54d6e386ed29e037073956a600e8cb50N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

54d6e386ed29e037073956a600e8cb50N.exe
Size

648KB
MD5

54d6e386ed29e037073956a600e8cb50
SHA1

8f5d5d2f93ddd2497b06fa8e34e1d60f9cc3f7bd
SHA256

8e6a839e35921e3f00fad0c8654f616657e0e42e775006f349287acac19ad6bb
SHA512

eb3ee59ed702069539cb7725f1bfcd361de01e383d5f296e726b1b5309b0204476678f39ebd2cbe4a9b4f055502f184f0bc28167c1af7f219e17c3de49565323
SSDEEP

12288:eJMq1LrjjZ2+3oRtUuNKFkoS+NxmlM1pRvG+:eJMEzY+4RtwkoS6xp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
54d6e386ed29e037073956a600e8cb50N.exe

Files

54d6e386ed29e037073956a600e8cb50N.exe
.exe windows:4 windows x86 arch:x86

98fcd4ac2c50d0b5b70a5fedbe5c72d5

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

PDB Paths

d:\Projects\Proxy Scanner\Sources\Server\Release\PortScan.pdb

Imports

wsock32

WSAGetLastError
getsockname
WSASetLastError
bind
sendto
recvfrom
WSAAsyncSelect
send
recv
ioctlsocket
htons
htonl
select
socket
accept
closesocket
inet_addr
connect
ntohs
WSAStartup
gethostname
gethostbyname
WSACleanup
listen

ws2_32

WSACreateEvent
WSAEventSelect
WSAEnumNetworkEvents
WSAWaitForMultipleEvents

libmysql

mysql_real_connect
mysql_real_query
mysql_store_result
mysql_fetch_row
mysql_init

user32

InvalidateRgn
CopyAcceleratorTableA
IsRectEmpty
CharNextA
RedrawWindow
InvalidateRect
ClientToScreen
GetWindowRect
DrawFocusRect
FrameRect
FillRect
OffsetRect
InflateRect
CopyRect
DrawStateA
SendMessageA
GetNextDlgGroupItem
GetClientRect
GetParent
MessageBeep
SetParent
WindowFromPoint
GetWindowLongA
TabbedTextOutA
DrawTextA
DrawTextExA
LockWindowUpdate
GetDCEx
GrayStringA
RegisterClipboardFormatA
PostThreadMessageA
GetActiveWindow
GetCapture
EnableWindow
SetCapture
GetSysColorBrush
SetWindowContextHelpId
MapDialogRect
PostQuitMessage
GetMessageA
TranslateMessage
ValidateRect
SetRect
DestroyMenu
SetRectEmpty
EndPaint
BeginPaint
GetWindowDC
ReleaseDC
GetDC
WaitMessage
ModifyMenuA
GetMenuState
GetMenuCheckMarkDimensions
ShowWindow
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
GetIconInfo
LoadImageA
ReleaseCapture
GetSysColor
SetCursor
LoadBitmapA
DrawEdge
GetMenuItemCount
GetMenuItemInfoA
PostMessageA
GetDesktopWindow
SetForegroundWindow
IsWindow
GetClassInfoA
SystemParametersInfoA
GetSystemMetrics
MessageBoxA
IsWindowVisible
LoadCursorA
EnableMenuItem
SetMenuItemBitmaps
LoadMenuA
SetTimer
KillTimer
GetCursorPos
DrawIcon
AppendMenuA
CheckMenuItem
GetMenu
GetSystemMenu
IsIconic
LoadIconA
wsprintfA
CharUpperA
RegisterWindowMessageA
WinHelpA
CreateWindowExA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassInfoExA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SendDlgItemMessageA
GetFocus
SetFocus
IsChild
GetWindowTextLengthA
GetWindowTextA
GetForegroundWindow
GetLastActivePopup
DispatchMessageA
EndDialog
GetNextDlgTabItem
IsWindowEnabled
GetDlgItem
DestroyWindow
CreateDialogIndirectParamA
SetActiveWindow
GetWindow
PtInRect
GetWindowPlacement
IntersectRect
SetWindowPos
SetWindowLongA
CallWindowProcA
DefWindowProcA
GetDlgCtrlID
UnregisterClassA
RegisterClassA
DeferWindowPos
EqualRect
ScreenToClient
AdjustWindowRectEx
GetMenuItemID
GetSubMenu
UpdateWindow
GetKeyState
MapWindowPoints
PeekMessageA
GetMessagePos
GetMessageTime
UnhookWindowsHookEx
GetTopWindow

