45d8f65e7ae110ed9543fdcba06e378567819fb943ba0d8eaefc3db543c78a18

Sharing

Copy URL Twitter E-mail

General

Target

45d8f65e7ae110ed9543fdcba06e378567819fb943ba0d8eaefc3db543c78a18
Size

2.9MB
MD5

1afd3b5308831534f3039740176c6d56
SHA1

bac79d0579645f50a8dd5ce5f0dbba3990fe7c0e
SHA256

45d8f65e7ae110ed9543fdcba06e378567819fb943ba0d8eaefc3db543c78a18
SHA512

8a2d37fac23c60ff85177b01dd1b55d85fae3081246137860a543bbf81f4ce1a89b53bd0230473879d4bac0a8556dd2cdd8d24788d088f35594f1a3b01c160e2
SSDEEP

49152:Uu7KZZnefQGKqL7Sl9X9tHKDth9AiJmN/Kyh6cUVUsjvALxFmcTFM/6Ic4Dess:UuKpbXz9tqDthuiw9h2Vc4D

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
45d8f65e7ae110ed9543fdcba06e378567819fb943ba0d8eaefc3db543c78a18

Files

45d8f65e7ae110ed9543fdcba06e378567819fb943ba0d8eaefc3db543c78a18
.exe windows:5 windows x86 arch:x86

5f4cee49940b4055f1e101dd964870f5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\dev\projects\.various\EsgFileReport\Release\EsgFileReport.pdb

Imports

advapi32

GetUserNameW
RegEnumKeyW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumValueW

shell32

ExtractIconExW
SHGetMalloc
SHGetPathFromIDListW
SHGetSpecialFolderLocation
DragAcceptFiles
DragFinish
DragQueryPoint
DragQueryFileW
ExtractIconW
SHGetFileInfoW

kernel32

TlsGetValue
TlsFree
TlsAlloc
FindResourceW
GetCurrentProcessId
GetCPInfo
IsValidCodePage
TerminateProcess
SizeofResource
LockResource
LoadResource
GetACP
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
RaiseException
OutputDebugStringW
GetTempPathW
GetFileTime
GetTempFileNameW
GetFileType
CopyFileW
SetCurrentDirectoryW
WaitForMultipleObjects
SetEvent
IsBadReadPtr
IsBadStringPtrA
GetSystemTimeAsFileTime
FreeConsole
ReadConsoleOutputCharacterA
GetConsoleScreenBufferInfo
GetStdHandle
WriteConsoleA
WriteConsoleW
FillConsoleOutputCharacterW
SetConsoleCursorPosition
GetCommandLineW
MulDiv
GlobalLock
GlobalUnlock
GlobalAlloc
GlobalFree
GlobalSize
HeapSize
InterlockedCompareExchange
InterlockedExchange
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
RtlUnwind
SetStdHandle
MoveFileW
GetFullPathNameW
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetFilePointer
GetTimeZoneInformation
GetCurrentDirectoryA
LCMapStringW
LCMapStringA
GetStringTypeW
HeapCreate
VirtualFree
VirtualAlloc
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetOEMCP
SetEnvironmentVariableA
SetEnvironmentVariableW
LoadLibraryA
InitializeCriticalSectionAndSpinCount
GetModuleHandleA
GetTimeFormatA
GetDateFormatA
GetLocaleInfoA
EnumSystemLocalesA
GetStringTypeA
CreateFileA
GetDriveTypeA
GetConsoleOutputCP
CompareStringW
CompareStringA
SetEndOfFile
ExitProcess
TlsSetValue
InterlockedDecrement
InterlockedIncrement
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FormatMessageW
SetErrorMode
FindNextFileW
FindClose
FindFirstFileW
SetLastError
MultiByteToWideChar
WideCharToMultiByte
ExpandEnvironmentStringsW
DeleteFileW
GetLongPathNameW
GetFileSizeEx
GetModuleFileNameW
GetFileAttributesW
WriteFile
LocalFree
CloseHandle
GetProcAddress
GetLastError
CreateFileW
ReadFile
GetVersionExW
Sleep
LoadLibraryW
GetProcessHeap
GetCurrentThread
GetTickCount
GetModuleHandleW
WaitForSingleObject
HeapFree
GetLogicalDriveStringsW
GetCurrentProcess
HeapAlloc
FreeLibrary
GetDriveTypeW
HeapReAlloc
GetEnvironmentVariableW
QueryPerformanceFrequency

