5e961048f895165d7678b25f1ce22f10N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

5e961048f895165d7678b25f1ce22f10N.exe
Size

1.9MB
MD5

5e961048f895165d7678b25f1ce22f10
SHA1

19098b7352be59f6297bce9a000d348ba0302d94
SHA256

b485543b767ec6c450ce45e5fbb20d5a2497e591dfea5b7f3e5bc24a53faf30c
SHA512

94258271ecf987fd18009cd28d18a84276ee0384fac2ea9417ec74adcd6e12791ccaf07df56f4803f09778811527eb264f21cdc966d0b4193969376608d6121e
SSDEEP

24576:br8MsCsiKT4xOZHxR6JMtnv3GV15PsjReJz0VAR0DOKjZbySHMn/x6w0:mjt+M3GX5s8JQV/DOKjZb9HMnZ6w0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
5e961048f895165d7678b25f1ce22f10N.exe

Files

5e961048f895165d7678b25f1ce22f10N.exe
.exe windows:6 windows x86 arch:x86

b423675f417116effc04c7b07859089c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\Jenkins\.jenkins\workspace\MGame\general_user\AccountCenter\bin\Release\AccountCenter.pdb

Imports

kernel32

GetModuleHandleW
VirtualProtect
GetCurrentThreadId
GetCurrentProcessId
WaitForSingleObject
SetUnhandledExceptionFilter
GetModuleFileNameW
MultiByteToWideChar
FindResourceW
SizeofResource
LockResource
LoadResource
GetProcAddress
TerminateProcess
GetCurrentProcess
CreateMutexW
DeleteCriticalSection
IsBadReadPtr
CreateFileW
GetFileSize
ReadFile
Sleep
InitializeCriticalSectionEx
RaiseException
DecodePointer
VerifyVersionInfoW
TlsSetValue
TlsGetValue
CreateWaitableTimerW
SetWaitableTimer
CreateEventW
SleepEx
ReleaseMutex
InitializeCriticalSectionAndSpinCount
GetQueuedCompletionStatus
CreateIoCompletionPort
SetLastError
VerSetConditionMask
FormatMessageA
LocalFree
TlsFree
TlsAlloc
TerminateThread
QueueUserAPC
WaitForMultipleObjects
SetEvent
PostQueuedCompletionStatus
OutputDebugStringW
WideCharToMultiByte
CopyFileW
LoadLibraryW
FreeLibrary
DeleteFileW
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetStartupInfoW
FindResourceExW
IsValidCodePage
FindFirstFileExW
SetStdHandle
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
CloseHandle
IsDebuggerPresent
EncodePointer
GetStringTypeW
FormatMessageW
TryEnterCriticalSection
DuplicateHandle
WaitForSingleObjectEx
SwitchToThread
GetCurrentThread
GetExitCodeThread
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
QueryPerformanceCounter
QueryPerformanceFrequency
GetSystemTimeAsFileTime
GetTickCount
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
WriteFile
FlushFileBuffers
lstrcpynW
lstrcpyW
lstrlenW
MulDiv
GetACP
ExitProcess
FreeResource
lstrcmpW
FindFirstFileW
FindNextFileW
SetEndOfFile
SetFilePointer
SetFileTime
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetVersion
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
GetTempFileNameW
GetTempPathW
ResumeThread
ResetEvent
GetLocalTime
IsProcessorFeaturePresent
UnhandledExceptionFilter
InitializeSListHead
LoadLibraryExW
CreateDirectoryW
SetFileAttributesW
FindClose
GetStdHandle
CreateTimerQueue
SignalObjectAndWait
CreateThread
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibraryAndExitThread
GetModuleHandleA
GetVersionExW
VirtualAlloc
VirtualFree
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
GetSystemWindowsDirectoryW
DeviceIoControl
lstrcmpA
RtlUnwind
GetFileAttributesExW
GetFileType
SetFilePointerEx
GetConsoleOutputCP
GetConsoleMode
GetTimeZoneInformation
SetConsoleCtrlHandler
ExitThread
GetModuleHandleExW
GetDateFormatW
GetTimeFormatW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetFileSizeEx
ReadConsoleW

