EndMenu RegisterClassW CharNextW GetWindowThreadProcessId RedrawWindow GetDC GetFocus SetFocus EndPaint ReleaseDC MsgWaitForMultipleObjectsEx LoadKeyboardLayoutW GetClassLongW ActivateKeyboardLayout GetParent DrawTextW SetScrollRange InsertMenuItemW PeekMessageA GetPropW SetClassLongW MessageBoxW MessageBeep SetPropW RemovePropW UpdateWindow GetSubMenu EqualRect MsgWaitForMultipleObjects DestroyMenu DestroyIcon SetWindowsHookExW EmptyClipboard IsWindowVisible GetDlgItem DispatchMessageA PtInRect UnregisterClassW GetTopWindow SendMessageW AdjustWindowRectEx DrawIcon IsWindow EnumThreadWindows GetMessageTime InvalidateRect GetKeyboardState DrawFrameControl ScreenToClient SetCursor CreateIcon CreateMenu LoadStringW CharLowerW SetWindowPos SetWindowRgn GetMenuItemCount RemoveMenu GetSysColorBrush GetKeyboardLayoutNameW GetWindowDC TranslateMessage OpenClipboard DrawTextExW MapWindowPoints EnumDisplayMonitors CallWindowProcW CloseClipboard DestroyCursor GetScrollInfo SetWindowTextW GetMessageExtraInfo UpdateLayeredWindow EnableScrollBar GetSysColor TrackPopupMenu DrawIconEx PostQuitMessage GetClassNameW ShowScrollBar EnableMenuItem GetIconInfo GetMessagePos SetScrollInfo GetKeyNameTextW GetDesktopWindow GetCursorPos SetCursorPos HideCaret GetMenu GetMenuState SetMenu SetRect GetKeyState FindWindowExW MonitorFromPoint SystemParametersInfoW LoadIconW GetCursor GetWindow GetWindowLongW GetWindowRect InsertMenuW KillTimer WaitMessage IsWindowEnabled IsDialogMessageA TranslateMDISysAccel GetWindowPlacement FindWindowW DeleteMenu GetKeyboardLayout

version

GetFileVersionInfoSizeW VerQueryValueW GetFileVersionInfoW

oleaut32

SysFreeString VariantClear VariantInit GetErrorInfo SysReAllocStringLen SysAllocString SafeArrayCreate GetActiveObject SysAllocStringLen SafeArrayPtrOfIndex SafeArrayGetUBound SafeArrayGetLBound VariantCopy VariantChangeType

advapi32

RegSetValueExW RegEnumKeyExW RegFlushKey RegQueryValueExW RegCloseKey RegCreateKeyExW RegQueryInfoKeyW RegOpenKeyExW

netapi32

NetWkstaGetInfo NetApiBufferFree

msvcrt

memcpy memset

kernel32

SetFileAttributesW GetFileType GetACP CloseHandle LocalFree GetCurrentProcessId SizeofResource VirtualProtect QueryPerformanceFrequency IsDebuggerPresent FindNextFileW GetFullPathNameW VirtualFree ExitProcess HeapAlloc GetCPInfoExW GlobalSize RtlUnwind GetCPInfo GetStdHandle GetTimeZoneInformation FileTimeToLocalFileTime GetModuleHandleW FreeLibrary HeapDestroy FileTimeToDosDateTime ReadFile GetUserDefaultLCID GetLastError GetModuleFileNameW SetLastError GlobalAlloc GlobalUnlock FindResourceW CreateThread CompareStringW CopyFileW LoadLibraryA GetVolumeInformationW ResetEvent MulDiv FreeResource GetDriveTypeW GetVersion RaiseException MoveFileW GlobalAddAtomW FormatMessageW OpenProcess SwitchToThread GetExitCodeThread OutputDebugStringW GetCurrentThread LoadLibraryExW TerminateProcess LockResource GetCurrentThreadId UnhandledExceptionFilter GlobalFindAtomW VirtualQuery GlobalFree VirtualQueryEx Sleep EnterCriticalSection SetFilePointer LoadResource SuspendThread GetTickCount WritePrivateProfileStringW GetTempFileNameW GetFileSize GlobalDeleteAtom GetStartupInfoW GetFileAttributesW GetCurrentDirectoryW SetCurrentDirectoryW InitializeCriticalSection GetThreadPriority GetCurrentProcess SetThreadPriority GlobalLock VirtualAlloc GetTempPathW GetCommandLineW GetSystemInfo LeaveCriticalSection GetProcAddress ResumeThread GetVersionExW VerifyVersionInfoW HeapCreate GetWindowsDirectoryW GetDiskFreeSpaceW VerSetConditionMask FindFirstFileW GetUserDefaultUILanguage GetConsoleOutputCP GetConsoleCP GlobalHandle lstrlenW CompareStringA SetEndOfFile QueryPerformanceCounter lstrcmpW HeapFree WideCharToMultiByte FindClose MultiByteToWideChar LoadLibraryW SetEvent GetLocaleInfoW CreateFileW DeleteFileW IsDBCSLeadByteEx GetEnvironmentVariableW GetLocalTime WaitForSingleObject OutputDebugStringA WriteFile ExitThread DeleteCriticalSection GetDateFormatW TlsGetValue SetErrorMode GetComputerNameW IsValidLocale TlsSetValue CreateDirectoryW GetSystemDefaultUILanguage EnumCalendarInfoW LocalAlloc RemoveDirectoryW CreateEventW GetPrivateProfileStringW WaitForMultipleObjectsEx GetThreadLocale SetThreadLocale

