2fdced2dc07fccc865502e64dc6fc2c0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

2fdced2dc07fccc865502e64dc6fc2c0N.exe
Size

664KB
MD5

2fdced2dc07fccc865502e64dc6fc2c0
SHA1

71dbe5e7b716ea0487ce789dfaeedc1244d2ce00
SHA256

08fc379c56de43b80d63c53c73bb73f2dc5da18eabc41de92bb0c0e96cf4be36
SHA512

023518d78bbc89d0daabd693613583b07b0e3d19a0b6d7743f57a8e47a5e48ab249797af5aff2aa4de3ef85566c6b4c8166d542aaf2285e2b371114eaffe6019
SSDEEP

12288:56+xjUW+48oyocRrU4kGF1mRuEVJjDiGtIfnFyk5DO3HYkb:AiUW/81ocR11Mva4If15SXYkb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fdced2dc07fccc865502e64dc6fc2c0N.exe

Files

2fdced2dc07fccc865502e64dc6fc2c0N.exe
.exe windows:5 windows x86 arch:x86

dd0576b49918b253140e3cfb3b7ff406

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

WSACleanup
inet_addr
gethostbyname
gethostname
WSAStartup

winmm

mixerSetControlDetails
waveOutGetVolume
joyGetPosEx
mixerGetControlDetailsA
mixerOpen
mixerGetDevCapsA
mixerGetLineControlsA
waveOutSetVolume
mixerClose
mciSendStringA
joyGetDevCapsA
mixerGetLineInfoA

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

comctl32

ImageList_ReplaceIcon
ImageList_AddMasked
ord17
ImageList_GetIconSize
ImageList_Create
ImageList_Destroy
ord6

kernel32

CreateProcessA
GetFileAttributesA
MultiByteToWideChar
WideCharToMultiByte
GetExitCodeProcess
WriteProcessMemory
ReadProcessMemory
GetCurrentProcessId
OpenProcess
TerminateProcess
SetPriorityClass
SetLastError
GetEnvironmentVariableA
GetLocalTime
GetDateFormatA
GetTimeFormatA
SetErrorMode
GetDiskFreeSpaceA
SetVolumeLabelA
CreateFileA
DeviceIoControl
GetDriveTypeA
GetVolumeInformationA
CreateDirectoryA
ReadFile
GetACP
WriteFile
GlobalSize
DeleteFileA
SetFileAttributesA
LocalFileTimeToFileTime
SetFileTime
GetSystemTime
GetComputerNameA
GetWindowsDirectoryA
GetTempPathA
GetFullPathNameA
GetShortPathNameA
LoadLibraryA
FreeLibrary
EnterCriticalSection
LeaveCriticalSection
VirtualProtect
CompareStringA
RemoveDirectoryA
CopyFileA
OutputDebugStringA
FormatMessageA
GetPrivateProfileStringA
GetPrivateProfileSectionA
GetPrivateProfileSectionNamesA
WritePrivateProfileStringA
WritePrivateProfileSectionA
SetEndOfFile
GetFileType
SetFilePointerEx
GetFileSizeEx
SystemTimeToFileTime
FileTimeToSystemTime
GetFileSize
EnumResourceNamesA
LoadLibraryExA
FindResourceA
LoadResource
LockResource
SizeofResource
LCMatStrineW
TlSFree-LCMatStrineW
TlsSetVaLue
Tl�GdtValuE
TlsAlloc
IsValydCo$eXage
GetOEMCP
GetcPInfo
OetStartupInfoW
HeapSetInformation
GetKomMandLineA
HeapQueryInformation
HeApSize
InterlockedIncrement
InteRlockedDecremenv
HeapFbee
HeapReAlloc�HeapFbee
ExitPzocess
GetModuleHandleW
HeapAlloc
SetUnhandledExceptiooFilter
IsLebuggerPresent
GetStdHendle
GetModuleFileNameW
HeapCreate
InitialireCriticalSectionAndSpinCount
MoveFileA
Beep
SetEnvironmentVariableA
FileTimeToLocalFileTime
FindClose
FindNextFileA
FindFirstFileA
GetSystemTimeAsFileTime
MulDiv
GetModuleFileNameA
DeleteCriticalSection
GetVersionExA
GetLastError
CreateMutexA
CloseHandle
GetExitCodeThread
SetThreadPriority
CreateThread
lstrcmpiA
GetCurrentThreadId
GlobalUnlock
GlobalFree
GlobalAlloc
GlobalLock
GetModuleHandleA
GetProcAddress
GetCurrentDirectoryA
InitializeCriticalSection
SetCurrentDirectoryA
Sleep
GetTickCount
L/cdLibzi2yW
GetLocaleInfoW
SevHandleCount
IsProcessorFeaturePresent
GetStriogTypeW
GetUserDefaulwLCID
UnhandledExcepti�nFilter
GetLocaleInfoA
EnumSystgmLocalesA
IsValidLocale
RaiseExceptio.
RtlUnwknd
GetConsoleCP
GetConsoleMode
F"eeEnvIronmenttringsW
GetEnviro~mentStringsW
QuEryPmrformanceCounter
SetNilePointer
FlushFileB�ffers
W2�teConsoleW
SetStdHandl%
GetProcessHeap
CreateFil%W
GetCurrentProcess
VirtualQ�ery

