dohnadohna_eng[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

dohnadohna_eng.exe
Size

4.7MB
MD5

964950390c62e7fc81cd0518965756e3
SHA1

9ac48bc2b5de93f385256abb61cec2474158d8d9
SHA256

46691983c8f0f0def73e669479f76651e97a1b191107d2d42bd52cb74d1894fc
SHA512

71e0cf377caf4bb4d5f5e584a00119f5571732f5ed959377543d4377bc2a3fe66ec1be35e8c7706794c49ecd0901560d3e3973961b673725e69caa348f015191
SSDEEP

98304:kD7gY7xV/rL6ZE9LyYqWy77frZm1ZZZdZt8F:kIY7xV/36ZGLyYqnm1ZZZdZt8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dohnadohna_eng.exe

Files

dohnadohna_eng.exe
.exe windows:6 windows x86 arch:x86

2fa600c95c9799fa906dd75ed33cb028

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegCloseKey
RegOpenKeyExA

comdlg32

GetOpenFileNameA
GetSaveFileNameA

gdi32

CreateFontA
SelectObject
CreateCompatibleDC
DeleteDC
DeleteObject
CreateSolidBrush
BitBlt
CreateCompatibleBitmap
SetTextColor
CreateFontIndirectA
GetDeviceCaps
CreateDIBSection
TextOutA
SetBkMode
SetBkColor
GetStockObject

imm32

ImmSetCompositionFontA
ImmNotifyIME
ImmSetOpenStatus
ImmGetOpenStatus
ImmSetCompositionWindow
ImmGetCandidateListA
ImmReleaseContext
ImmGetContext

kernel32

FindFirstFileA
FindNextFileA
FindClose
GetFileAttributesA
CopyFileA
FileTimeToSystemTime
DeleteFileA
FileTimeToLocalFileTime
RemoveDirectoryA
CreateDirectoryA
GetFileTime
ExitProcess
GlobalAlloc
GlobalFree
GlobalLock
GlobalUnlock
CreateMutexA
GetLastError
UnmapViewOfFile
CreateFileMappingA
OpenFileMappingA
MapViewOfFile
QueryPerformanceFrequency
QueryPerformanceCounter
GetCurrentDirectoryA
SizeofResource
FindResourceA
LockResource
LoadResource
VerifyVersionInfoA
GetLocaleInfoA
GetNativeSystemInfo
VerSetConditionMask
GlobalMemoryStatusEx
SetCurrentDirectoryA
WriteConsoleW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExA
SetStdHandle
FlushFileBuffers
GetTimeZoneInformation
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetConsoleCP
ReadConsoleW
GetConsoleMode
GetACP
GetStdHandle
GetFileType
CreateFileW
SetFilePointerEx
GetModuleHandleExW
ExitThread
RtlUnwind
LoadLibraryW
GetFileSize
UnregisterWaitEx
QueryDepthSList
InterlockedFlushSList
InterlockedPushEntrySList
InterlockedPopEntrySList
ReleaseSemaphore
VirtualProtect
VirtualFree
VirtualAlloc
GetVersionExW
LoadLibraryExW
GetModuleFileNameW
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
RegisterWaitForSingleObject
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SetThreadPriority
CreateThread
SwitchToThread
SignalObjectAndWait
CreateTimerQueue
InitializeSListHead
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLocaleInfoW
LCMapStringW
CompareStringW
GetCurrentThread
WaitForSingleObjectEx
DuplicateHandle
GetModuleHandleW
GetTickCount
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateEventW
InitializeCriticalSectionAndSpinCount
SetLastError
GetCPInfo
TryEnterCriticalSection
CreateFileA
SetFilePointer
WriteFile
HeapFree
ReadFile
GetModuleFileNameA
WideCharToMultiByte
MultiByteToWideChar
GetCurrentThreadId
FreeLibrary
LoadLibraryA
GetProcAddress
GetModuleHandleA
GetProcessId
Sleep
WaitForMultipleObjects
GetExitCodeProcess
OpenProcess
CreateEventA
ResetEvent
CloseHandle
SetEvent
WaitForSingleObject
DeleteCriticalSection
InitializeCriticalSection
QueueUserWorkItem
IsProcessorFeaturePresent
RaiseException
DecodePointer
EncodePointer
GetStringTypeW
AcquireSRWLockShared
AcquireSRWLockExclusive
ReleaseSRWLockShared
ReleaseSRWLockExclusive
LeaveCriticalSection
EnterCriticalSection
OutputDebugStringA
K32GetProcessMemoryInfo
GetCurrentProcess
GetProcessHeap
HeapAlloc
HeapReAlloc
HeapSize

