2024-07-10_a460ad961c7f1a240bac9e921c7934ed_megazord

Sharing

Copy URL

Twitter E-mail

General

Target

2024-07-10_a460ad961c7f1a240bac9e921c7934ed_megazord
Size

8.2MB
MD5

a460ad961c7f1a240bac9e921c7934ed
SHA1

bc44d4b4ed1d9ddfceb1d8d0e1260513604b6335
SHA256

e1765f02f4197a8934c005ee7036470fea40d25b1cccf71da34d980d19e41e66
SHA512

beb41fccd8984f270d8f1ae26cac69d29d8276d4084f8abef607fbd432f795d610677ca5e89f721e299130360645fa04fe1b8858a794920570654dd801047fbb
SSDEEP

98304:werENRvEcR8Oory0zdgArwjtWOZKPX0EJMA49a7kIc7K8phiZ8/GSYKs:04nc+UiZ8/G

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-07-10_a460ad961c7f1a240bac9e921c7934ed_megazord

Files

2024-07-10_a460ad961c7f1a240bac9e921c7934ed_megazord
.exe windows:6 windows x64 arch:x64

9751e354a9e93faf9f6a1df99b16dd2b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

QueryPerformanceCounter
GetProcAddress
SetThreadErrorMode
LoadLibraryExW
lstrlenW
FormatMessageW
WideCharToMultiByte
GetSystemInfo
UnmapViewOfFile
GetUserPreferredUILanguages
CreateFileMappingW
MapViewOfFile
GetCurrentProcess
DuplicateHandle
VirtualProtect
GetLogicalProcessorInformation
Sleep
GetModuleHandleA
WakeConditionVariable
SleepConditionVariableSRW
GetModuleHandleW
CreateWaitableTimerExW
SetWaitableTimer
WaitForSingleObject
GetCurrentThreadId
TryAcquireSRWLockExclusive
GetCurrentThread
GetStdHandle
GetConsoleMode
MultiByteToWideChar
WriteConsoleW
SetLastError
QueryPerformanceFrequency
GetCurrentDirectoryW
WaitForSingleObjectEx
LoadLibraryA
GetCurrentProcessId
CreateMutexA
ReleaseMutex
GetEnvironmentVariableW
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry
GetModuleFileNameW
CreateFileW
SetFileInformationByHandle
GetFileInformationByHandle
GetFileInformationByHandleEx
GetFullPathNameW
FindNextFileW
CreateDirectoryW
FindFirstFileW
GetEnvironmentStringsW
FreeEnvironmentStringsW
CompareStringOrdinal
GetSystemDirectoryW
GetWindowsDirectoryW
CreateProcessW
GetFileAttributesW
InitializeProcThreadAttributeList
UpdateProcThreadAttribute
DeleteProcThreadAttributeList
CreateNamedPipeW
CreateThread
ReadFileEx
SleepEx
WriteFileEx
WaitForMultipleObjects
GetOverlappedResult
GetExitCodeProcess
SetThreadStackGuarantee
CancelIo
ReadFile
GetProcessHeap
HeapAlloc
FreeLibrary
CreateEventA
RemoveVectoredExceptionHandler
GlobalLock
GlobalSize
GlobalUnlock
GlobalAlloc
GlobalFree
LoadLibraryExA
GetConsoleOutputCP
FlushFileBuffers
HeapSize
LCMapStringW
CompareStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetStringTypeW
GetFileType
SetStdHandle
SetEnvironmentVariableW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
TerminateProcess
ExitProcess
WriteFile
RtlPcToFileHeader
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
EncodePointer
RtlUnwindEx
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
HeapReAlloc
AddVectoredExceptionHandler
FindClose
ReleaseSRWLockExclusive
WakeAllConditionVariable
AcquireSRWLockExclusive
SwitchToThread
CloseHandle
ReleaseSRWLockShared
AcquireSRWLockShared
GetLastError
SetFilePointerEx
CreateEventW
HeapFree

