CW[.]eXe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
CW.eXe
Size 9.0MB
Sample240607-py7ysagb8z
SHA256 60ca507ef4ba7dbbb7ef6ea4b975b9b09a24d7d0c91d38d0876331203f962d98
MD5 6738d790fc0f3928a8a5f19d829cae4d
SHA1 db0a727520178061506c7ec07a99bac581610329
SHA512 ceacf7ecdf1fa12da540f96592bd7114eb963bab8dc50641c000c1dff74b0b03ee24049df631d6c68ae70d208ff62e3476674f25e2faf5a3a09c9f46555d97b6
SSDEEP 196608:9O1vl2I4a7SdzRDymXLa4mnb0DtUog3jCUE2nKNfMILF9UBDHLSwxT1aQhS:Wt2O7Sd1ymX+4mnOU9+UCZM6kzWu12
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
CW.eXe

File Explorer

CW.eXe

.exe 9.0MB

CW.eXe

IMPHASH 73386bf3d64aacc4f390f8277f3d3e96
SHA256 60ca507ef4ba7dbbb7ef6ea4b975b9b09a24d7d0c91d38d0876331203f962d98
MD5 6738d790fc0f3928a8a5f19d829cae4d
SHA1 db0a727520178061506c7ec07a99bac581610329
SHA512 ceacf7ecdf1fa12da540f96592bd7114eb963bab8dc50641c000c1dff74b0b03ee24049df631d6c68ae70d208ff62e3476674f25e2faf5a3a09c9f46555d97b6
SSDEEP 196608:9O1vl2I4a7SdzRDymXLa4mnb0DtUog3jCUE2nKNfMILF9UBDHLSwxT1aQhS:Wt2O7Sd1ymX+4mnOU9+UCZM6kzWu12
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

95142

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

WritePrivateProfileStringA GetProcessVersion SizeofResource GetCPInfo GetOEMCP RtlUnwind ExitProcess TerminateProcess HeapFree HeapAlloc RaiseException GetTimeZoneInformation GetSystemTime GetLocalTime HeapReAlloc SetEnvironmentVariableA SetCurrentDirectoryA GetStartupInfoA GetCommandLineA GetACP HeapSize LCMapStringA LCMapStringW GetEnvironmentVariableA GetVersionExA HeapDestroy VirtualFree VirtualAlloc IsBadWritePtr SetUnhandledExceptionFilter CompareStringA CompareStringW GetFileType SetStdHandle UnhandledExceptionFilter FreeEnvironmentStringsA FreeEnvironmentStringsW GetEnvironmentStrings GetEnvironmentStringsW SetHandleCount GetStdHandle GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr GlobalFlags SetErrorMode TlsGetValue GetProfileStringA LocalReAlloc TlsSetValue GlobalReAlloc TlsFree GlobalHandle TlsAlloc LocalAlloc EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSection SetFileTime SystemTimeToFileTime LocalFileTimeToFileTime GetFileTime MulDiv SetLastError FreeLibrary GetVersion lstrcatA GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GetModuleHandleA GlobalUnlock GlobalFree LockResource FindResourceA LoadResource GlobalLock GlobalAlloc GlobalDeleteAtom GetCurrentThread GetCurrentThreadId lstrcmpiA LoadLibraryA GetProcAddress SetEndOfFile UnlockFile LockFile FlushFileBuffers WriteFile GetCurrentProcess DuplicateHandle lstrcmpA FileTimeToSystemTime MultiByteToWideChar WideCharToMultiByte InterlockedDecrement CreateDirectoryA MoveFileA SetVolumeLabelA GetDriveTypeA GetCurrentDirectoryA GetFileSize GetDiskFreeSpaceA FormatMessageA LocalFree CreateFileMappingA MapViewOfFile UnmapViewOfFile lstrlenA CreateProcessA GetLastError GetExitCodeProcess GetTempPathA GetModuleFileNameA RemoveDirectoryA SetFileAttributesA DeleteFileA InterlockedIncrement FindNextFileA CreateFileA SetFilePointer ReadFile CloseHandle GetFullPathNameA lstrcpynA GetVolumeInformationA GetFileAttributesA lstrcpyA FindFirstFileA FindClose FileTimeToLocalFileTime HeapCreate

user32

ScreenToClient AdjustWindowRectEx GetSysColor MapWindowPoints UpdateWindow ClientToScreen GetWindowDC BeginPaint EndPaint TabbedTextOutA DrawTextA GrayStringA LoadStringA GetClassNameA PtInRect GetSysColorBrush InflateRect DestroyMenu InvalidateRect WinHelpA GetClassInfoA RegisterClassA GetMenu GetMenuItemCount GetSubMenu GetMenuItemID CreateWindowExA GetClassLongA SetPropA GetPropA CallWindowProcA RemovePropA DefWindowProcA GetMessageTime GetMessagePos GetForegroundWindow SetForegroundWindow GetWindow OffsetRect IntersectRect SystemParametersInfoA GetWindowPlacement GetWindowRect CopyRect GetDC ReleaseDC EndDialog SetActiveWindow CreateDialogIndirectParamA DestroyWindow GetMenuCheckMarkDimensions LoadBitmapA GetMenuState ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetNextDlgTabItem GetMessageA GetActiveWindow GetKeyState CallNextHookEx ValidateRect IsWindowVisible GetCursorPos SetWindowsHookExA GetLastActivePopup UnhookWindowsHookEx GetParent SetFocus IsWindowEnabled ShowWindow SetWindowPos SetWindowLongA GetDlgCtrlID GetWindowTextLengthA GetWindowTextA SetWindowTextA GetWindowLongA IsDialogMessageA SendDlgItemMessageA GetDlgItem CharUpperA IsWindow PostQuitMessage UnregisterClassA HideCaret ShowCaret CharToOemBuffA OemToCharBuffA wsprintfA MsgWaitForMultipleObjects TranslateMessage DispatchMessageA MessageBoxA GetTopWindow RegisterWindowMessageA GetCapture EnableWindow LoadCursorA SetCursor IsIconic GetSystemMetrics GetClientRect DrawIcon PostMessageA LoadIconA SendMessageA PeekMessageA IsWindowUnicode CharNextA DefDlgProcA DrawFocusRect ExcludeUpdateRgn GetFocus

gdi32

SetMapMode SetViewportOrgEx OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowExtEx ScaleWindowExtEx IntersectClipRect DeleteObject GetDeviceCaps CreateSolidBrush PtVisible RectVisible TextOutA ExtTextOutA Escape SetBkMode GetStockObject SelectObject RestoreDC SaveDC DeleteDC GetObjectA SetBkColor SetTextColor GetClipBox PatBlt CreateDIBitmap GetTextExtentPointA BitBlt CreateCompatibleDC CreateBitmap

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegCloseKey RegCreateKeyExA RegOpenKeyExA RegSetValueExA

shell32

SHFileOperationA

comctl32

ord17