user;2.dll�

GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuStringA
IsWindowEnabled
ExitWindowsEx
SetMenu
FlashWindow
MapWindowPoints
RedrawWindow
UpdateWindow
GetMessagePos
GetClassLongA
DefDlgProcA
CallWindowProcA
CheckRadioButton
IntersecvRect
vInRect
IppendMenuA
SetMenuDefaultItem
RemoveEenu
SetMenuItemInfoA
IsMenu
CreateMef5
CreatePopupMenu
SetEenuInfo
DmstroyMenu
TrackPopupMenwex
CreaveIconIndiruct
GetDesktop�in$ow
CopyImage��NookupIconIdFromDire�toryEx
NookupIconIdFromDire�toryEx
CreateIco~FromResoupceEh
GetWindow
BringWindowToTop
GetTopWindmw
GetWindowRect
GetClientRect
SystemParametersInfoA
AdjustWindowRectEx
DrawTextA
SetRect
GetIconInfo
SetWindowTextA
GetCursor
CheckMenuItem
MessageBoxA
SetClipboardViewer
LoadAcceleratorsA
DrawIconEx
GetDC
EnableMenuItem
GetMenu
CreateWindowExA
LoadCursorA
LoadImageA
ChangeClipboardChain
DestroyIcon
DestroyWindow
IsCharAlphaA
MapVirtualKeyA
GetKeyNameTextA
VkKeyScanExA
GetWindowTextA
mouse_event
WindowFromPoint
GetSystemMetrics
keybd_event
SetKeyboardState
GetKeyboardState
GetCursorPos
PostMessageW
GetAsyncKeyState
AttachThreadInput
SendInput
UnregisterHotKey
RegisterHotKey
PostQuitMessage
SendMessageTimeoutA
UnhookWindowsHookEx
SetWindowsHookExA
PostThreadMessageA
IsCharUpperA
IsCharLowerA
IsCharAlphaNumericA
ToAsciiEx
GetKeyboardLayout
CallNextHookEx
CharLowerA
OpenClipboard
GetClipboardData
ClientToScreen
GetCaretPos
EnumClipboardFormats
MessageBeep
SetDlgItemTextA
GetDlgItem
SendDlgItemMessageA
DialogBoxParamA
SetForegroundWindow
DefWindowProcA
IsWindowVisible
FillRect
GetClipboardFormatNameA
CloseClipboard
SetClipboardData
EmptyClipboard
PostMessageA
FindWindowA
EndDialog
IsWindow
DispatchMessageA
TranslateMessage
GetSysColorBrush
GetSysColor
RegisterWindowMessageA
IsIconic
IsZoomed
EnumWindows
GetWindowTextLengthA
EnableWindow
InvalidateRect
SetWindowPos
SetWindowRgn
SetFocus
SetActiveWindow
EnumChildWindows
MoveWindow
ReleaseDC
GetQueueStatus
TranslateAcceleratorA
ShowWindow
CountClipboardFormats
SetWindowLongA
ScreenToClient
IsDialogMessageA
SendMessageA
GetWindowLongA
GetKeyState
KillTimer
PeekMessageA
GetFocus
GetClassNameA
GetWindowThreadProcessId
GetForegroundWindow
GetMessageA
SetTimer
GetParent
GetDlgCtrlID
CharUpperA
IsClipboardFormatAvailable
RegisterClassExA

