2c719dc017c910fa071f192669cede782840a12158eabbc55c064a96b6c30469[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2c719dc017c910fa071f192669cede782840a12158eabbc55c064a96b6c30469.exe
Size

1.6MB
MD5

e85dbe64451313881ec07d0289698760
SHA1

64311c2e4ea557e8fc7dcba42892040e1b94985e
SHA256

2c719dc017c910fa071f192669cede782840a12158eabbc55c064a96b6c30469
SHA512

ebe1da69ac4218d1692ad635ad11eb5c3b625e2f3479c9809bdab062e50e9c6edc0db5a02b94f62f863a3941adc492dd29a23239d764fdbf6a1fa33f4befc85c
SSDEEP

24576:ozsr0XcO1FX5H7AcD6f/aM0o/XY2BGuA6ff5jXdawRRtehY7MbDmBwlL/cT0+9dQ:o177Qo2BGGfZQhN2BdT0+o

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2c719dc017c910fa071f192669cede782840a12158eabbc55c064a96b6c30469.exe

Files

2c719dc017c910fa071f192669cede782840a12158eabbc55c064a96b6c30469.exe
.exe windows:4 windows x86 arch:x86

e891477b7da675c028b40e90acf92f4f

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Work\GameStar\Source_MJ\Mj\Release\ybMJ.pdb

Imports

msimg32

TransparentBlt

kernel32

QueryPerformanceCounter
GetCurrentProcessId
GetTimeZoneInformation
FatalAppExitA
SetUnhandledExceptionFilter
LCMapStringA
LCMapStringW
SetConsoleCtrlHandler
GetOEMCP
GetCPInfo
GetTimeFormatA
GetDateFormatA
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
GetStringTypeA
GetStringTypeW
IsBadCodePtr
SetStdHandle
CreateFileA
CompareStringA
CompareStringW
SetEnvironmentVariableA
InterlockedExchange
GetACP
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetLocaleInfoA
GetThreadLocale
GetVersionExW
RaiseException
InitializeCriticalSection
DeleteCriticalSection
SizeofResource
LockResource
LoadResource
FindResourceW
MultiByteToWideChar
GetModuleFileNameA
LeaveCriticalSection
EnterCriticalSection
GlobalFree
GlobalAlloc
GetCurrentDirectoryW
IsBadWritePtr
GlobalReAlloc
GlobalUnlock
GlobalLock
lstrlenW
GetModuleFileNameW
GetModuleHandleW
GetPrivateProfileStringW
WritePrivateProfileStringW
WideCharToMultiByte
Sleep
SetEvent
ResetEvent
TerminateThread
WaitForSingleObject
GetTickCount
ResumeThread
FreeLibrary
LoadLibraryW
IsBadReadPtr
SetCurrentDirectoryW
GetCommandLineW
CloseHandle
GetLastError
CreateMutexW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
HeapSize
TerminateProcess
CreateThread
ExitThread
VirtualQuery
GetSystemInfo
VirtualAlloc
VirtualProtect
HeapReAlloc
HeapAlloc
GetSystemTimeAsFileTime
HeapFree
RtlUnwind
ExitProcess
GetStartupInfoW
GetPrivateProfileIntW
GlobalGetAtomNameW
GetDiskFreeSpaceW
GetTempFileNameW
LocalLock
LocalUnlock
SetErrorMode
GetFileTime
GetFileAttributesW
SetFileAttributesW
SetFileTime
LocalFileTimeToFileTime
FileTimeToLocalFileTime
SystemTimeToFileTime
FileTimeToSystemTime
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
TlsGetValue
GlobalHandle
LocalAlloc
InterlockedIncrement
GlobalFlags
GetCurrentThread
lstrcmpiA
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
SuspendThread
SetThreadPriority
WaitForMultipleObjects
CreateEventW
ReleaseMutex
ReleaseSemaphore
CreateSemaphoreW
lstrcmpA
GetShortPathNameW
CreateFileW
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
lstrcmpiW
GetStringTypeExW
DeleteFileW
MoveFileW
GetCurrentThreadId
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
lstrlenA
LoadLibraryA
lstrcatW
lstrcmpW
GetVersionExA
GetModuleHandleA
SetLastError
CopyFileW
MulDiv
lstrcpyW
GlobalSize
FormatMessageW
lstrcpynW
LocalFree
FreeResource
InterlockedDecrement
GetProcAddress