user32

GetDlgItem
LoadIconW
LoadBitmapW
LoadImageW
SetWindowRgn
MessageBeep
GetClassNameW
GetWindowTextW
GetWindowTextLengthW
GetDoubleClickTime
DrawFrameControl
DrawIconEx
ValidateRect
ValidateRgn
ChangeDisplaySettingsW
DestroyCursor
GetMenuState
DestroyMenu
GetSubMenu
SetMenuItemInfoW
CreatePopupMenu
InsertMenuW
InsertMenuItemW
RemoveMenu
ModifyMenuW
AppendMenuW
CreateMenu
DestroyAcceleratorTable
CreateAcceleratorTableW
TranslateAcceleratorW
BeginPaint
EndPaint
GetWindowDC
UnionRect
HideCaret
keybd_event
ChildWindowFromPoint
DrawStateW
GetSysColorBrush
CheckMenuItem
CheckMenuRadioItem
SetRect
DrawEdge
ShowCursor
AdjustWindowRectEx
GetDialogBaseUnits
GetClipboardFormatNameW
RegisterClipboardFormatW
IsClipboardFormatAvailable
WindowFromPoint
ScrollWindow
EnableScrollBar
SetScrollInfo
GetScrollInfo
SetCapture
GetFocus
EnableWindow
GetAsyncKeyState
VkKeyScanW
MapVirtualKeyW
TranslateMessage
PostQuitMessage
GetCursorPos
InvalidateRect
DrawFocusRect
CreateDialogParamW
FillRect
CopyRect
GetSysColor
InflateRect
DrawTextW
GetDesktopWindow
GetSystemMenu
EnableMenuItem
DrawMenuBar
GetWindowPlacement
CreateDialogIndirectParamW
SetWindowTextW
SetWindowPos
MoveWindow
GetWindowLongW
SetWindowLongW
FlashWindow
IsZoomed
IsIconic
BringWindowToTop
GetParent
GetWindowRect
CreateIconIndirect
GetIconInfo
ReleaseDC
GetDC
GetKeyState
DdePostAdvise
DdeConnect
DdeNameService
DdeCreateStringHandleW
DdeClientTransaction
DdeDisconnect
DdeInitializeW
DdeGetLastError
DdeCreateDataHandle
DdeGetData
DdeFreeDataHandle
DdeQueryStringW
DdeUninitialize
DdeFreeStringHandle
SetCursor
MsgWaitForMultipleObjects
GetMessageW
DispatchMessageW
SetTimer
KillTimer
PeekMessageW
DestroyWindow
DefWindowProcW
UnregisterClassW
RegisterClassW
PostMessageW
CreateWindowExW
PostThreadMessageW
MessageBoxW
SetMenu
PtInRect
UnregisterHotKey
RegisterHotKey
SetWindowsHookExW
GetMenuItemCount
GetMenuItemInfoW
SystemParametersInfoW
EndDeferWindowPos
BeginDeferWindowPos
MapWindowPoints
GetUpdateRgn
DeferWindowPos
UpdateWindow
DestroyIcon
SetForegroundWindow
SetFocus
wsprintfW
ShowWindow
FindWindowExW
SetCursorPos
IsDialogMessageW
CallWindowProcW
TrackPopupMenu
GetSystemMetrics
SendMessageW
EnumDisplaySettingsW
ReleaseCapture
GetClientRect
OffsetRect
IsWindow
GetCapture
CallNextHookEx
UnhookWindowsHookEx
ChildWindowFromPointEx
GetWindow
GetActiveWindow
GetMessageTime
IsWindowEnabled
IsWindowVisible
ClientToScreen
ScreenToClient
RedrawWindow
GetMessagePos
SetParent
LoadCursorW

