mxbikes[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

mxbikes.exe
Size

3.8MB
MD5

a1d24771817cfd9822ec738c8e05b2a0
SHA1

21dfbe1c2682f62714e0263fabe320647bb15efc
SHA256

a29ff6d687387053bbdba2c292d4246921dbce6c3a8e2e73b965e93d63f96cbe
SHA512

d03e41203fea3b49ce846521136c351418e117edcbaf6175da7db242093cbefabe84653a2707945d4aa412ea6932cab1c9d75439b1109f81d0a08b2e00e8f35a
SSDEEP

49152:imzhoVpEh9NMtsCJ3crAV/7Qh0XrBfDBshxRlVI/1o1D8eKtWjPRF1HToSeS8hTC:RoVAwLmrU7dX5BsPsoDQtqZ4S8hT0H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mxbikes.exe

Files

mxbikes.exe
.exe windows:5 windows x64 arch:x64

30c2d579ae2bacabe847040eb3276074

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

winmm

timeEndPeriod
timeBeginPeriod
timeGetTime

user32

CloseClipboard
OpenClipboard
DispatchMessageA
SetWindowLongPtrA
ShowWindow
SetWindowPos
GetDesktopWindow
DefWindowProcA
EmptyClipboard
EnumDisplaySettingsA
GetMonitorInfoA
ChangeDisplaySettingsExA
SetWindowTextA
MessageBoxA
EnumDisplayMonitors
ChangeDisplaySettingsA
GetClipboardData
MapVirtualKeyA
CallWindowProcA
AdjustWindowRect
LoadCursorA
DestroyWindow
RegisterClassExA
ReleaseDC
PeekMessageA
LoadImageA
UpdateWindow
FillRect
SetClipboardData
CreateWindowExA
GetWindowLongA
UnregisterClassA
ShowCursor
TranslateMessage
GetDC
SendMessageA
GetClientRect
LoadIconA
PostQuitMessage
GetWindowLongPtrA

steam_api64

SteamAPI_Init
SteamAPI_RunCallbacks
SteamAPI_RestartAppIfNecessary
SteamAPI_Shutdown
SteamAPI_GetHSteamUser
SteamInternal_CreateInterface
SteamAPI_GetHSteamPipe
SteamAPI_UnregisterCallResult
SteamInternal_ContextInit
SteamAPI_RegisterCallResult

kernel32

RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
GetModuleFileNameA
GetStdHandle
SetCurrentDirectoryA
GlobalUnlock
FreeConsole
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
GetFileTime
TerminateProcess
GetStartupInfoA
GlobalSize
CreateFileA
CloseHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
FreeLibrary
GetProcAddress
LoadLibraryA
Sleep
AllocConsole
GlobalLock
GlobalAlloc

gdi32

GetStockObject
SelectObject
CreateCompatibleDC
CreateDIBSection
BitBlt
SetPixelFormat
DescribePixelFormat
ChoosePixelFormat
SwapBuffers
CreateSolidBrush
DeleteObject
SetTextColor
GetDeviceCaps
SetBkColor

shell32

SHGetSpecialFolderLocation
Shell_NotifyIconA
SHGetPathFromIDListA

ole32

CoTaskMemFree

msvcr90

sqrtf
??2@YAPEAX_K@Z
_HUGE
__CxxFrameHandler3
floorf
atan2f
_nextafterf
sprintf
vsprintf
abort
free
malloc
strchr
strncpy
strrchr
sscanf
strstr
tolower
atol
strncat
fopen
fprintf
fwrite
fclose
fread
__iob_func
printf
ftell
rename
memmove
_findnext64i32
ceilf
_findfirst64i32
_time64
_purecall
fseek
fflush
atoi
_mkdir
setvbuf
_open_osfhandle
_localtime64
_fdopen
calloc
realloc
ldexp
qsort
exit
memchr
memset
memcpy
_create_locale
_atof_l
_free_locale
atof
_mktime64
asin
atan2
sin
cos
isspace
strlen
strcpy
strcat
strcmp
abs
pow
log
ceil
fmod
sqrt
atan
tan
acos
exp
rand
srand
floor
ferror
getenv
tmpfile
fputs
_sprintf_l
memcmp
fscanf
feof
fgets
_stricmp
_strupr
_strnicmp
_rmdir
_access
??3@YAXPEAX@Z
_amsg_exit
__getmainargs
__C_specific_handler
_XcptFilter
_exit
_ismbblead
_cexit
_acmdln
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
powf
_fmode
_encode_pointer
__set_app_type
__crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QEAAXXZ
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
sinf
cosf
vfprintf
_vsnprintf
_findclose
_snprintf
remove
_commode

opengl32

glGetError
glDisable
glEnable
glBindTexture
glBlendFunc
glAlphaFunc
glDepthMask
glFogfv
glDisableClientState
glTexGeni
glTexCoordPointer
glEnableClientState
glColorPointer
glNormalPointer
glVertexPointer
glGetFloatv
glGetIntegerv
wglGetProcAddress
glGetString
glViewport
glTexEnvi
glClearColor
glCullFace
glFrontFace
glDepthFunc
glReadPixels
glFlush
glReadBuffer
glClear
glVertex3f
glColor3fv
glTexImage2D
glTexParameterf
glTexParameteri
glGenTextures
glPixelStorei
glTexSubImage2D
glDeleteTextures
glDrawElements
glColor3f
glTexGenfv
glColor4f
glPolygonMode
glMaterialfv
glScissor
glMultMatrixf
glOrtho
glNormal3f
glColorMaterial
glFrustum
glMaterialf
glLightfv
glLightModelfv
glFogf
glFogi
wglMakeCurrent
wglGetCurrentContext
wglShareLists
wglCreateContext
wglGetCurrentDC
wglDeleteContext
glCopyTexSubImage2D
glLoadMatrixf
glMatrixMode
glEnd
glVertex3fv
glTexCoord2fv
glColor4ubv
glBegin
glLoadIdentity

dinput8

DirectInput8Create

ws2_32

ntohl
ioctlsocket
setsockopt
htons
closesocket
recvfrom
sendto
freeaddrinfo
getaddrinfo
getnameinfo
inet_pton
ntohs
bind
WSACleanup
inet_ntop
WSAStartup
htonl
socket

advapi32

RegOpenKeyExA
RegCloseKey
RegQueryValueExA

Sections

.text
Size: 3.0MB - Virtual size: 3.0MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 353KB - Virtual size: 353KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 105KB - Virtual size: 13.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 99KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 944B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.bind
Size: 201KB - Virtual size: 201KB

IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

30c2d579ae2bacabe847040eb3276074

Headers

DLL Characteristics

File Characteristics

Imports

winmm

user32

steam_api64

kernel32

gdi32

shell32

ole32

msvcr90

opengl32

dinput8

ws2_32

advapi32

Sections

.text Size: 3.0MB - Virtual size: 3.0MB

.rdata Size: 353KB - Virtual size: 353KB

.data Size: 105KB - Virtual size: 13.1MB

.pdata Size: 99KB - Virtual size: 99KB

.rsrc Size: 1024B - Virtual size: 944B

.reloc Size: 16KB - Virtual size: 15KB

.bind Size: 201KB - Virtual size: 201KB

.text
Size: 3.0MB - Virtual size: 3.0MB

.rdata
Size: 353KB - Virtual size: 353KB

.data
Size: 105KB - Virtual size: 13.1MB

.pdata
Size: 99KB - Virtual size: 99KB

.rsrc
Size: 1024B - Virtual size: 944B

.reloc
Size: 16KB - Virtual size: 15KB

.bind
Size: 201KB - Virtual size: 201KB