srrGUI[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

srrGUI.exe
Size

88KB
MD5

1908f7b27c1904017a040ba3f78cc568
SHA1

945a9b9ce9fe3ec779eab51cfc0eccd634631966
SHA256

1df7a6e86e5b9d89d958a687e1e7bd7fcfafd29845bfd5b127ff8574c6f9720a
SHA512

7e177d0a41f663c638eae9eb82de1ae25f41479f7f174378b7f501b160391cd01d06829ed4a6111c9fa80cb9076bdef11a31979012e81961a493b307fcfa9fea
SSDEEP

1536:jnLAya3x4laCbRknMuA7BnU+fbueWeaP2MURzImX5ufGE9orRO:jLQWlpRknM1BXS6S2/zhaG5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
srrGUI.exe

Files

srrGUI.exe
.exe windows:4 windows x86 arch:x86

cdc70ff0cc2ff71227ce50b6b038bf3a

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
wcsncmp
memmove
wcsncpy
_wcsnicmp
wcsstr
wcslen
wcscpy
wcscat
memcpy
memcmp
wcscmp
sprintf
_stricmp
strcmp
tolower
_wcsicmp
fabs
ceil
malloc
floor
free
fclose
_vsnwprintf

kernel32

GetModuleHandleW
HeapCreate
HeapDestroy
ExitProcess
EnterCriticalSection
WaitForSingleObject
LeaveCriticalSection
InitializeCriticalSection
CloseHandle
CreateThread
HeapAlloc
HeapFree
Sleep
LoadLibraryW
GetProcAddress
FreeLibrary
GetCurrentThreadId
GetCurrentProcessId
PeekNamedPipe
GetCurrentProcess
DuplicateHandle
CreatePipe
GetStdHandle
CreateProcessW
GetExitCodeProcess
HeapReAlloc
ReadFile
TerminateProcess
SetUnhandledExceptionFilter
MulDiv
GetDriveTypeW
FindFirstFileW
FindClose
GetFileAttributesW
SetFileAttributesW
DeleteFileW
GetLastError
FindNextFileW
WriteFile
CreateFileW
SetFilePointer
MultiByteToWideChar
WideCharToMultiByte
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
GlobalFree
SetLastError
TlsAlloc
GetFileSize
GetVersionExW
TlsGetValue
TlsSetValue
DeleteCriticalSection
LoadLibraryA
TlsFree
WaitForMultipleObjects
GetCurrentThread
CreateSemaphoreA
ReleaseSemaphore

user32

SendMessageW
GetWindowThreadProcessId
PostMessageW
EnumWindows
CharLowerW
MessageBoxW
IsWindowVisible
GetWindowLongW
GetForegroundWindow
IsWindowEnabled
EnableWindow
SetWindowPos
RedrawWindow
GetClientRect
GetDC
DrawFocusRect
ReleaseDC
ScreenToClient
GetPropW
RemovePropW
SetPropW
GetParent
GetClassNameW
GetWindowRect
IntersectRect
EnumChildWindows
DestroyWindow
CallWindowProcW
CreateWindowExW
SetWindowLongW
GetWindow
SetFocus
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
ValidateRect
MapWindowPoints
InvalidateRect
GetSystemMetrics
GetSysColor
GetSysColorBrush
SetScrollPos
InflateRect
GetWindowDC
MoveWindow
DefWindowProcW
SetActiveWindow
UnregisterClassW
DestroyAcceleratorTable
LoadIconW
LoadCursorW
GetMenu
AdjustWindowRectEx
CreateAcceleratorTableW
PeekMessageW
MsgWaitForMultipleObjects
GetMessageW
GetActiveWindow
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
RegisterClassW
ShowWindow
GetFocus
IsChild
GetKeyState
FillRect
DefFrameProcW
RegisterWindowMessageW
DestroyIcon
GetIconInfo
CreateIconFromResourceEx
CreateIconFromResource

gdi32

DeleteObject
CreateDCW
GetDeviceCaps
CreateFontW
DeleteDC
GetStockObject
SelectObject
GetTextExtentPoint32W
SetBkColor
SetTextColor
ExcludeClipRect
CreateSolidBrush
GetObjectType
CreateCompatibleDC
SetDIBits
GetObjectW
CreateDIBSection
GetObjectA
GetDIBits
BitBlt
CreateBitmap
SetPixel

comdlg32

GetSaveFileNameW
GetOpenFileNameW

comctl32

InitCommonControlsEx

ole32

CoInitialize
CoTaskMemFree
OleInitialize
OleUninitialize
ReleaseStgMedium
RevokeDragDrop
RegisterDragDrop

shell32

ShellExecuteExW
DragQueryFileW

winmm

timeBeginPeriod

Sections

.code
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 44KB - Virtual size: 43KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 11KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cdc70ff0cc2ff71227ce50b6b038bf3a

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

comdlg32

comctl32

ole32

shell32

winmm

Sections

.code Size: 21KB - Virtual size: 20KB

.text Size: 44KB - Virtual size: 43KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 11KB - Virtual size: 12KB

.rsrc Size: 8KB - Virtual size: 8KB

.code
Size: 21KB - Virtual size: 20KB

.text
Size: 44KB - Virtual size: 43KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 11KB - Virtual size: 12KB

.rsrc
Size: 8KB - Virtual size: 8KB