5bbf5476f3fe44cdb88178e45fb1c5c05121e72a5c2c5e98939dc3a72f5dbe2d

Sharing

Copy URL Twitter E-mail

General

Target

5bbf5476f3fe44cdb88178e45fb1c5c05121e72a5c2c5e98939dc3a72f5dbe2d
Size

860KB
MD5

d64f4e4f8765145ecdf7045635cbbeb0
SHA1

d4e275539b4b237e44361457a9089ff6ac373140
SHA256

5bbf5476f3fe44cdb88178e45fb1c5c05121e72a5c2c5e98939dc3a72f5dbe2d
SHA512

e097920677a20cf8cf142be47f6763e944f11117a784cd62406fdfd6de932ff4d23a89df5ab2b45ae6cce5786c35e6532f2c1c77759b063face7fd1855361907
SSDEEP

12288:HHtpvjM8ILxo83f+lCIB2kqNCRz/U2aQrjg7W5cKTv89uIFr6UZtP7mTW5M5nD:ntpv48ou6kB2kjZs2aQXgi2vuZL6M

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/??????????????.exe

Files

5bbf5476f3fe44cdb88178e45fb1c5c05121e72a5c2c5e98939dc3a72f5dbe2d
.zip
????.png
.png
??????????????.exe
.exe windows:5 windows x86 arch:x86

40850a3e20ba8f5a71757e76afcfa474

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ord17
_TrackMouseEvent

kernel32

WaitForMultipleObjects
lstrcmpA
lstrlenA
lstrcmpiA
GetVersionExA
GetCurrentDirectoryW
GetFullPathNameW
PeekNamedPipe
GetFileInformationByHandle
GetTimeZoneInformation
SetEndOfFile
GetStringTypeW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
OutputDebugStringW
FlushFileBuffers
RaiseException
GetDriveTypeW
FindNextFileW
FindFirstFileExW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCurrentProcessId
QueryPerformanceCounter
WriteConsoleW
SetFilePointerEx
DeleteFileW
SetStdHandle
CreateFileW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
GetModuleFileNameW
GetModuleHandleW
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
TerminateProcess
GetCurrentProcess
InitializeCriticalSectionAndSpinCount
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SetLastError
RtlUnwind
GetStartupInfoW
GetFileType
GetStdHandle
GetProcessHeap
LoadLibraryExW
ExitThread
GetCurrentThreadId
CreateThread
HeapReAlloc
HeapSize
HeapAlloc
FindClose
SystemTimeToTzSpecificLocalTime
GetCommandLineA
GetSystemTimeAsFileTime
GetConsoleCP
WriteFile
ReadConsoleW
GetConsoleMode
ReadFile
WideCharToMultiByte
AreFileApisANSI
GetModuleHandleExW
ExitProcess
DecodePointer
EncodePointer
IsProcessorFeaturePresent
IsDebuggerPresent
GetLocalTime
HeapFree
SetErrorMode
GetSystemDefaultLCID
GetDriveTypeA
Sleep
CreateDirectoryA
GetModuleFileNameA
SetCurrentDirectoryA
GetCurrentDirectoryA
CreateFileA
SetFileTime
FileTimeToSystemTime
GlobalMemoryStatus
SetThreadPriority
LoadLibraryA
GetProcAddress
FreeLibrary
MultiByteToWideChar
GlobalUnlock
GlobalAlloc
GlobalLock
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetFullPathNameA
GetExitCodeProcess
DeleteFileA
WinExec
CreateMutexA
CopyFileA
GetLastError
CreateProcessA
CompareFileTime
FileTimeToLocalFileTime
CloseHandle
OutputDebugStringA
GetFileTime
SetEnvironmentVariableA

