WASTE-1[.]8[.]0[.]build_319[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

WASTE-1.8.0.build_319.exe
Size

1.3MB
MD5

f723c14d81163b1e1da2eaba504b4fe6
SHA1

b103460e9135ca16b09b9ef495e8129b208777b1
SHA256

ff0aed785bc59d59832c8ed1e3a83f5802662a8ff751e717b69448e9418ba83f
SHA512

8ce062b68ed2e284afc9d529f03d69c778ea5975acf8808108240486b33071ca98a3cc146b8b35055d2706e2bee274870fe0e90f21cbde0f5daf684e7396bad9
SSDEEP

24576:Ibg6K7tFggidpCH4oO+h404HuZZZ4pqX7lsLAkSd+tDNzNrBBa:vQdpCHL2BQZSpS7lsLFtZzN1Ba

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WASTE-1.8.0.build_319.exe

Files

WASTE-1.8.0.build_319.exe
.exe windows:5 windows x86 arch:x86

727a1fd983c36718c704515357404f08

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

ws2_32

WSACleanup
gethostbyname
ntohl
gethostname
sendto
setsockopt
WSASetLastError
gethostbyaddr
getservbyport
ntohs
inet_ntoa
getservbyname
htonl
accept
listen
bind
getsockname
closesocket
shutdown
__WSAFDIsSet
select
send
connect
recv
WSAGetLastError
socket
ioctlsocket
inet_addr
htons
WSAStartup

comctl32

ord17
ImageList_ReplaceIcon
InitCommonControlsEx
ImageList_Create

winmm

PlaySoundA
mciSendCommandA
waveInStart
waveInUnprepareHeader
waveInStop
waveInPrepareHeader
mmioClose
mmioAscend
waveInClose
waveInOpen
waveInAddBuffer
mmioWrite
sndPlaySoundA

kernel32

IsValidLocale
GetConsoleCP
ReadConsoleW
GetConsoleMode
GetACP
GetUserDefaultLCID
EnumSystemLocalesW
GetFileType
FlushFileBuffers
GetStdHandle
GetModuleHandleExW
ExitProcess
GetModuleFileNameW
LoadLibraryExW
RtlUnwind
RaiseException
InitializeSListHead
GetCurrentThreadId
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
WaitForSingleObjectEx
CloseHandle
WaitForSingleObject
CreateThread
GetTickCount
MulDiv
OutputDebugStringA
GetFileAttributesA
GlobalAlloc
GlobalLock
GlobalUnlock
HeapAlloc
HeapCreate
FindClose
HeapFree
HeapDestroy
HeapReAlloc
SystemTimeToFileTime
FindFirstFileA
FindNextFileA
CreateFileA
ReadFile
SetFilePointer
TerminateThread
GetExitCodeThread
GetLastError
GetTimeZoneInformation
CreateProcessA
LoadLibraryA
CreateSemaphoreA
Sleep
GetSystemDirectoryA
GetProcAddress
FreeLibrary
MoveFileA
InterlockedCompareExchange
GetCurrentDirectoryA
GetTempPathA
CopyFileA
DeleteFileA
WritePrivateProfileStringA
CreateDirectoryA
GetTempFileNameA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetProcessHeap
GetCurrentProcessId
GetPrivateProfileStructA
WritePrivateProfileStructA
GetFileSize
WriteFile
GetFileTime
RemoveDirectoryA
SetEndOfFile
SetFileTime
ExitThread
SetEvent
GetCPInfo
GetStringTypeW
GetLocaleInfoW
LCMapStringW
CompareStringW
GetModuleHandleW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
CreateEventW
InitializeCriticalSectionAndSpinCount
SetLastError
MultiByteToWideChar
DecodePointer
EncodePointer
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
ResetEvent
TerminateProcess
SetFilePointerEx
SetStdHandle
IsValidCodePage
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetCommandLineA
GetCommandLineW
FindFirstFileExA
WriteConsoleW
CreateFileW
HeapSize
GetModuleFileNameA