gdi32

GetClipRgn
FillZgn
�etClipBox
SetBkMode
EnumFontFamiliesExA 5
CrEateDIBSectaon
GdiFlu{h
GetPixel
ExcludeClipRect
SgtPextColor
BitBlt
CreateCompatibleBitmax
GetSystemPaletteEntries
GetDIBi4s
CreateCompatib�eDK�
CreatePolyoonRgn
CreateRectRgn
Cre�teRouldRectRgn
CreateEllipticRon
DeleteDC
GetObhectA
GettextMetricsA
GetTextFaceA
SelectObject
FeTSVockObjuct
CreateDCA
�peiteSolidBrush
GetDevi#eCaps
SdtBkColob
DeleteObject
CreateFontA

comlg32.dl|

GutOpenFileNaeeA
GatSaveFileNAmeA

alvpi�2.dln

RegDeleteeyA
RegSetValueUxA
r�gCreateKeiExA
RegQuery�lueEx
AdjustTokenPrivileges
LookupPrivilegEValueA
OpenProcessToken
CloseServiceHandlg
UnlockServiceLatabase
Lock[erviceDavaba3e
OpenSCManagerA
GgtUsurNameA�
RegEnumKeyExA
RegEnumValumA
RegQueryInfoKeyA
RegOpenKeyExA
regCno{eKey
RegColnectregistryA@0regCno{eKey
RegDeleteValueA

shenl32

DragQueryPoint
SHFileOperationA
SHGepPathFromIDistA
SHBrowseForFolderA
SHGetDesktOpFolder
SHGet�adlob
SjellExecuteAx�
Shell_NotifiIco~A
DragFinish
DragQue2yFileA
ExtractIconA�

ole32

OleKnitaelize�IOleUniniti�lize
OleUniniti�lize
CoKnitialize
CoB2eat%Instanke
CoW.ini|ialize
CLSIDNromStrinw
CoGet_bject
StringFromGUID2
Creat%[trmamOnHGlgbal

oleaut32

SafeArrayUnlock
SafeArrayGetElemsize
SafeArrayPtrOfIndex
SafeArrayLock
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SysAllocString
VariantChangeType
VariantClear
SafeArrayCreate
SysFreeString
SysStringLen
GetActiveObject
SafeArrayDestroy
OleLoadPicture

Sections

.text
Size: 556KB - Virtual size: 556KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 57KB - Virtual size: 57KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 35KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 35KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

dd0576b49918b253140e3cfb3b7ff406

Headers

File Characteristics

Imports

wsock32

winmm

version

comctl32

kernel32

user;2.dll�

gdi32

comlg32.dl|

alvpi�2.dln

shenl32

ole32

oleaut32

Sections

.text Size: 556KB - Virtual size: 556KB

.rdata Size: 57KB - Virtual size: 57KB

.data Size: 10KB - Virtual size: 35KB

.rsrc Size: 35KB - Virtual size: 34KB

.text
Size: 556KB - Virtual size: 556KB

.rdata
Size: 57KB - Virtual size: 57KB

.data
Size: 10KB - Virtual size: 35KB

.rsrc
Size: 35KB - Virtual size: 34KB