P[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

P.exe
Size

29.3MB
MD5

6ce2228dc32b5290750d3871681a7f00
SHA1

d9357a64a5a454461a56afc5735326596d2e30d8
SHA256

e2ac09bab34e72ec729e78ba23ba0c854a44a13043fccaf67983b2d595634384
SHA512

4164f66bca97d8b65ee8289adbc862eaab9b40f90854ae5354d3bf2d67fccb43592ca311da87fc797c30e15711a93a3b3739620d109b3ed7ffcf6920afd4142e
SSDEEP

786432:EFzmWxUTU+QOpwZS1nkZPLtghhtdr3Mu0cf:E/IzGZakpLtghht9kcf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
P.exe

Files

P.exe
.exe windows:5 windows x64 arch:x64

c628626ce9885e92bfe6eec0eb271632

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetStringTypeW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
RtlCaptureContext
SetFilePointerEx
OutputDebugStringW
LCMapStringW
WriteConsoleW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetStartupInfoW
GetStdHandle
GetFileType
SetStdHandle
GetSystemTimeAsFileTime
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
MultiByteToWideChar
ExitProcess
ExitThread
CreateThread
RtlPcToFileHeader
IsProcessorFeaturePresent
TerminateProcess
RtlUnwindEx
RtlLookupFunctionEntry
GetCommandLineW
FindResourceExW
VirtualProtect
SearchPathW
Sleep
GetTempPathW
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
GetCurrentDirectoryW
SetErrorMode
LocalFileTimeToFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GlobalFlags
FileTimeToSystemTime
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
SystemTimeToFileTime
ReplaceFileW
SetFileTime
GetFileTime
GetDiskFreeSpaceW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CompareStringA
GetVersionExW
GetCurrentThread
ResumeThread
SetThreadPriority
WaitForSingleObject
GetThreadLocale
GetStringTypeExW
lstrcmpiW
GetCurrentProcess
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetShortPathNameW
GetFullPathNameW
GetFileSize
FlushFileBuffers
GlobalGetAtomNameW
GetCurrentProcessId
lstrcmpA
GetProfileIntW
GetTickCount
QueryActCtxW
FindActCtxSectionStringW
DeactivateActCtx
ActivateActCtx
CreateActCtxW
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryW
lstrcmpW
GlobalDeleteAtom
LoadLibraryExW
GetModuleHandleExW
GetModuleHandleW
FreeResource
FreeLibrary
GetSystemDirectoryW
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
EncodePointer
OutputDebugStringA
CopyFileW
FormatMessageW
LocalFree
GlobalFree
GlobalSize
SetLastError
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetLastError
RaiseException
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
DecodePointer
GetModuleFileNameW
LoadLibraryA
GetProcAddress
lstrcpynW
MulDiv
GlobalAlloc
WideCharToMultiByte
MoveFileW
FindFirstFileW
DeleteFileW
GetFileAttributesW
CreateFileW
GetTempFileNameW
lstrlenW
lstrcatW
lstrcpyW
CloseHandle
FindClose
ReadFile
WriteFile
GlobalUnlock
GlobalLock
FindResourceW
SizeofResource
LoadResource
LockResource
ReadConsoleW

user32

ModifyMenuW
CharUpperBuffW
FrameRect
GetUpdateRect
SubtractRect
MapDialogRect
GetWindowRgn
InvertRect
MessageBeep
GetIconInfo
DrawIconEx
DrawFocusRect
GetNextDlgGroupItem
WaitMessage
GetMenuDefaultItem
LockWindowUpdate
GetDCEx
CreateMenu
CopyAcceleratorTableW
PostThreadMessageW
GetTabbedTextExtentW
SetWindowRgn
DrawIcon
UnionRect
SendDlgItemMessageA
CopyImage
GetMenuItemInfoW
RealChildWindowFromPoint
GetSysColorBrush
RegisterClipboardFormatW
ShowOwnedPopups
PostQuitMessage
TranslateMessage
GetMessageW
CharUpperW
GetSystemMetrics
IsZoomed
SystemParametersInfoW
SetParent
DeleteMenu
GetSystemMenu
WindowFromPoint
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
IsRectEmpty
SetCursorPos
DestroyCursor
SetRect
MapVirtualKeyW
GetKeyNameTextW
FillRect
ClientToScreen
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
ReuseDDElParam
UnpackDDElParam
LoadImageW
DestroyIcon
GetWindowThreadProcessId
IntersectRect
InsertMenuItemW
DestroyMenu
CreatePopupMenu
LoadMenuW
BringWindowToTop
InflateRect
IsIconic
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
IsDialogMessageW
SetWindowTextW
SetMenuDefaultItem
IsWindowEnabled
CheckDlgButton
SetDlgItemTextW
MoveWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongPtrW
SetWindowLongPtrW
GetWindowLongPtrW
SetWindowLongW
GetWindowLongW
PtInRect
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetWindowRect
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
SetFocus
GetDlgCtrlID
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
PostMessageW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
RegisterWindowMessageW
LoadBitmapW
GetParent
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
CopyIcon
GetDoubleClickTime
SetClassLongPtrW
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
GetComboBoxInfo
TrackMouseEvent
MonitorFromPoint
UpdateLayeredWindow
IsMenu
GetFocus
RemoveMenu
DrawFrameControl
DrawEdge
DrawStateW
EnumDisplayMonitors
SetLayeredWindowAttributes
NotifyWinEvent
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
UnregisterClassW
MessageBoxW
ShowWindow
SetTimer
SetCapture
GetKeyState
IsClipboardFormatAvailable
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
OpenClipboard
LoadCursorW
OffsetRect
GetSysColor
ScreenToClient
GetCursorPos
SetCursor
EnableScrollBar
InvalidateRect
ReleaseDC
GetDC
TranslateAcceleratorW
LoadAcceleratorsW
KillTimer
ReleaseCapture
GetDlgItem
IsWindow
SetCaretPos
ShowCaret
HideCaret
CreateCaret
GetClientRect
UpdateWindow
GetAsyncKeyState
EnableWindow
SendMessageW
SetRectEmpty