kernel32

FreeResource
GlobalFree
GlobalUnlock
GlobalLock
GetModuleHandleA
lstrcpynA
lstrcmpW
lstrcatA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
GlobalAlloc
MulDiv
CompareStringW
InterlockedDecrement
RaiseException
lstrcmpA
FileTimeToSystemTime
WaitForSingleObject
SetThreadPriority
ResumeThread
SuspendThread
lstrcpyA
EnumResourceLanguagesA
ConvertDefaultLocale
GetCurrentThread
GlobalFlags
LocalAlloc
GlobalReAlloc
GlobalHandle
TlsGetValue
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
InterlockedIncrement
GetCPInfo
GetOEMCP
FlushFileBuffers
LockFile
UnlockFile
DuplicateHandle
GetCurrentProcess
FindClose
FindFirstFileA
GetFullPathNameA
FileTimeToLocalFileTime
GetFileAttributesA
GetFileTime
WritePrivateProfileStringA
SetErrorMode
GetTickCount
RtlUnwind
ExitProcess
GetSystemTimeAsFileTime
HeapFree
HeapAlloc
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
GetStartupInfoA
GetCommandLineA
HeapReAlloc
ExitThread
CreateThread
TerminateProcess
HeapSize
QueryPerformanceCounter
GetCurrentProcessId
LCMapStringA
LCMapStringW
SetUnhandledExceptionFilter
HeapDestroy
HeapCreate
VirtualFree
IsBadWritePtr
GetStdHandle
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStringTypeA
GetStringTypeW
GetTimeZoneInformation
IsBadReadPtr
IsBadCodePtr
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
IsValidCodePage
SetStdHandle
GetLocaleInfoW
SetEnvironmentVariableA
CompareStringA
lstrcmpiA
GetVersion
MultiByteToWideChar
GetCurrentDirectoryA
GetModuleFileNameA
GetFileSize
CreateFileMappingA
MapViewOfFile
UnmapViewOfFile
SetEndOfFile
CreateEventA
SetEvent
CreateWaitableTimerA
SetWaitableTimer
WaitForMultipleObjects
GetLocalTime
ReadFile
lstrlenA
CreateFileA
GetLastError
FormatMessageA
LocalFree
SetFilePointer
WriteFile
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetVolumeInformationA
LoadLibraryA
GetProcAddress
FreeLibrary
CloseHandle
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
SetLastError

gdi32

GetRgnBox
GetTextColor
PatBlt
CombineRgn
SetRectRgn
CreateRectRgnIndirect
CreateFontA
GetCharWidthA
StretchDIBits
CreateSolidBrush
CreatePen
GetStockObject
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
MoveToEx
LineTo
IntersectClipRect
ExcludeClipRect
SetMapMode
SetBkMode
RestoreDC
SaveDC
GetDeviceCaps
SetBkColor
SetTextColor
GetClipBox
GetTextExtentPoint32A
LPtoDP
DPtoLP
GetMapMode
GetBkColor
DeleteObject
ExtFloodFill
FloodFill
StretchBlt
CreateFontIndirectA
CreatePatternBrush
GetObjectA
CreateBitmap
GetPixel
SetPixel
DeleteDC
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
BitBlt
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap

comdlg32

GetFileTitleA
GetOpenFileNameA
GetSaveFileNameA

winspool.drv

DocumentPropertiesA
OpenPrinterA
ClosePrinter

advapi32

RegCloseKey
RegOpenKeyA
RegQueryValueExA
RegOpenKeyExA
RegDeleteKeyA
RegEnumKeyA
RegQueryValueA
RegCreateKeyExA
RegSetValueExA

shell32

ShellExecuteA

comctl32

ord17
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_Destroy
ImageList_Create
_TrackMouseEvent

shlwapi

PathFindFileNameA
PathStripToRootA
PathFindExtensionA
PathIsUNCA

oledlg

ord8

ole32

CoTaskMemAlloc
CoTaskMemFree
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
OleIsCurrentClipboard
OleFlushClipboard
CoRegisterMessageFilter
CLSIDFromString
CoUninitialize
CoGetClassObject
CoInitialize
CLSIDFromProgID

oleaut32

SysAllocString
SystemTimeToVariantTime
SafeArrayDestroy
SysAllocStringByteLen
SysStringLen
SysFreeString
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
OleCreateFontIndirect
VariantCopy

Sections

.text
Size: 344KB - Virtual size: 342KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 92KB - Virtual size: 90KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 1.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 196KB - Virtual size: 192KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

98fcd4ac2c50d0b5b70a5fedbe5c72d5

Headers

File Characteristics

PDB Paths

Imports

wsock32

ws2_32

libmysql

user32

kernel32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

Sections

.text Size: 344KB - Virtual size: 342KB

.rdata Size: 92KB - Virtual size: 90KB

.data Size: 12KB - Virtual size: 1.3MB

.rsrc Size: 196KB - Virtual size: 192KB

.text
Size: 344KB - Virtual size: 342KB

.rdata
Size: 92KB - Virtual size: 90KB

.data
Size: 12KB - Virtual size: 1.3MB

.rsrc
Size: 196KB - Virtual size: 192KB