4cc7c0cf5185e50c2dd1b8cd3912c410N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

4cc7c0cf5185e50c2dd1b8cd3912c410N.exe
Size

807KB
MD5

4cc7c0cf5185e50c2dd1b8cd3912c410
SHA1

23e4ddd6b01bba9ac6d8c207d4e3e7d605c1e922
SHA256

12d9b183da9fbf9a5bb068d91d8039676853edbf8f49eab141547e7db8ad934a
SHA512

025b584c98eaaf35103436a5bc14f15b33b4dff2cbf3c0af0df8c3f6ced5ba2aeb8387da339584cd7f5895881747f184fbc75276e12b11df81eb58b91834abb1
SSDEEP

24576:V8gvQd7JSobNZ8ET0KXswYivUHLbptLSzC+7QULO5G11YZO0AaXV4MYAXI1tZ20:VFvQd7JSobNZ8ET0KXswYiMLbptLSzCI

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4cc7c0cf5185e50c2dd1b8cd3912c410N.exe

Files

4cc7c0cf5185e50c2dd1b8cd3912c410N.exe
.exe windows:5 windows x86 arch:x86

2d1e1d1137e20074849797850448e36f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

hid

HidD_GetPreparsedData
HidP_GetCaps
HidP_GetSpecificButtonCaps
HidP_GetSpecificValueCaps
HidD_FreePreparsedData
HidD_GetAttributes
HidD_GetHidGuid

setupapi

SetupDiGetClassDevsW
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW

psapi

EnumProcessModules
GetModuleFileNameExW

kernel32

GetStartupInfoW
RtlUnwind
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapAlloc
HeapFree
ExitProcess
RaiseException
HeapReAlloc
HeapSize
SetUnhandledExceptionFilter
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
GetConsoleCP
GetConsoleMode
GetTimeFormatA
GetDateFormatA
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetFileTime
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
GetProcessHeap
SetEnvironmentVariableA
FindResourceW
SizeofResource
LockResource
LoadResource
MultiByteToWideChar
GetModuleFileNameW
GetLastError
WideCharToMultiByte
GetLocalTime
CreateFileW
GetFileAttributesW
GetPrivateProfileStringW
GetPrivateProfileIntW
WritePrivateProfileStringW
GetPrivateProfileSectionNamesW
GetPrivateProfileSectionW
GetProcAddress
LoadLibraryW
FreeLibrary
lstrlenA
lstrlenW
GetModuleHandleW
GetTickCount
LeaveCriticalSection
EnterCriticalSection
InterlockedExchange
FormatMessageW
CloseHandle
CreateMutexW
ReleaseMutex
WaitForSingleObject
CreateThread
GlobalReAlloc
GlobalUnlock
GlobalLock
GetFileSizeEx
FileTimeToLocalFileTime
GetOverlappedResult
SetErrorMode
FileTimeToSystemTime
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
TlsGetValue
LocalAlloc
CancelIo
GlobalFlags
GlobalAlloc
Sleep
lstrcatW
ResumeThread
GetCurrentThread
ConvertDefaultLocale
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
InterlockedDecrement
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetThreadLocale
lstrcmpA
GetCurrentProcessId
LocalFree
MulDiv
GetModuleHandleA
GetCurrentThreadId
GlobalAddAtomW
OpenProcess
GlobalFindAtomW
GlobalDeleteAtom
GetVersionExW
CompareStringW
LoadLibraryA
SetLastError
lstrcmpW
GetVersionExA
GlobalFree
FreeResource
SetEvent
CreateEventW