user32

TrackPopupMenu
GetWindowLongW
SetMenuDefaultItem
GetClipCursor
ClipCursor
ShowCursor
EnableMenuItem
GetSystemMenu
SetWindowLongW
ShowWindow
ToUnicodeEx
GetKeyboardLayout
AdjustWindowRectEx
MapVirtualKeyExW
RegisterWindowMessageA
SystemParametersInfoA
GetWindowRect
CreateIcon
SetClipboardData
EmptyClipboard
CloseClipboard
GetClipboardData
OpenClipboard
DefWindowProcA
RegisterClassExA
ReleaseDC
CreateWindowExA
GetCursorPos
GetMonitorInfoW
PostMessageW
RegisterClassExW
CreateWindowExW
SetWindowLongPtrW
RegisterRawInputDevices
MonitorFromPoint
DestroyWindow
GetMessageW
PeekMessageW
SetTimer
KillTimer
TranslateMessage
DispatchMessageW
GetWindowLongPtrW
RedrawWindow
DefWindowProcW
GetRawInputData
ValidateRect
GetClientRect
GetDC
SetWindowPos
InvalidateRgn
DestroyIcon
SetWindowTextW
ClientToScreen
IsIconic
GetForegroundWindow
MonitorFromWindow
IsWindowVisible
TrackMouseEvent
GetActiveWindow
FlashWindowEx
SendMessageW
LoadCursorW
SetCursor
ChangeDisplaySettingsExW
GetWindowPlacement
SetWindowPlacement
CloseTouchInputHandle
GetTouchInputInfo
ReleaseCapture
SetCapture
MonitorFromRect
ScreenToClient
GetMenu
IsProcessDPIAware
GetKeyState
GetAsyncKeyState
GetKeyboardState
RegisterTouchWindow
GetSystemMetrics
SetForegroundWindow
SendInput
MapVirtualKeyW
SetWindowDisplayAffinity

shell32

SHCreateItemFromParsingName
ExtractIconW
ShellExecuteW
SHGetKnownFolderPath
DragQueryFileW
DragFinish

gdi32

CreateCompatibleDC
SelectObject
DeleteDC
DeleteObject
BitBlt
CreateRectRgn
GetDeviceCaps
ChoosePixelFormat
GetPixelFormat
SetPixelFormat
DescribePixelFormat
SwapBuffers
CreateDIBSection

ole32

RegisterDragDrop
CoCreateInstance
OleInitialize
CoUninitialize
CoInitializeEx
RevokeDragDrop
CoTaskMemFree

comctl32

TaskDialogIndirect

dwmapi

DwmEnableBlurBehindWindow

imm32

ImmGetCompositionStringW
ImmGetContext
ImmAssociateContextEx
ImmReleaseContext

ntdll

NtReadFile
RtlNtStatusToDosError
NtWriteFile

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

opengl32

wglCreateContext
wglGetCurrentContext
wglDeleteContext
wglGetProcAddress
wglMakeCurrent

d3dcompiler_47

D3DCompile

oleaut32

SysStringLen
SysFreeString
GetErrorInfo

uxtheme

SetWindowTheme

Sections

.text
Size: 6.7MB - Virtual size: 6.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 79KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 500B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9751e354a9e93faf9f6a1df99b16dd2b

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

shell32

gdi32

ole32

comctl32

dwmapi

imm32

ntdll

bcrypt

advapi32

opengl32

d3dcompiler_47

oleaut32

uxtheme

Sections

.text Size: 6.7MB - Virtual size: 6.7MB

.rdata Size: 1.3MB - Virtual size: 1.3MB

.data Size: 14KB - Virtual size: 19KB

.pdata Size: 79KB - Virtual size: 79KB

_RDATA Size: 512B - Virtual size: 500B

.rsrc Size: 98KB - Virtual size: 97KB

.reloc Size: 49KB - Virtual size: 49KB

.text
Size: 6.7MB - Virtual size: 6.7MB

.rdata
Size: 1.3MB - Virtual size: 1.3MB

.data
Size: 14KB - Virtual size: 19KB

.pdata
Size: 79KB - Virtual size: 79KB

_RDATA
Size: 512B - Virtual size: 500B

.rsrc
Size: 98KB - Virtual size: 97KB

.reloc
Size: 49KB - Virtual size: 49KB