user32

InsertMenuItemW
CreatePopupMenu
SetRectEmpty
BringWindowToTop
SetMenu
TranslateAcceleratorW
InvalidateRgn
CopyAcceleratorTableW
GetTabbedTextExtentW
MessageBeep
IsClipboardFormatAvailable
GetDialogBaseUnits
ShowOwnedPopups
GetMessageW
ValidateRect
MsgWaitForMultipleObjects
IsRectEmpty
CharUpperW
WaitMessage
SystemParametersInfoW
DestroyMenu
GetMenuItemInfoW
InflateRect
MapVirtualKeyW
GetKeyNameTextW
SetMenuItemBitmaps
ModifyMenuW
CheckMenuItem
GetMenuCheckMarkDimensions
ScrollWindowEx
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
RegisterWindowMessageW
WinHelpW
SetWindowsHookExW
CallNextHookEx
GetClassInfoExW
GetClassLongW
SetPropW
GetPropW
RemovePropW
SendDlgItemMessageW
SendDlgItemMessageA
IsChild
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
ScrollWindow
MessageBoxW
TrackPopupMenuEx
TrackPopupMenu
SetScrollRange
LoadAcceleratorsW
SetScrollPos
GetScrollPos
ShowScrollBar
GetMenu
AdjustWindowRectEx
EqualRect
DeferWindowPos
GetScrollInfo
SetScrollInfo
RegisterClassW
SetWindowPlacement
GetDlgCtrlID
CallWindowProcW
IntersectRect
SystemParametersInfoA
SetRect
DrawIcon
AppendMenuW
SendMessageW
MessageBoxA
wsprintfA
UnregisterClassA
PostMessageW
GetSystemMenu
IsIconic
GetClientRect
InvalidateRect
IsWindowVisible
SetTimer
KillTimer
GetWindowPlacement
GetWindow
EndPaint
BeginPaint
GetWindowDC
UnhookWindowsHookEx
GetMenuState
GetMenuStringW
GetMenuItemID
InsertMenuW
GetMenuItemCount
RemoveMenu
GetDesktopWindow
CreateDialogIndirectParamW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetClassNameW
FindWindowW
RegisterClassExW
CreateWindowExW
ReuseDDElParam
UnpackDDElParam
CharNextW
SetWindowContextHelpId
GetWindowThreadProcessId
DeleteMenu
DestroyIcon
RegisterClipboardFormatW
UnionRect
DestroyWindow
SetFocus
GetCaretPos
PeekMessageW
DispatchMessageW
TranslateMessage
GetClassInfoW
DefWindowProcW
WindowFromPoint
GetCapture
ClientToScreen
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetKeyState
GetNextDlgGroupItem
PostThreadMessageW
GetDCEx
SetParent
GetScrollRange
SetActiveWindow
SetForegroundWindow
EnableWindow
LoadIconW
UnregisterClassW
GetSystemMetrics
LoadCursorW
PostQuitMessage
PtInRect
SetCapture
ReleaseCapture
GetFocus
GetAsyncKeyState
SetCursor
OffsetRect
LoadMenuW
GetWindowRect
ScreenToClient
GetCursorPos
EnableMenuItem
GetSubMenu
GetWindowLongW
SetWindowLongW
LoadBitmapW
SetWindowRgn
wsprintfW
IsWindow
ReleaseDC
GetDC
GetActiveWindow
SetWindowPos
GetParent
EnumChildWindows
MapDialogRect
CopyRect
LoadImageW
FillRect
DrawFocusRect
GetSysColor
LockWindowUpdate
UpdateWindow
GetSysColorBrush

gdi32

GetClipBox
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
LineTo
MoveToEx
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
SetArcDirection
SetColorAdjustment
SelectClipRgn
GetClipRgn
SelectClipPath
GetViewportExtEx
GetWindowExtEx
GetPixel
StartDocW
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetCurrentPositionEx
ArcTo
PolyDraw
SetStretchBltMode
PolyBezierTo
ExtSelectClipRgn
CreateDIBPatternBrushPt
CreatePatternBrush
PlayMetaFileRecord
GetObjectType
EnumMetaFile
PlayMetaFile
ExtCreatePen
CreateHatchBrush
GetDCOrgEx
CreateRectRgnIndirect
PatBlt
CreateFontIndirectW
SetRectRgn
GetMapMode
DPtoLP
CreateEllipticRgn
LPtoDP
SetMapMode
GetTextMetricsW
GetCharWidthW
GetRgnBox
GetBkColor
GetTextColor
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
SetROP2
SetPolyFillMode
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateDCW
CopyMetaFileW
GetDeviceCaps
GetBitmapDimensionEx
GetStockObject
SetGraphicsMode
StretchBlt
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateRectRgn
GetTextExtentPoint32W
Rectangle
CreateBitmap
CreateSolidBrush
CreatePen
GetObjectW
ExtCreateRegion
CombineRgn
DeleteDC
SelectPalette
StretchDIBits
FloodFill
CreateDIBSection
CreateDIBitmap
RealizePalette
DeleteObject
CreateCompatibleDC
SelectObject
BitBlt
CreateFontW
Ellipse
SetTextColor
CreateCompatibleBitmap
PolylineTo
CreatePalette

comdlg32

ChooseColorW
GetFileTitleW
GetOpenFileNameW
ReplaceTextW
FindTextW
PageSetupDlgW
PrintDlgW
CommDlgExtendedError
GetSaveFileNameW

