279bc17174955a557d50c5c2f2ea5850N[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

279bc17174955a557d50c5c2f2ea5850N.exe
Size

1.2MB
MD5

279bc17174955a557d50c5c2f2ea5850
SHA1

4ed5d6dbc1cb880b00128da089e15e7566414a91
SHA256

185223212db607350412531af7bfdb0b608d199bca087547ed8b2fd7827079b6
SHA512

5a545e9bfc7e51fa32583b319354bf1e3c65d047fb7daa73c747fbe38f741c749143e8a1d9800bf56397b3d28719a7bae076077fbef324a792df7c322495068a
SSDEEP

12288:a3O9a5GXIWzKFksQYxQnQ8heFgCuKaCa4forvYaeUgj5Bwi:a+9a5GYWz1FheAKaCAYa4k

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
279bc17174955a557d50c5c2f2ea5850N.exe

Files

279bc17174955a557d50c5c2f2ea5850N.exe
.exe windows:4 windows x86 arch:x86

972c83a8c3e0be864706c9cfcb591195

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

setupapi

SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceInstanceIdA
SetupDiGetDeviceRegistryPropertyA
SetupDiOpenDevRegKey
SetupDiDestroyDeviceInfoList

dm

?ChangeMode@CDMCmd@@QAE?AW4DMSS_RET_E_TYPE@@W4MODE_CHANGE_E_TYPE@@@Z
?CheckSPC@CDMCmd@@QAE?AW4DMSS_RET_E_TYPE@@USPC_S_TYPE@@@Z
?WriteNV@CDMCmd@@QAE?AW4DMSS_RET_E_TYPE@@UNV_S_TYPE@@@Z
?Attach@CDMCmd@@QAEHPAX@Z
?Detach@CDMCmd@@QAEHXZ
?ResetPhone@CDMCmd@@QAE?AW4DMSS_RET_E_TYPE@@XZ
?SwitchToDownloader@CDMCmd@@QAE?AW4DMSS_RET_E_TYPE@@XZ
?ReadVersion@CDMCmd@@QAE?AW4DMSS_RET_E_TYPE@@AAUVERSION_NUMBER_S_TYPE@@@Z
?ReadBuildID@CDMCmd@@QAE?AW4DMSS_RET_E_TYPE@@AAUBUILD_ID_S_TYPE@@@Z
?SetEventReport@CDMCmd@@QAE?AW4DMSS_RET_E_TYPE@@H@Z
?SetLogMaskEx@CDMCmd@@QAE?AW4DMSS_RET_E_TYPE@@PAEK@Z
?SetMessageLvl@CDMCmd@@QAE?AW4DMSS_RET_E_TYPE@@G@Z
?SetLogMask@CDMCmd@@QAE?AW4DMSS_RET_E_TYPE@@K@Z
?QueryFeature@CDMCmd@@QAE?AW4DMSS_RET_E_TYPE@@PAG@Z
?PhoneState@CDMCmd@@QAE?AW4DMSS_RET_E_TYPE@@AAUPHONESTATE_S_TYPE@@@Z
?ReadNV@CDMCmd@@QAE?AW4DMSS_RET_E_TYPE@@AAUNV_S_TYPE@@@Z
?ReadStatus@CDMCmd@@QAE?AW4DMSS_RET_E_TYPE@@AAUSTATUS_S_TYPE@@@Z
?ReadESN@CDMCmd@@QAE?AW4DMSS_RET_E_TYPE@@AAK@Z
??1CDMCmd@@UAE@XZ
??0CDMCmd@@QAE@AAPAX@Z
?ResetPhone9006@CDMCmd@@QAE?AW4DMSS_RET_E_TYPE@@XZ

dl

?DLGetBBinfo@CDLCmd@@QAE?AW4DL_RET_E_TYPE@@AAUBBINFO_S_TYPE@@@Z
?Attach@CDLCmd@@QAEHPAX@Z
?Detach@CDLCmd@@QAEHXZ
?DLNop@CDLCmd@@QAE?AW4DL_RET_E_TYPE@@XZ
?DLReset@CDLCmd@@QAE?AW4DL_RET_E_TYPE@@XZ
??1CDLCmd@@UAE@XZ
??0CDLCmd@@QAE@AAPAX@Z
?DLVerifyVersion@CDLCmd@@QAE?AW4DL_RET_E_TYPE@@G@Z