shell32

DragAcceptFiles
DragFinish
ShellExecuteA
DragQueryFileA
SHGetFolderPathA
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteExA

user32

GetCursorPos
ShowCursor
PtInRect
GetKeyState
GetForegroundWindow
ScreenToClient
UpdateWindow
GetParent
GetWindowThreadProcessId
GetWindow
SetActiveWindow
GetTopWindow
SendMessageA
SetForegroundWindow
DispatchMessageA
TranslateMessage
PeekMessageA
GetClientRect
LoadCursorA
RegisterClassA
CreateWindowExA
UnregisterClassA
SetTimer
KillTimer
CreatePopupMenu
SetMenuItemInfoA
GetMenuItemInfoA
InsertMenuItemA
ChangeDisplaySettingsA
EnumDisplaySettingsA
GetDesktopWindow
DialogBoxParamA
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
TranslateAcceleratorA
LoadAcceleratorsA
EndDialog
GetDlgItem
EnableWindow
IsDlgButtonChecked
SetScrollInfo
GetScrollInfo
GetScrollPos
SetScrollPos
GetWindowPlacement
GetDC
DrawTextA
ReleaseDC
CloseWindow
LoadMenuA
OpenIcon
GetMenu
InsertMenuA
FillRect
SetKeyboardState
GetKeyboardState
GetSubMenu
GetActiveWindow
SetWindowLongA
ClientToScreen
GetWindowLongA
ValidateRect
SetWindowTextA
MessageBoxA
DestroyMenu
SetCapture
LoadIconA
PostQuitMessage
ReleaseCapture
InvalidateRect
IsIconic
SetCursorPos
BeginPaint
EndPaint
GetSystemMenu
GetWindowRect
DestroyWindow
SetWindowPos
PostMessageA
GetSystemMetrics
ShowWindow
GetWindowTextA
MoveWindow
SetMenu
DefWindowProcA
SetFocus
DrawMenuBar
EnableMenuItem

wininet

HttpSendRequestA
InternetOpenA
InternetCloseHandle
InternetConnectA
InternetReadFile
InternetAttemptConnect
HttpOpenRequestA

winmm

timeGetDevCaps
timeGetTime
timeEndPeriod
timeBeginPeriod

d3d11

D3D11CreateDevice

ole32

CoUninitialize
CoCreateInstance
CoInitializeEx

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 649KB - Virtual size: 648KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 107KB - Virtual size: 146KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

_RDATA
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 363KB - Virtual size: 363KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2fa600c95c9799fa906dd75ed33cb028

Headers

DLL Characteristics

File Characteristics

Imports

advapi32

comdlg32

gdi32

imm32

kernel32

shell32

user32

wininet

winmm

d3d11

ole32

Sections

.text Size: 3.6MB - Virtual size: 3.6MB

.rdata Size: 649KB - Virtual size: 648KB

.data Size: 107KB - Virtual size: 146KB

.gfids Size: 3KB - Virtual size: 2KB

.tls Size: 512B - Virtual size: 9B

_RDATA Size: 1KB - Virtual size: 1KB

.rsrc Size: 363KB - Virtual size: 363KB

.text
Size: 3.6MB - Virtual size: 3.6MB

.rdata
Size: 649KB - Virtual size: 648KB

.data
Size: 107KB - Virtual size: 146KB

.gfids
Size: 3KB - Virtual size: 2KB

.tls
Size: 512B - Virtual size: 9B

_RDATA
Size: 1KB - Virtual size: 1KB

.rsrc
Size: 363KB - Virtual size: 363KB