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW
GetJobW

advapi32

RegOpenKeyExA
RegOpenKeyExW
RegQueryValueExA
RegQueryValueExW
RegSetValueExW
StartServiceW
CloseServiceHandle
ControlService
QueryServiceStatus
OpenServiceW
OpenSCManagerW
RegSetValueW
RegOpenKeyW
IsTextUnicode
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
SetFileSecurityW
GetFileSecurityW
RegCreateKeyW
RegDeleteValueW
RegCreateKeyExW
RegCloseKey

shell32

DragQueryFileW
SHGetSpecialFolderPathW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetFileInfoW
ExtractIconW
ShellExecuteW
DragFinish

comctl32

ImageList_Draw
ImageList_GetImageInfo
FlatSB_ShowScrollBar
FlatSB_EnableScrollBar
InitializeFlatSB
ord17
ord13
ImageList_Read
ImageList_Write
ord14
ImageList_Destroy
ImageList_Create
ImageList_LoadImageW
ImageList_Merge
ImageList_AddMasked

shlwapi

PathIsUNCW
PathFindExtensionW
PathRemoveExtensionW
PathStripToRootW
PathFindFileNameW

oledlg

OleUIBusyW

ole32

WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
ReadClassStg
CreateBindCtx
CoTaskMemAlloc
SetConvertStg
StringFromCLSID
CoTreatAsClass
CreateStreamOnHGlobal
CoDisconnectObject
CoTaskMemFree
StringFromGUID2
CoGetClassObject
StgOpenStorageOnILockBytes
CLSIDFromProgID
OleRun
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRegisterClassObject
CoRevokeClassObject
OleSetClipboard
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleSetContainedObject
ReleaseStgMedium
OleDuplicateData
OleCreateStaticFromData
CoCreateInstance
CLSIDFromString

oleaut32

SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysStringLen
SysAllocStringByteLen
SysStringByteLen
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
CreateErrorInfo
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayCreate
SafeArrayRedim
VariantCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayCopy
SafeArrayGetElement
SysFreeString
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VariantTimeToSystemTime
SystemTimeToVariantTime
VarDateFromStr
SysReAllocStringLen
VarBstrFromDec
VarDecFromStr
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
SafeArrayCreateVector
OleCreateFontIndirect
LoadTypeLi
GetErrorInfo
SetErrorInfo
SafeArrayPtrOfIndex
SysAllocString

ws2_32

ntohs
WSAStartup
closesocket
htonl
inet_addr
accept
socket
select
bind
getsockname
getpeername
htons
WSAGetLastError
listen
WSACleanup
inet_ntoa
gethostbyname
gethostname
recv
send
WSAAsyncSelect
recvfrom
sendto
connect
WSASetLastError

imm32

ImmGetContext
ImmGetCompositionStringW

ddraw

DirectDrawCreate

winmm

mmioOpenW
mmioRead
mmioAscend
mciSendStringW
mmioGetInfo
mmioAdvance
mmioSetInfo
mmioSeek
mmioDescend
mmioClose
waveOutSetVolume
waveOutGetVolume
mciSendCommandW
mciGetErrorStringW
timeGetDevCaps
timeSetEvent
timeKillEvent
PlaySoundW
timeGetTime

dsound

ord1

Exports

Exports

PassFunctionPoint

Sections

.text
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 256KB - Virtual size: 254KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 60KB - Virtual size: 59KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e891477b7da675c028b40e90acf92f4f

Headers

File Characteristics

PDB Paths

Imports

msimg32

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

ws2_32

imm32

ddraw

winmm

dsound

Exports

Exports

Sections

.text Size: 1.2MB - Virtual size: 1.2MB

.rdata Size: 256KB - Virtual size: 254KB

.data Size: 52KB - Virtual size: 2.1MB

.rsrc Size: 60KB - Virtual size: 59KB

.text
Size: 1.2MB - Virtual size: 1.2MB

.rdata
Size: 256KB - Virtual size: 254KB

.data
Size: 52KB - Virtual size: 2.1MB

.rsrc
Size: 60KB - Virtual size: 59KB