kernel32

GetProcessVersion
GetOEMCP
SetErrorMode
SizeofResource
GetTickCount
HeapFree
HeapAlloc
RtlUnwind
ExitProcess
RaiseException
GetCommandLineA
ExitThread
SetStdHandle
GetFileType
GetTimeZoneInformation
GetSystemTime
HeapSize
HeapReAlloc
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
LCMapStringA
LCMapStringW
SetHandleCount
GetStdHandle
TlsGetValue
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
IsValidLocale
IsValidCodePage
GetLocaleInfoA
EnumSystemLocalesA
GetUserDefaultLCID
GetLocaleInfoW
CompareStringA
CompareStringW
SetEnvironmentVariableA
LocalReAlloc
GetProfileStringA
InterlockedExchange
GetVersionExA
GetVersion
lstrlenA
lstrlenW
GetCPInfo
LockResource
LoadResource
FindResourceA
FreeResource
lstrcmpiA
CloseHandle
WriteFile
CreateFileA
WaitForSingleObject
CreateSemaphoreA
GetModuleFileNameA
FreeLibrary
GetProcAddress
LoadLibraryA
ResetEvent
SetEvent
Sleep
Beep
FindClose
GetLastError
FindNextFileA
lstrcatA
lstrcpyA
FindFirstFileA
CreateEventA
ReadFile
CreateProcessA
GetStartupInfoA
CreatePipe
GetCurrentDirectoryA
TerminateProcess
OpenProcess
CreateDirectoryA
TlsSetValue
GlobalReAlloc
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GlobalFlags
FileTimeToLocalFileTime
FileTimeToSystemTime
GetTempFileNameA
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSize
GetFileAttributesA
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
GetCurrentProcess
DuplicateHandle
GlobalFree
GlobalAlloc
GetCurrentThread
lstrcmpA
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
SuspendThread
GetCurrentThreadId
ResumeThread
lstrcpynA
FormatMessageA
LocalFree
GlobalLock
GlobalUnlock
MulDiv
GetModuleHandleA
SetLastError
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
GetACP
WideCharToMultiByte
IsDBCSLeadByteEx
SetThreadPriority
CreateThread
GetOverlappedResult
DeleteFileA
GetLocalTime
GetLongPathNameA
GetPrivateProfileSectionNamesA
WritePrivateProfileStringA
GetPrivateProfileIntA
GetPrivateProfileStringA
GetDiskFreeSpaceA
GetVolumeInformationA
GetSystemDirectoryA
GetLogicalDriveStringsA
GetDriveTypeA
CreateToolhelp32Snapshot
Process32First
Process32Next
GetCommTimeouts
SetCommTimeouts
GetCommState
SetCommState
SetupComm
PurgeComm
DeviceIoControl
CopyFileA
SetUnhandledExceptionFilter

user32

LockWindowUpdate
GetDCEx
LoadCursorA
GetClassNameA
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
LoadMenuA
ReleaseCapture
TranslateAcceleratorA
LoadAcceleratorsA
FindWindowA
EndDialog
CreateDialogIndirectParamA
CharUpperA
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
LoadStringA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
EnableMenuItem
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
LoadIconA
SendDlgItemMessageA
MapWindowPoints
SetActiveWindow
AdjustWindowRectEx
EqualRect
BeginDeferWindowPos
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
MessageBoxA
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
PostThreadMessageA
GetDlgItem
GetWindowTextLengthA
GetWindowTextA
DestroyWindow
CreateWindowExA
GetClassLongA
SetPropA
GetPropA
CallWindowProcA
RemovePropA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetForegroundWindow
GetWindow
SetWindowPos
IsIconic
GetWindowPlacement
DeferWindowPos
DefWindowProcA
GetDlgCtrlID
GetCapture
IsChild
SetTimer
SetWindowLongA
SetRectEmpty
GetMessageA
TranslateMessage
DispatchMessageA
GetKeyState
CallNextHookEx
ValidateRect
IsWindowVisible
GetMenuItemInfoA
UnregisterClassA
HideCaret
ShowCaret
ExcludeUpdateRgn
DefDlgProcA
IsWindowUnicode
GetSysColor
PeekMessageA
GetCursorPos
SetWindowsHookExA
IntersectRect
EndPaint
BeginPaint
GetWindowDC
ScreenToClient
DestroyMenu
PostQuitMessage
KillTimer
SetMenu
PtInRect
IsRectEmpty
GetFocus
RegisterClipboardFormatA
SetParent
MessageBeep
GetNextDlgGroupItem
CopyAcceleratorTableA
CharNextA
TrackPopupMenu
SetCapture
IsWindowEnabled
IsWindow
SetFocus
RegisterWindowMessageA
UpdateWindow
GetWindowLongA
WindowFromPoint
GetParent
GetNextDlgTabItem
GetActiveWindow
InvalidateRect
ClientToScreen
GetClientRect
GetWindowRect
SendMessageA
DrawFocusRect
DrawStateA
SystemParametersInfoA
DestroyIcon
DrawIconEx
DrawTextA
GetSystemMetrics
SetRect
CopyRect
FillRect
GetSysColorBrush
LoadBitmapA
DrawEdge
TabbedTextOutA
GrayStringA
CreateMenu
CreatePopupMenu
DeleteMenu
AppendMenuA
GetMenuItemCount
GetMenuItemID
GetMenuState
GetMenuStringA
GetSubMenu
InsertMenuA
ModifyMenuA
RemoveMenu
GetDC
ReleaseDC
GetDesktopWindow
EnableWindow
DestroyCursor
IsMenu
SetCursor
PostMessageA
CreateIconIndirect
GetIconInfo
LoadImageA
InflateRect
FrameRect
OffsetRect
UnhookWindowsHookEx

