quicktime302[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

quicktime302.exe
Size

6.9MB
MD5

05823665fa1d89f5a0a725f614df0fe1
SHA1

139a3fe735e4a3fa6f37f4452d43f73c8ca0ef31
SHA256

35208c93ad3ef7ca33b33dc2dae03522d55248d551e30d59df1b49d4f578834f
SHA512

dae228525a9e0cf0962c0bea88dfecfa99fefdfa24b2c69280c47dd0df08b1384d4b573a390f4eea24afce352c787722d1fdf81840ebd72ad8d29690ac98b556
SSDEEP

196608:q8XWftVdzrwqGA/75WBjAiUZ+ofdururO/:qiWfNzrwaWF3Z8duruM

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
quicktime302.exe

Files

quicktime302.exe
.exe windows:4 windows x86 arch:x86

3f06324e653dcfc6716db93828d59209

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrcmpiA
LocalFileTimeToFileTime
DosDateTimeToFileTime
CreateFileA
FreeResource
lstrcmpA
SetFileTime
LoadResource
FindResourceA
GetDiskFreeSpaceA
GetDriveTypeA
GetWindowsDirectoryA
CloseHandle
CreateProcessA
WaitForSingleObject
lstrcpynA
GetLastError
IsDBCSLeadByte
lstrlenA
lstrcatA
GetTickCount
GlobalUnlock
LockResource
lstrcpyA
GetFileType
GetFullPathNameA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
LoadLibraryA
GetProcAddress
CompareStringW
CompareStringA
FlushFileBuffers
VirtualAlloc
GetStringTypeW
GetStringTypeA
HeapSize
HeapReAlloc
VirtualFree
HeapCreate
HeapDestroy
GetOEMCP
GetACP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
RtlUnwind
GetModuleFileNameA
SetEndOfFile
SetFilePointer
GetStdHandle
SetHandleCount
ReadFile
GetTimeZoneInformation
GetFileAttributesA
SetFileAttributesA
ExitProcess
TerminateProcess
GetCurrentProcess
DeleteFileA
CreateDirectoryA
RemoveDirectoryA
GetCurrentDirectoryA
SetCurrentDirectoryA
SetEnvironmentVariableA
WriteFile
MoveFileA
GetModuleHandleA
GetStartupInfoA
GetCommandLineA
GetVersion
SetStdHandle
HeapAlloc
HeapFree
MultiByteToWideChar
LCMapStringA
WideCharToMultiByte
LCMapStringW

user32

MessageBoxA
GetSysColor
UpdateWindow
InvalidateRect
SetWindowTextA
PeekMessageA
DispatchMessageA
TranslateMessage
DestroyWindow
LoadStringA
ShowWindow
GetDlgItem
DialogBoxParamA
SendDlgItemMessageA
EndDialog
FindWindowA
CharNextA
CharPrevA
GetWindowRect
GetSystemMetrics
MoveWindow
PostQuitMessage
SetCursor
DefWindowProcA
GetClientRect
CopyRect
GetWindowTextA
FillRect
SendMessageA
wsprintfA
LoadIconA
LoadCursorA
RegisterClassA
CreateDialogParamA

gdi32

SetTextColor
DeleteObject
CreateSolidBrush
CreatePen
SelectObject
LineTo
MoveToEx
SetBkColor
GetTextExtentPoint32A
ExtTextOutA
SaveDC
RestoreDC

Sections

.text
Size: 73KB - Virtual size: 73KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3f06324e653dcfc6716db93828d59209

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 73KB - Virtual size: 73KB

.rdata Size: 1KB - Virtual size: 1KB

.data Size: 9KB - Virtual size: 20KB

.idata Size: 3KB - Virtual size: 3KB

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 73KB - Virtual size: 73KB

.rdata
Size: 1KB - Virtual size: 1KB

.data
Size: 9KB - Virtual size: 20KB

.idata
Size: 3KB - Virtual size: 3KB

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 4KB - Virtual size: 3KB