mxbikes[.]exe | Triage

Resubmissions

01/05/2024, 19:29

240501-x7khvagg83 3

Sharing

Copy URL Twitter E-mail

General

Target

mxbikes.exe
Size

3.5MB
MD5

c0388067596411ced19cafd5c0523178
SHA1

b85afa7c0b92a56f6456277848c22a059b7e9bc7
SHA256

9e0cf32044a12689384bf7d05e49c7034b0313c8abb19bb5e864d43a3525bf47
SHA512

f7a1e6d6bdd5a7a33c38e5b4a9df703f1d75b97a9af1a5abec3e0cebf55bba68e62da843d349c65cf63ca4cbcd6a049470c9b0edae17a0b6dd6cc60550a1da6c
SSDEEP

49152:vV8e8aC4Aa0Jl9DiHeasPgWP6qpytKnrvVyOZDeaa2GP8xRMwQqqyc2wFm5uToSt:ilC1q2PwRMwQqqY5qT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mxbikes.exe

Files

mxbikes.exe
.exe windows:5 windows x64 arch:x64

5c95d6062b952d477b788417cc6fc3f2

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime

user32

CloseClipboard
OpenClipboard
DispatchMessageA
SetWindowLongPtrA
ShowWindow
SetWindowPos
GetDesktopWindow
DefWindowProcA
EmptyClipboard
EnumDisplaySettingsA
GetMonitorInfoA
ChangeDisplaySettingsExA
SetWindowTextA
MessageBoxA
EnumDisplayMonitors
ChangeDisplaySettingsA
GetClipboardData
MapVirtualKeyA
CallWindowProcA
AdjustWindowRect
LoadCursorA
DestroyWindow
RegisterClassExA
ReleaseDC
PeekMessageA
LoadImageA
UpdateWindow
FillRect
SetClipboardData
CreateWindowExA
GetWindowLongA
UnregisterClassA
ShowCursor
TranslateMessage
GetDC
SendMessageA
GetClientRect
LoadIconA
PostQuitMessage
GetWindowLongPtrA

steam_api64

SteamAPI_Init
SteamAPI_RunCallbacks
SteamAPI_RestartAppIfNecessary
SteamAPI_Shutdown
SteamAPI_GetHSteamUser
SteamInternal_CreateInterface
SteamAPI_GetHSteamPipe
SteamAPI_UnregisterCallResult
SteamInternal_ContextInit
SteamAPI_RegisterCallResult

kernel32

RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
GetModuleFileNameA
GetStdHandle
SetCurrentDirectoryA
GlobalUnlock
FreeConsole
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetFileTime
TerminateProcess
GetStartupInfoA
GlobalSize
CreateFileA
CloseHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
FreeLibrary
GetProcAddress
LoadLibraryA
Sleep
AllocConsole
GlobalLock
GlobalAlloc

gdi32

GetStockObject
SelectObject
CreateCompatibleDC
CreateDIBSection
BitBlt
SetPixelFormat
DescribePixelFormat
ChoosePixelFormat
SwapBuffers
CreateSolidBrush
DeleteObject
SetTextColor
GetDeviceCaps
SetBkColor

shell32

SHGetSpecialFolderLocation
Shell_NotifyIconA
SHGetPathFromIDListA

ole32

CoTaskMemFree

msvcr90

sqrtf
??2@YAPEAX_K@Z
_HUGE
__CxxFrameHandler3
floorf
atan2f
_nextafterf
sprintf
vsprintf
abort
free
malloc
strchr
strncpy
strrchr
sscanf
strstr
tolower
atol
strncat
fopen
fprintf
fwrite
fclose
fread
__iob_func
printf
ftell
rename
memmove
_findnext64i32
ceilf
_findfirst64i32
_time64
_purecall
fseek
fflush
atoi
_mkdir
setvbuf
_open_osfhandle
_localtime64
_fdopen
calloc
realloc
ldexp
qsort
exit
memchr
memset
memcpy
_create_locale
_atof_l
_free_locale
atof
_mktime64
asin
atan2
sin
cos
isspace
strlen
strcpy
strcat
strcmp
abs
pow
log
ceil
fmod
sqrt
atan
tan
acos
exp
rand
srand
floor
ferror
getenv
tmpfile
fputs
_sprintf_l
memcmp
fscanf
feof
fgets
_stricmp
_strupr
_strnicmp
_rmdir
_access
??3@YAXPEAX@Z
_amsg_exit
__getmainargs
__C_specific_handler
_XcptFilter
_exit
_ismbblead
_cexit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_commode
powf
_encode_pointer
__set_app_type
__crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
sinf
cosf
vfprintf
_vsnprintf
_findclose
_snprintf
remove
_fmode

opengl32

glGetError
glDisable
glEnable
glBindTexture
glBlendFunc
glAlphaFunc
glDepthMask
glFogfv
glDisableClientState
glTexGeni
glTexCoordPointer
glEnableClientState
glColorPointer
glNormalPointer
glVertexPointer
glGetFloatv
glGetIntegerv
wglGetProcAddress
glGetString
glViewport
glTexEnvi
glClearColor
glCullFace
glFrontFace
glDepthFunc
glReadPixels
glFlush
glReadBuffer
glClear
glVertex3f
glColor3fv
glTexImage2D
glTexParameterf
glTexParameteri
glGenTextures
glPixelStorei
glTexSubImage2D
glDeleteTextures
glDrawElements
glTexGenfv
glTexEnvfv
glColor3f
glColor4f
glPolygonMode
glColorMaterial
glMaterialfv
glScissor
glMultMatrixf
glOrtho
glNormal3f
glFrustum
glMaterialf
glLightfv
glLightModelfv
glFogf
glFogi
wglMakeCurrent
wglGetCurrentContext
wglShareLists
wglCreateContext
wglGetCurrentDC
wglDeleteContext
glCopyTexSubImage2D
glLoadMatrixf
glMatrixMode
glEnd
glVertex3fv
glTexCoord2fv
glColor4ubv
glBegin
glLoadIdentity

dinput8

DirectInput8Create

ws2_32

ntohl
ioctlsocket
setsockopt
htons
closesocket
recvfrom
sendto
freeaddrinfo
getaddrinfo
getnameinfo
inet_pton
ntohs
bind
WSACleanup
inet_ntop
WSAStartup
htonl
socket

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 351KB - Virtual size: 350KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 100KB - Virtual size: 12.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 99KB - Virtual size: 98KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

5c95d6062b952d477b788417cc6fc3f2

Headers

DLL Characteristics

File Characteristics

Imports

winmm

user32

steam_api64

kernel32

gdi32

shell32

ole32

msvcr90

opengl32

dinput8

ws2_32

advapi32

Sections

.text Size: 3.0MB - Virtual size: 3.0MB

.rdata Size: 351KB - Virtual size: 350KB

.data Size: 100KB - Virtual size: 12.8MB

.pdata Size: 99KB - Virtual size: 98KB

.rsrc Size: 1024B - Virtual size: 944B

.reloc Size: 16KB - Virtual size: 15KB

.text
Size: 3.0MB - Virtual size: 3.0MB

.rdata
Size: 351KB - Virtual size: 350KB

.data
Size: 100KB - Virtual size: 12.8MB

.pdata
Size: 99KB - Virtual size: 98KB

.rsrc
Size: 1024B - Virtual size: 944B

.reloc
Size: 16KB - Virtual size: 15KB