1836002f736330a915baa9e2431d01a78bab410fe0413fbab0cdc2468ca3fd5a[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

1836002f736330a915baa9e2431d01a78bab410fe0413fbab0cdc2468ca3fd5a.exe
Size

162KB
MD5

5212ba2cb5b565af57a431abb0e1f480
SHA1

c9a4523bdbd8c08573b1d99ca9356ff3da32b9e4
SHA256

1836002f736330a915baa9e2431d01a78bab410fe0413fbab0cdc2468ca3fd5a
SHA512

5e1fc67855863eb207db9acbb94f6e223dadd00284609d2d06fd7c62ef9e3d1a0c9465196d7e9366b79109ca8da30220c5ff0a1e49cf4b425936afc8e40c0853
SSDEEP

3072:1radkiF+EIAVaFtYgnc6TNroaIx1cHT3foG3+cUDwtT2:df6ZIY4rckN8aUcjfoey

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1836002f736330a915baa9e2431d01a78bab410fe0413fbab0cdc2468ca3fd5a.exe

Files

1836002f736330a915baa9e2431d01a78bab410fe0413fbab0cdc2468ca3fd5a.exe
.dll windows:6 windows x64 arch:x64

3b0ff3110a1e75b7d7bcb3e8f50acd49

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

SetMenu
WaitForInputIdle
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
MessageBoxA
ChangeDisplaySettingsExA
GetSystemMetrics
LoadImageA
DestroyIcon
GetCursorPos
InsertMenuItemA
TrackPopupMenu
InsertMenuA
DestroyMenu
CreatePopupMenu
CreateMenu
GetAsyncKeyState

kernel32

SetStdHandle
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
FreeLibrary
GetModuleHandleA
GetProcAddress
GetTempPathA
GetFileSizeEx
GlobalUnlock
GlobalLock
CreateFileA
GetFileSize
CloseHandle
GetLastError
WaitForSingleObject
CreateProcessA
MapViewOfFile
UnmapViewOfFile
GetShortPathNameA
CreateFileMappingA
BeginUpdateResourceA
UpdateResourceA
EndUpdateResourceA
MultiByteToWideChar
SetFilePointerEx
HeapSize
GetStringTypeW
CreateFileW
WriteConsoleW
GlobalAlloc
GetStartupInfoW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
GetACP
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetModuleHandleW
RtlUnwindEx
InterlockedFlushSList
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
RaiseException
GetCurrentProcess
ExitProcess
TerminateProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
LCMapStringW
GetStdHandle
GetFileType
HeapReAlloc
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage

comdlg32

GetOpenFileNameA
GetSaveFileNameA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegSetValueExA

shell32

SHBrowseForFolderA
SHGetPathFromIDListA
Shell_NotifyIconA
ShellExecuteA

Exports

Exports

__neko_entry_point
browser_launch__1
clipboard_clear__0
clipboard_get_text__0
clipboard_set_text__1
dialogs_dialog_box__3
dialogs_folder__2
dialogs_message_box__3
dialogs_open_file__4
dialogs_save_file__4
display_get_screen_size__0
display_is_mode_supported__3
display_set_default_mode__0
display_set_mode__3
fileutils_get_temp_folder__0
hx_set_loader
misc_get_key_state__1
neko_init__5
registry_delete_key__2
registry_get_value__3
registry_set_value__4
systools_init__0
systray_create_icon__3
systray_destroy_icon__1
systray_menu_callback__0
win_add_menu_divider__2
win_add_menu_item__3
win_add_menu_submenu__4
win_create_process__5
win_destroy_menu__1
win_destroy_tray_icon__1
win_menu_create__0
win_popup_menu_create__0
win_replace_exe_icon__3
win_show_menu__2
win_show_popup_menu__2

Sections

.text
Size: 97KB - Virtual size: 97KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 50KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 7KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 244B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3b0ff3110a1e75b7d7bcb3e8f50acd49

Headers

DLL Characteristics

File Characteristics

Imports

user32

kernel32

comdlg32

advapi32

shell32

Exports

Exports

Sections

.text Size: 97KB - Virtual size: 97KB

.rdata Size: 50KB - Virtual size: 49KB

.data Size: 3KB - Virtual size: 8KB

.pdata Size: 7KB - Virtual size: 7KB

_RDATA Size: 512B - Virtual size: 244B

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 97KB - Virtual size: 97KB

.rdata
Size: 50KB - Virtual size: 49KB

.data
Size: 3KB - Virtual size: 8KB

.pdata
Size: 7KB - Virtual size: 7KB

_RDATA
Size: 512B - Virtual size: 244B

.reloc
Size: 2KB - Virtual size: 1KB