user32

RegisterClipboardFormatW
PostThreadMessageW
ValidateRect
PostQuitMessage
DestroyMenu
CharUpperW
EndPaint
BeginPaint
GetWindowDC
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
MoveWindow
SetWindowTextW
IsDialogMessageW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
ModifyMenuW
GetMenuState
EnableMenuItem
CheckMenuItem
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
SetWindowsHookExW
CallNextHookEx
GetClassLongW
GetFocus
GetWindowTextLengthW
DispatchMessageW
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
TrackPopupMenu
SetMenu
GetMenuItemID
GetMenuItemCount
MessageBoxW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
EqualRect
GetDlgCtrlID
DefWindowProcW
GetMenu
IntersectRect
SystemParametersInfoA
GetSysColorBrush
CreateDialogIndirectParamW
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
GetNextDlgGroupItem
OffsetRect
DrawIconEx
SetActiveWindow
AppendMenuW
CreatePopupMenu
DrawIcon
GetForegroundWindow
GetWindowThreadProcessId
LoadIconW
RemovePropW
GetKeyState
SystemParametersInfoW
GetDoubleClickTime
SetPropW
GetPropW
IsIconic
ShowWindow
SetForegroundWindow
UnregisterDeviceNotification
GetLastActivePopup
LoadImageW
RegisterWindowMessageW
SendMessageTimeoutW
SetCursorPos
mouse_event
LoadMenuW
GetSubMenu
DrawFocusRect
DrawFrameControl
MessageBeep
ReleaseDC
SetWindowRgn
GetDC
DrawEdge
FillRect
InvalidateRgn
CopyAcceleratorTableW
IsRectEmpty
InflateRect
CopyRect
CharNextW
UnregisterClassW
LoadCursorW
GetWindowTextW
CreateWindowExW
SetFocus
SetWindowLongW
TrackMouseEvent
GetSysColor
GetWindowTextA
DestroyWindow
CallWindowProcW
KillTimer
SetTimer
IsWindow
MapVirtualKeyW
ToAscii
GetWindow
GetWindowLongW
GetCursorPos
ChildWindowFromPoint
FindWindowExW
EnumChildWindows
IsWindowVisible
GetClassNameW
GetDesktopWindow
ScreenToClient
GetWindowRect
PtInRect
GetSystemMetrics
SetWindowPos
UpdateWindow
WindowFromPoint
SetCapture
GetCapture
GetActiveWindow
InvalidateRect
ClientToScreen
GetClientRect
ReleaseCapture
PostMessageW
SendMessageW
EnableWindow
GetParent
SetRect
SetWindowContextHelpId
MapDialogRect
SetCursor
GetMessageW
GetWindowPlacement
TranslateMessage
RegisterDeviceNotificationW

gdi32

GetPixel
ExtCreateRegion
Rectangle
StretchBlt
GetDIBColorTable
GetClipBox
SetTextColor
SetBkColor
CreateBitmap
SaveDC
RestoreDC
SetBkMode
SetMapMode
GetViewportExtEx
GetWindowExtEx
PtVisible
RectVisible
CreatePen
CombineRgn
Escape
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
GetStockObject
GetDeviceCaps
CreateRectRgnIndirect
GetMapMode
GetBkColor
GetTextColor
GetRgnBox
ExtTextOutW
CreateRectRgn
GetObjectW
DeleteDC
SelectObject
SetDIBColorTable
CreateDIBSection
DeleteObject
CreateSolidBrush
BitBlt
CreateCompatibleDC
CreateCompatibleBitmap
CreatePatternBrush
GetTextExtentPoint32W
TextOutW
CreateFontW

msimg32

TransparentBlt
AlphaBlend

comdlg32

GetFileTitleW

winspool.drv

DocumentPropertiesW
OpenPrinterW
ClosePrinter

advapi32

RegQueryValueExW
RegCreateKeyExW
RegQueryValueW
RegEnumKeyW
RegDeleteKeyW
RegOpenKeyW
RegSetValueExW
RegOpenKeyExW
RegCloseKey

shell32

SHGetFolderPathW
ShellExecuteW
Shell_NotifyIconW
ord165

comctl32

_TrackMouseEvent

shlwapi

PathRemoveFileSpecW
PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathIsDirectoryW
PathFindFileNameW

oledlg

OleUIBusyW

ole32

CoTaskMemAlloc
CoCreateInstance
CoInitializeEx
CLSIDFromProgID
CLSIDFromString
CoGetClassObject
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
OleUninitialize
CoFreeUnusedLibraries
OleInitialize
CoRevokeClassObject
CoTaskMemFree
CoInitialize
CoUninitialize
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard

oleaut32

SysAllocString
OleCreateFontIndirect
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
VariantCopy
VarDateFromStr
VarUdateFromDate
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
SysStringLen
SysFreeString

gdiplus

GdipReleaseDC
GdipGetDC
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusShutdown
GdipSetImageAttributesColorKeys
GdipDisposeImageAttributes
GdipCreateImageAttributes
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectRect
GdipCreateHBITMAPFromBitmap
GdipCloneBitmapAreaI
GdipDrawImageRectI
GdipDeleteGraphics
GdipCreateFromHDC
GdipAlloc
GdipCloneImage
GdipDisposeImage
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipFree

Sections

.text
Size: 552KB - Virtual size: 551KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 140KB - Virtual size: 139KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 14KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2d1e1d1137e20074849797850448e36f

Headers

DLL Characteristics

File Characteristics

Imports

hid

setupapi

psapi

kernel32

user32

gdi32

msimg32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

oledlg

ole32

oleaut32

gdiplus

Sections

.text Size: 552KB - Virtual size: 551KB

.rdata Size: 140KB - Virtual size: 139KB

.data Size: 14KB - Virtual size: 29KB

.rsrc Size: 100KB - Virtual size: 99KB

.text
Size: 552KB - Virtual size: 551KB

.rdata
Size: 140KB - Virtual size: 139KB

.data
Size: 14KB - Virtual size: 29KB

.rsrc
Size: 100KB - Virtual size: 99KB