Puran File Recovery[.]exe

Resubmissions

Sharing

Copy URL Twitter E-mail

General

Target

Puran File Recovery.exe
Size

681KB
MD5

9c7ac51f44e99a3f8fc003b2caa12973
SHA1

bdda9841a3cd3012573ff6aa6a6ae55ea76fbe5a
SHA256

67f7361a220232cdd3d0b3d9171727ec41d20ef2c29c58ade0237944899e5e6a
SHA512

862a12c2843304a29fe4c4168b99663b691c86a7b2f1f619783c69798f5862cebeb82a00536301cb60e6f56dbc865943f243a992fdc34347136e9fb7c3f8c3cf
SSDEEP

12288:Aq+LJCWfacPwu1wa5pmPLq2KPD3ysH+5azPO:GCWY8YW2KPzO5MP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Puran File Recovery.exe

Files

Puran File Recovery.exe
.exe windows:5 windows x64 arch:x64

8da67ea3e831ed50254cebd0da5d2dbe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

E:\New_Work\Refined_Portable\Puran File Recovery Commercial\Puran File Recovery\x64\Release\Puran File Recovery.pdb

Imports

wininet

InternetReadFile
InternetCloseHandle
InternetOpenUrlW
InternetOpenW
InternetGetConnectedState

kernel32

GetFileTime
GetStartupInfoW
HeapFree
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
RtlUnwindEx
RaiseException
RtlPcToFileHeader
HeapReAlloc
ExitProcess
HeapQueryInformation
HeapSize
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
GetFileSizeEx
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
HeapSetInformation
HeapCreate
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
GetProcessHeap
CreateFileA
SetEnvironmentVariableA
FileTimeToLocalFileTime
SetErrorMode
GetTickCount
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GlobalFlags
FileTimeToSystemTime
lstrlenA
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
GlobalHandle
GlobalReAlloc
TlsAlloc
InitializeCriticalSection
TlsGetValue
LocalAlloc
WritePrivateProfileStringW
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
CompareStringA
GetThreadLocale
GetCurrentProcessId
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
LoadLibraryA
lstrcmpW
FreeResource
WideCharToMultiByte
MultiByteToWideChar
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
LocalFree
GetVersionExA
GetDiskFreeSpaceW
GetCurrentProcess
SetFilePointerEx
ReadFile
WriteFile
GetVolumePathNameW
GetVolumeNameForVolumeMountPointW
DeviceIoControl
GetLastError
GetModuleHandleW
GetProcAddress
FreeLibrary
LoadLibraryW
Sleep
CreateDirectoryW
SetThreadExecutionState
CreateThread
GetModuleFileNameW
FindVolumeClose
FindNextVolumeW
GetVolumePathNamesForVolumeNameW
FindFirstVolumeW
CloseHandle
CreateFileW
MulDiv
LeaveCriticalSection
EnterCriticalSection
lstrlenW
GetFileAttributesW
FindResourceW
LoadResource
LockResource
SizeofResource
EncodePointer

user32

PostThreadMessageW
SetCapture
InvalidateRgn
InvalidateRect
SetRect
IsRectEmpty
CopyAcceleratorTableW
LoadCursorW
GetSysColorBrush
SetCursor
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
DestroyMenu
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetMessageW
TranslateMessage
ValidateRect
CharNextW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
EnableMenuItem
GetWindowThreadProcessId
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SendDlgItemMessageA
SendDlgItemMessageW
WinHelpW
IsChild
GetCapture
SetWindowsHookExW
GetClassNameW
GetClassLongPtrW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
DispatchMessageW
GetTopWindow
SetWindowLongPtrW
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
TrackPopupMenu
GetKeyState
SetMenu
SetForegroundWindow
IsWindowVisible
UpdateWindow
PostMessageW
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
EqualRect
CopyRect
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
GetWindowPlacement
GetWindow
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
RegisterClipboardFormatW
CharUpperW
GetNextDlgGroupItem
GetParent
GetNextDlgTabItem
MessageBeep
UnregisterClassW
CallNextHookEx
ReleaseCapture
EndDialog
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
ScreenToClient
GetCursorPos
GetWindowRect
IsWindow
GetFocus
GetComboBoxInfo
DrawIcon
IsIconic
InsertMenuW
CreatePopupMenu
AppendMenuW
GetSystemMenu
LoadIconW
RedrawWindow
GetClientRect
GetSystemMetrics
ReleaseDC
GetDC
EnableWindow
SendMessageW
RegisterWindowMessageW
GetWindowLongPtrW
CheckMenuItem

gdi32

SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
ScaleViewportExtEx
OffsetViewportOrgEx
GetMapMode
GetRgnBox
SetViewportExtEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
GetWindowExtEx
GetViewportExtEx
StretchBlt
DeleteObject
CreateDIBSection
CreateCompatibleDC
DeleteDC
SelectObject
SetMapMode
RestoreDC
SaveDC
GetTextColor
GetBkColor
GetStockObject
CreateRectRgnIndirect
CreateBitmap
SetBkColor
SetTextColor
GetClipBox
CreateFontIndirectW
SetStretchBltMode
GetDeviceCaps
GetObjectW
SetDIBColorTable

comdlg32

GetFileTitleW

winspool.drv

OpenPrinterW
DocumentPropertiesW
ClosePrinter

advapi32

LookupPrivilegeValueA
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
OpenProcessToken
RegOpenKeyExW
AdjustTokenPrivileges
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
RegCloseKey

shell32

SHGetPathFromIDListW
ShellExecuteW
SHBrowseForFolderW

comctl32

InitCommonControlsEx

shlwapi

PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathFileExistsW

oledlg

OleUIBusyW

ole32

CoTaskMemAlloc
CoTaskMemFree
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter

oleaut32

VariantInit
SysAllocString
VariantChangeType
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
OleCreateFontIndirect
VariantClear
SysAllocStringLen
SysStringLen
SysFreeString

gdiplus

GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageI
GdipDeleteGraphics
GdipGetImageGraphicsContext
GdipDisposeImage
GdipAlloc
GdipFree
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipCloneImage
GdiplusStartup
GdiplusShutdown
GdipBitmapUnlockBits

Sections

.text
Size: 436KB - Virtual size: 435KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 116KB - Virtual size: 115KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 38KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 24KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

8da67ea3e831ed50254cebd0da5d2dbe

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

wininet

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

Sections

.text Size: 436KB - Virtual size: 435KB

.rdata Size: 116KB - Virtual size: 115KB

.data Size: 14KB - Virtual size: 38KB

.pdata Size: 24KB - Virtual size: 24KB

.rsrc Size: 73KB - Virtual size: 73KB

.reloc Size: 16KB - Virtual size: 15KB

.text
Size: 436KB - Virtual size: 435KB

.rdata
Size: 116KB - Virtual size: 115KB

.data
Size: 14KB - Virtual size: 38KB

.pdata
Size: 24KB - Virtual size: 24KB

.rsrc
Size: 73KB - Virtual size: 73KB

.reloc
Size: 16KB - Virtual size: 15KB