user32

UnionRect
IsRectEmpty
SetWindowLongW
GetParent
GetClassNameW
GetWindow
MonitorFromWindow
DefWindowProcW
CallWindowProcW
RegisterClassW
RegisterClassExW
GetClassInfoExW
ShowWindow
EnableWindow
SetPropW
GetPropW
LoadCursorW
LoadImageW
wvsprintfW
SetCursor
InflateRect
OffsetRect
SetWindowRgn
MessageBoxW
CharPrevW
DrawTextW
SetRect
DestroyIcon
DrawIconEx
GetIconInfo
GetMessagePos
MoveWindow
GetDlgCtrlID
DrawFocusRect
FillRect
HideCaret
ShowCaret
ClientToScreen
GetSysColor
GetWindowDC
GetWindowTextW
GetWindowTextLengthW
CreateAcceleratorTableW
InvalidateRgn
RemovePropW
MapWindowPoints
IsWindowEnabled
GetDC
ReleaseDC
MonitorFromPoint
GetMessageW
TranslateMessage
DispatchMessageW
SendMessageW
CreateWindowExW
IsWindow
IsChild
DestroyWindow
UpdateLayeredWindow
IsZoomed
CharNextW
SetFocus
GetFocus
GetKeyState
SetCapture
FindWindowExW
IntersectRect
ScreenToClient
SetCaretPos
GetCaretBlinkTime
CreateCaret
GetCursorPos
GetClientRect
InvalidateRect
AttachThreadInput
SetWindowPos
BringWindowToTop
GetForegroundWindow
SetForegroundWindow
GetUpdateRect
EndPaint
BeginPaint
ReleaseCapture
GetWindowRect
KillTimer
SetTimer
PostQuitMessage
wsprintfW
ChangeWindowMessageFilter
SetWindowTextW
IsIconic
IsWindowVisible
PostMessageW
GetMonitorInfoW
GetWindowThreadProcessId
GetWindowLongW
PtInRect

gdi32

DeleteDC
GetDIBits
GetDeviceCaps
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectW
CreatePen
DeleteObject
GetStockObject
Rectangle
RestoreDC
SaveDC
SelectObject
GetTextMetricsW
GetObjectW
SetWindowOrgEx
CreateRoundRectRgn
CombineRgn
CreateRectRgnIndirect
GetCharABCWidthsW
GetClipBox
GetTextExtentPoint32W
SelectClipRgn
ExtSelectClipRgn
SetBkColor
SetBkMode
StretchBlt
SetStretchBltMode
SetTextColor
CreateDIBSection
SetDIBColorTable
TextOutW
ExtTextOutW
CreateSolidBrush
GetTextColor
CreateDCW
SetDIBitsToDevice

shell32

SHGetSpecialFolderPathW
ord165
ShellExecuteExW

ole32

CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
OleInitialize
OleUninitialize
OleLockRunning
CoCreateInstance

oleaut32

SysFreeString
SysAllocStringLen
SysAllocString
SafeArrayCreate
SafeArrayPutElement
VariantInit
SysStringLen
VariantClear

shlwapi

PathFindFileNameW
StrCmpNIW
SHAutoComplete
StrTrimA
StrStrIA
StrStrIW
PathAppendW
PathRemoveFileSpecW
PathFileExistsW
PathCombineW
StrCmpIW

gdiplus

GdipLoadImageFromFile
GdipGetImagePixelFormat
GdipDrawImageRectI
GdipLoadImageFromStreamICM
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipDrawEllipseI
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipAlloc
GdipFree
GdipCreatePath
GdipDeletePath
GdipAddPathLineI
GdipAddPathArcI
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipCreatePen1
GdipDeletePen
GdipSetPenMode
GdipSetPenDashStyle
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetSmoothingMode
GdipDrawLineI
GdipDrawRectangleI
GdipDrawPath
GdipFillEllipseI
GdipClosePathFigure
GdipCreateTexture
GdipCloneImage
GdipDisposeImage
GdipSaveImageToFile
GdipGetImageGraphicsContext
GdipGetImageWidth
GdipGetImageHeight
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipCreateBitmapFromScan0
GdipCreateHBITMAPFromBitmap
GdipCloneBitmapAreaI
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipSetInterpolationMode
GdipGraphicsClear
GdipFillPath
GdipDrawImagePointsI
GdipDrawImageRectRectI
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipAddPathArc

version

GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW

ws2_32

WSASend
setsockopt
WSAGetLastError
htons
ioctlsocket
WSASocketW
listen
WSASetLastError
WSARecv
shutdown
WSAStartup
WSACleanup
bind
closesocket

mswsock

GetAcceptExSockaddrs
AcceptEx

wininet

InternetGetConnectedState

iphlpapi

GetAdaptersInfo

urlmon

URLDownloadToCacheFileW
URLDownloadToFileW

comctl32

_TrackMouseEvent
ImageList_DrawEx
ord17
ImageList_GetIconSize
InitCommonControlsEx

advapi32

RegEnumKeyExW
RegCreateKeyExW
GetTokenInformation
OpenProcessToken
RegSetValueExW
RegCreateKeyW
RegQueryValueExW
RegCloseKey
RegOpenKeyExW

msimg32

AlphaBlend
GradientFill

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 270KB - Virtual size: 269KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 32KB - Virtual size: 65KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 203KB - Virtual size: 203KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 79KB - Virtual size: 78KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

b423675f417116effc04c7b07859089c

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

shell32

ole32

oleaut32

shlwapi

gdiplus

version

ws2_32

mswsock

wininet

iphlpapi

urlmon

comctl32

advapi32

msimg32

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 270KB - Virtual size: 269KB

.data Size: 32KB - Virtual size: 65KB

.rsrc Size: 203KB - Virtual size: 203KB

.reloc Size: 79KB - Virtual size: 78KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 270KB - Virtual size: 269KB

.data
Size: 32KB - Virtual size: 65KB

.rsrc
Size: 203KB - Virtual size: 203KB

.reloc
Size: 79KB - Virtual size: 78KB