user32

MonitorFromWindow
GetMonitorInfoA
IsZoomed
IsIconic
GetClassNameA
GetDesktopWindow
ValidateRect
IsWindowVisible
GetWindow
SetDlgItemTextA
DialogBoxParamA
GetDlgItemTextA
LoadImageA
SetWindowTextA
SystemParametersInfoA
DestroyCursor
EndDialog
GetWindowLongA
SetWindowPlacement
GetWindowPlacement
ChangeDisplaySettingsA
CloseClipboard
GetClipboardData
EmptyClipboard
OpenClipboard
SetClipboardData
FillRect
WINNLSEnableIME
TranslateMessage
PeekMessageA
DispatchMessageA
CreateDialogParamA
GetDC
ReleaseDC
CheckDlgButton
ClipCursor
SendDlgItemMessageA
LoadStringA
DeleteMenu
LoadIconA
EnumDisplaySettingsA
EnumWindows
GetMenu
SetWindowLongA
EnableMenuItem
ChangeClipboardChain
DefWindowProcA
GetSysColor
SetWindowPos
ShowWindow
SetMenu
IsDlgButtonChecked
DrawMenuBar
GetActiveWindow
GetSystemMetrics
UpdateWindow
CallWindowProcA
AdjustWindowRect
LoadCursorA
SetClipboardViewer
CheckMenuItem
RegisterClassA
EndPaint
DestroyWindow
SetTimer
KillTimer
GetClientRect
BeginPaint
InvalidateRect
CreateWindowExA
GetDlgItem
PostMessageA
EnableWindow
ClientToScreen
SetCapture
GetAsyncKeyState
SetCursorPos
ReleaseCapture
GetWindowRect
MoveWindow
ScreenToClient
GetKeyState
GetCursorPos
SendMessageA
GetWindowTextA
keybd_event
SetCursor
SetActiveWindow
PostQuitMessage
SetForegroundWindow
SetFocus
GetForegroundWindow
MessageBoxA

gdi32

CreateDIBSection
GetDeviceCaps
GetStockObject
EnumFontFamiliesA
SetBkColor
GetObjectA
StretchDIBits
AddFontResourceA
GetTextExtentPoint32A
SetTextColor
DeleteDC
CreateFontIndirectA
SetDIBColorTable
GdiFlush
SetBkMode
DeleteObject
SelectObject
CreateCompatibleDC
GetTextMetricsA
SetTextAlign
TextOutA

comdlg32

GetOpenFileNameA
CommDlgExtendedError
GetSaveFileNameA

advapi32

RegCreateKeyExA
RegQueryValueExA
RegDeleteKeyA
RegCloseKey
RegFlushKey
RegQueryInfoKeyA
RegOpenKeyExA
RegEnumKeyExA
RegSetValueExA

shell32

ShellExecuteExA
DragFinish
DragQueryFileA
SHGetPathFromIDListA
SHGetMalloc
SHGetSpecialFolderLocation
DragAcceptFiles
ShellExecuteA

ole32

CoInitialize
CoUninitialize
CoCreateInstance

winmm

timeGetTime
joyGetPos
timeBeginPeriod

d3d9

Direct3DCreate9

msvfw32

MCIWndCreateA

Sections

.text
Size: 747KB - Virtual size: 747KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 124KB - Virtual size: 124KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 743KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 57KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 47KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
savedata/majiro_system.mss

Sharing

General

Malware Config

Signatures

Files

40850a3e20ba8f5a71757e76afcfa474

Headers

DLL Characteristics

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

winmm

d3d9

msvfw32

Sections

.text Size: 747KB - Virtual size: 747KB

.rdata Size: 124KB - Virtual size: 124KB

.data Size: 76KB - Virtual size: 743KB

.rsrc Size: 57KB - Virtual size: 56KB

.reloc Size: 47KB - Virtual size: 47KB

.text
Size: 747KB - Virtual size: 747KB

.rdata
Size: 124KB - Virtual size: 124KB

.data
Size: 76KB - Virtual size: 743KB

.rsrc
Size: 57KB - Virtual size: 56KB

.reloc
Size: 47KB - Virtual size: 47KB