comctl32

ImageList_EndDrag
ImageList_DragLeave
ImageList_DragEnter
ImageList_DragMove
ImageList_BeginDrag
ImageList_SetDragCursorImage
ord16
ImageList_SetBkColor
ImageList_Draw
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon
ImageList_Add
ImageList_Create
ImageList_Destroy
ImageList_GetIconSize
ImageList_GetImageCount
ord17

rpcrt4

UuidToStringW
RpcStringFreeW

gdi32

GetRegionData
LineTo
MoveToEx
GetStockObject
GetClipBox
Polyline
SetROP2
SetViewportOrgEx
GetPixel
SetPixel
PolyBezier
SetWindowOrgEx
SetWindowExtEx
SetViewportExtEx
SetMapMode
SelectClipRgn
GetBkColor
SetStretchBltMode
ExtSelectClipRgn
ExtFloodFill
Arc
Pie
Polygon
SetPolyFillMode
PolyPolygon
Rectangle
RoundRect
Ellipse
CreateRectRgn
ExtTextOutW
StretchDIBits
OffsetRgn
GetOutlineTextMetricsW
CreateFontIndirectW
CloseEnhMetaFile
PlayEnhMetaFile
CreateEnhMetaFileW
GetEnhMetaFileHeader
DeleteEnhMetaFile
GdiFlush
SelectPalette
RealizePalette
GetTextMetricsW
CreatePen
CreateSolidBrush
SetTextColor
SetBkMode
SetBkColor
CreateBitmap
CreateCompatibleBitmap
BitBlt
DeleteObject
SelectObject
DeleteDC
GetDeviceCaps
ExcludeClipRect
MaskBlt
SetBrushOrgEx
CreateCompatibleDC
ExtCreateRegion
GetEnhMetaFileW
CreateDCW
EndPage
StartPage
EndDoc
StartDocW
SetAbortProc
GetSystemPaletteEntries
EnumFontFamiliesExW
CreateICW
GetTextExtentExPointW
GetCharABCWidthsW
GetTextExtentPoint32W
StretchBlt
CreateDIBSection
GetDIBits
CreateDIBitmap
CreatePalette
GetDIBColorTable
GetPaletteEntries
GetNearestPaletteIndex
CombineRgn
CreateRectRgnIndirect
RectInRegion
SetTextAlign
ExtCreatePen
CreateHatchBrush
CreatePatternBrush
GetRgnBox
EqualRgn
PtInRegion
GetObjectW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

comdlg32

PrintDlgW
ChooseFontW
CommDlgExtendedError
GetOpenFileNameW
GetSaveFileNameW
PageSetupDlgW

ole32

ReleaseStgMedium
CoTaskMemAlloc
RevokeDragDrop
OleSetClipboard
RegisterDragDrop
OleInitialize
OleUninitialize
CoCreateInstance
OleIsCurrentClipboard
OleFlushClipboard
OleGetClipboard
CoLockObjectExternal

oleaut32

SysFreeString
SysStringLen
VarBstrFromCy

Sections

.text
Size: 1.9MB - Virtual size: 1.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 699KB - Virtual size: 698KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 42KB - Virtual size: 233KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1024B - Virtual size: 712B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 256KB - Virtual size: 255KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f4cee49940b4055f1e101dd964870f5

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

shell32

kernel32

user32

comctl32

rpcrt4

gdi32

winspool.drv

comdlg32

ole32

oleaut32

Sections

.text Size: 1.9MB - Virtual size: 1.9MB

.rdata Size: 699KB - Virtual size: 698KB

.data Size: 42KB - Virtual size: 233KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 1024B - Virtual size: 712B

.reloc Size: 256KB - Virtual size: 255KB

.text
Size: 1.9MB - Virtual size: 1.9MB

.rdata
Size: 699KB - Virtual size: 698KB

.data
Size: 42KB - Virtual size: 233KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 1024B - Virtual size: 712B

.reloc
Size: 256KB - Virtual size: 255KB