wsock32

send

ole32

IsAccelerator CoCreateInstance CoUninitialize IsEqualGUID CreateStreamOnHGlobal OleInitialize ProgIDFromCLSID OleUninitialize CoGetClassObject CoInitialize CoTaskMemFree OleDraw CoTaskMemAlloc OleSetMenuDescriptor StringFromCLSID

gdi32

Pie SetBkMode CreateCompatibleBitmap GetEnhMetaFileHeader CloseEnhMetaFile RectVisible AngleArc ResizePalette SetTextColor StretchBlt SelectClipRgn RoundRect RestoreDC SetRectRgn GetTextMetricsW GetWindowOrgEx CreatePalette PolyBezierTo GetStockObject CreateSolidBrush GetBkMode Polygon MoveToEx PlayEnhMetaFile Ellipse GetBitmapBits GetSystemPaletteEntries GetEnhMetaFileBits GetEnhMetaFilePaletteEntries CreatePenIndirect SetMapMode CreateFontIndirectW PolyBezier LPtoDP GetObjectW GetWinMetaFileBits SetROP2 GetEnhMetaFileDescriptionW ArcTo CreateEnhMetaFileW Arc SelectPalette ExcludeClipRect MaskBlt SetWindowOrgEx DeleteEnhMetaFile Chord SetDIBits GetViewportOrgEx SetViewportOrgEx CreateRectRgn RealizePalette GetObjectType SetDIBColorTable GetDIBColorTable CreateBrushIndirect PatBlt SetEnhMetaFileBits Rectangle SaveDC DeleteDC FrameRgn BitBlt GetDeviceCaps GetTextExtentPoint32W GetClipBox IntersectClipRect Polyline CreateBitmap SetWinMetaFileBits CombineRgn GetStretchBltMode CreateDIBitmap SetStretchBltMode GetDIBits CreateDIBSection LineTo GetRgnBox CreateHalftonePalette SelectObject DeleteObject ExtFloodFill UnrealizeObject CopyEnhMetaFileW SetBkColor CreateCompatibleDC GetBrushOrgEx GetCurrentPositionEx GetNearestPaletteIndex CreateRoundRectRgn GetTextExtentPointW ExtTextOutW SetBrushOrgEx GetPixel GdiFlush SetPixel EnumFontFamiliesExW StretchDIBits GetPaletteEntries

Name

.text

Size

3.1MB

Virtual Size

3.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.itext

Size

10KB

Virtual Size

9KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

53KB

Virtual Size

52KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.bss

Size

Virtual Size

33KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

155B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

Virtual Size

68B

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

512B

Virtual Size

93B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

294KB

Virtual Size

293KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

13.8MB

Virtual Size

13.8MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

PID-DJ Felli Fel, Diddy, Akon, Ludacris, Lil Jon - Get Buck In Here (Album Version Explicit).exe

winmm

comdlg32

comctl32

shell32

user32

version

oleaut32

advapi32

netapi32

msvcrt

kernel32

wsock32

ole32

gdi32

generic