gdi32

MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
GetViewportOrgEx
Rectangle
GetBkColor
GetTextMetricsW
CreateFontW
GetCharWidthW
StretchDIBits
CreateEllipticRgn
Ellipse
CreateDIBSection
LPtoDP
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetTextAlign
GetTextColor
GetWindowOrgEx
GetTextFaceW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
StretchBlt
SetDIBColorTable
CreatePolygonRgn
Polygon
Polyline
EnumFontFamiliesExW
GetRgnBox
OffsetRgn
CreateRoundRectRgn
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
GetLayout
SetLayout
SetMapMode
SetPolyFillMode
StartDocW
SetTextAlign
SetStretchBltMode
GetStretchBltMode
BitBlt
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetCurrentPositionEx
GetClipBox
ExcludeClipRect
Escape
DeleteObject
DeleteDC
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
SetTextColor
SetBkColor
CreateBitmap
CreateDCW
CopyMetaFileW
GetObjectW
GetTextExtentPoint32W
GetDeviceCaps
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
SetROP2

msimg32

AlphaBlend
TransparentBlt

winspool.drv

ClosePrinter
DocumentPropertiesW
OpenPrinterW
GetJobW

advapi32

RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
SetFileSecurityW
GetFileSecurityW
RegEnumKeyW
RegSetValueExW
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegSetValueW
RegQueryValueW
RegOpenKeyExW

shell32

ShellExecuteW
DragQueryFileW
DragFinish
SHGetFileInfoW
SHAddToRecentDocs
ExtractIconW
SHAppBarMessage
SHBrowseForFolderW
DragAcceptFiles
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW

comctl32

ImageList_Draw

shlwapi

PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
PathIsUNCW
StrFormatKBSizeW

uxtheme

GetThemePartSize
GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
DrawThemeText
IsThemeBackgroundPartiallyTransparent
IsAppThemed
DrawThemeParentBackground

ole32

CoDisconnectObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoInitialize
CoCreateInstance
CoCreateGuid
CoUninitialize
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoRegisterMessageFilter
CoRevokeClassObject
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
CoInitializeEx
RevokeDragDrop
CreateStreamOnHGlobal

oleaut32

SysFreeString
VarBstrFromDate
VariantCopy
SystemTimeToVariantTime
SysStringLen
LoadTypeLi
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
VariantTimeToSystemTime

oledlg

OleUIBusyW

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

gdiplus

GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectI

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 1.8MB - Virtual size: 1.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 708KB - Virtual size: 707KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26.6MB - Virtual size: 26.6MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 91KB - Virtual size: 91KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 71KB - Virtual size: 70KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c628626ce9885e92bfe6eec0eb271632

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

oleacc

gdiplus

imm32

winmm

Sections

.text Size: 1.8MB - Virtual size: 1.8MB

.rdata Size: 708KB - Virtual size: 707KB

.data Size: 26.6MB - Virtual size: 26.6MB

.pdata Size: 91KB - Virtual size: 91KB

.rsrc Size: 71KB - Virtual size: 70KB

.text
Size: 1.8MB - Virtual size: 1.8MB

.rdata
Size: 708KB - Virtual size: 707KB

.data
Size: 26.6MB - Virtual size: 26.6MB

.pdata
Size: 91KB - Virtual size: 91KB

.rsrc
Size: 71KB - Virtual size: 70KB