user32

GetMessagePos
SetActiveWindow
DialogBoxParamA
LoadImageA
DestroyIcon
MapWindowPoints
RemoveMenu
InsertMenuItemA
IsWindowVisible
LoadIconA
GetDesktopWindow
CheckMenuItem
GetMenu
GetMenuItemInfoA
SetMenuItemInfoA
ClientToScreen
PostQuitMessage
PeekMessageA
TranslateMessage
DispatchMessageA
GetShellWindow
GetWindowInfo
GetSystemMetrics
EnumWindows
GetClassInfoA
RegisterClassA
FindWindowExA
LoadMenuA
LoadAcceleratorsA
RegisterWindowMessageA
GetMessageA
TranslateAcceleratorA
DestroyMenu
GetMessageTime
GetDlgItemInt
LockWindowUpdate
GetWindow
GetSysColorBrush
CheckDlgButton
CheckMenuRadioItem
ModifyMenuA
CreatePopupMenu
GetTopWindow
CharPrevA
CharNextA
CreateWindowExA
GetLastInputInfo
EnableMenuItem
SetTimer
SetWindowLongA
DestroyWindow
KillTimer
SendDlgItemMessageA
SetDlgItemTextA
GetDlgItemTextA
ReleaseCapture
GetCapture
LoadCursorA
SetCursor
SetCapture
SetForegroundWindow
InvalidateRect
GetClipboardData
GetWindowTextLengthA
GetWindowLongA
GetAsyncKeyState
MessageBoxA
EndDialog
EnableWindow
GetForegroundWindow
CreateDialogParamA
IsIconic
IsDlgButtonChecked
SetDlgItemInt
PostMessageA
CallWindowProcA
EmptyClipboard
OpenClipboard
CloseClipboard
TrackPopupMenu
GetCursorPos
GetSubMenu
SetFocus
GetParent
IsDialogMessageA
IsChild
GetFocus
SetWindowTextA
GetWindowTextA
GetScrollInfo
SendMessageA
ShowWindow
GetWindowPlacement
SetWindowPos
wsprintfA
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
ScreenToClient
GetDlgItem
GetWindowRect
GetClientRect
SetClipboardData

gdi32

DeleteObject
SetTextColor
SetBkMode
Rectangle
CreateFontIndirectA
CreateBrushIndirect
SelectObject

comdlg32

ChooseColorA
GetSaveFileNameA
ChooseFontA
GetOpenFileNameA

advapi32

SystemFunction036
RegQueryValueExA
RegCloseKey
RegSetValueExA
RegDeleteValueA
RegOpenKeyExA

shell32

SHGetPathFromIDListA
SHBrowseForFolderA
SHGetMalloc
DragAcceptFiles
DragFinish
DragQueryFileA
ShellExecuteA
Shell_NotifyIconA

ole32

CoInitialize

wininet

InternetGetConnectedState

Exports

Exports

?miniwget@@YAPAXPBDPAH@Z
?miniwget_getaddr@@YAPAXPBDPAHPADH@Z
UPNP_AddPortMapping
UPNP_DeletePortMapping
UPNP_GetConnectionTypeInfo
UPNP_GetExternalIPAddress
UPNP_GetGenericPortMappingEntry
UPNP_GetLinkLayerMaxBitRates
UPNP_GetPortMappingNumberOfEntries
UPNP_GetSpecificPortMappingEntry
UPNP_GetStatusInfo
UPNP_GetTotalBytesReceived
UPNP_GetTotalBytesSent
UPNP_GetTotalPacketsReceived
UPNP_GetTotalPacketsSent

Sections

.text
Size: 515KB - Virtual size: 514KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 184KB - Virtual size: 184KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 6KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 562KB - Virtual size: 561KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 29KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

727a1fd983c36718c704515357404f08

Headers

DLL Characteristics

File Characteristics

Imports

ws2_32

comctl32

winmm

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

wininet

Exports

Exports

Sections

.text Size: 515KB - Virtual size: 514KB

.rdata Size: 184KB - Virtual size: 184KB

.data Size: 6KB - Virtual size: 33KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 562KB - Virtual size: 561KB

.reloc Size: 29KB - Virtual size: 29KB

.text
Size: 515KB - Virtual size: 514KB

.rdata
Size: 184KB - Virtual size: 184KB

.data
Size: 6KB - Virtual size: 33KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 562KB - Virtual size: 561KB

.reloc
Size: 29KB - Virtual size: 29KB