gdi32

SaveDC
RestoreDC
SetBkMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
ScaleWindowExtEx
GetClipBox
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
CreateRectRgnIndirect
GetViewportExtEx
GetWindowExtEx
CreatePatternBrush
GetMapMode
SetRectRgn
CombineRgn
DPtoLP
StretchDIBits
GetCharWidthA
CreateFontA
LPtoDP
GetTextColor
GetBkColor
GetTextMetricsA
GetCurrentObject
CreateRectRgn
CreateBitmap
SetBkColor
SetTextColor
GetStockObject
Rectangle
CreateHatchBrush
Escape
GetTextExtentPoint32A
ExtTextOutA
TextOutA
SetPixel
GetPixel
PatBlt
Ellipse
RectVisible
PtVisible
GetBkMode
GetDeviceCaps
GetObjectA
CreateCompatibleDC
CreateDIBSection
SelectObject
BitBlt
DeleteObject
DeleteDC
CreateCompatibleBitmap
CreateFontIndirectA
CreateSolidBrush
CreatePen
SetWindowExtEx
CreateDIBitmap
GetTextExtentPointA
GetTextExtentPoint32W

comdlg32

GetOpenFileNameA
GetSaveFileNameA
GetFileTitleA

winspool.drv

ClosePrinter
DocumentPropertiesA
OpenPrinterA

advapi32

RegQueryValueExA
RegOpenKeyExA
RegEnumValueA
RegSetValueExA
RegOpenKeyA
IsTextUnicode
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegCreateKeyExA
RegDeleteValueA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyA
RegSetValueA
RegCloseKey

shell32

DragQueryFileA
DragFinish
SHGetFileInfoA
ShellExecuteA
SHGetMalloc
SHBrowseForFolderA
SHGetPathFromIDListA
ShellExecuteExA
ExtractIconA

comctl32

ImageList_GetIconSize
ImageList_GetImageCount
ImageList_AddMasked
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_Draw
_TrackMouseEvent
ImageList_Destroy
ImageList_Create
ord17

oledlg

ord8

ole32

CoFreeUnusedLibraries
OleUninitialize
CoTaskMemAlloc
CoTaskMemFree
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
CLSIDFromString
CLSIDFromProgID
CoInitialize
CoUninitialize
CoRegisterMessageFilter
CoRevokeClassObject
OleFlushClipboard
OleIsCurrentClipboard
OleInitialize

olepro32

ord253

oleaut32

SysFreeString
SysAllocStringLen
VariantClear
VariantTimeToSystemTime
VariantCopy
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringLen

Sections

.text
Size: 584KB - Virtual size: 582KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 96KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 24KB - Virtual size: 39KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 496KB - Virtual size: 494KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Qk��u�
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

972c83a8c3e0be864706c9cfcb591195

Headers

File Characteristics

Imports

setupapi

dm

dl

kernel32

user32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

oledlg

ole32

olepro32

oleaut32

Sections

.text Size: 584KB - Virtual size: 582KB

.rdata Size: 100KB - Virtual size: 96KB

.data Size: 24KB - Virtual size: 39KB

.rsrc Size: 496KB - Virtual size: 494KB

Qk���u� Size: 20KB - Virtual size: 20KB

.text
Size: 584KB - Virtual size: 582KB

.rdata
Size: 100KB - Virtual size: 96KB

.data
Size: 24KB - Virtual size: 39KB

.rsrc
Size: 496KB - Virtual size: 494KB

Qk��u�
Size: 20KB - Virtual size: 20KB