7de0270803209488b042f26db5ade500N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

7de0270803209488b042f26db5ade500N.exe
Size

6.9MB
MD5

7de0270803209488b042f26db5ade500
SHA1

278cabd993d2370dad30757b84fed75ba4bfb908
SHA256

ff9d1fd8ff67ec8928a02b97738e42e46c58ea7cdfeb243a667e25efa013ef9a
SHA512

e7f14de98324d2c73cfd861f2f9345567b6ff5c7011722d8a943a6e829bdcdee07d4a18b21e8833f6c5fbbf01142e3773b44cbd4ab9f0a8d3c18690a2a54dfef
SSDEEP

98304:nEX4IM37wZONQy0Q/Zgeakz9daWiroPY12FUnPA3lG40O9QppnP3GJzwf:EX413EZOvvY14iJP2Jw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7de0270803209488b042f26db5ade500N.exe

Files

7de0270803209488b042f26db5ade500N.exe
.exe windows:4 windows x86 arch:x86

5f3161e73c1cc83853b912c3a70c7939

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

mfc42

ord698
ord1182
ord354
ord665
ord603
ord1168
ord823
ord1871
ord860
ord859
ord4202
ord4277
ord4187
ord535
ord858
ord924
ord6571
ord5186
ord273
ord5818
ord1969
ord1979
ord2740
ord882
ord2801
ord6383
ord3663
ord396
ord800
ord4129
ord342
ord825
ord5440
ord540
ord879
ord537

msvcrt

_initterm
__dllonexit

msvfw32

DrawDibDraw

avifil32

AVIStreamGetFrame
AVIStreamInfoA

winmm

midiStreamOut
midiOutPrepareHeader
midiStreamProperty
midiStreamOpen
midiOutUnprepareHeader
waveOutOpen
waveOutGetNumDevs
waveOutClose
waveOutReset
waveOutPause
waveOutWrite
waveOutUnprepareHeader
PlaySoundA
waveOutPrepareHeader
midiStreamStop
midiOutReset
midiStreamClose
midiStreamRestart
sndPlaySoundA

ws2_32

socket
htons
WSAAsyncSelect
closesocket
send
select
setsockopt
WSAStartup
gethostbyname
inet_ntoa
inet_addr
gethostname
recvfrom
ioctlsocket
connect
recv
getpeername
accept
__WSAFDIsSet
WSASetLastError
WSACleanup

rasapi32

RasGetConnectStatusA
RasHangUpA

kernel32

GetProfileStringA
EnterCriticalSection
ReleaseSemaphore
ResumeThread
CreateSemaphoreA
InterlockedDecrement
MultiByteToWideChar
LocalFree
GetSystemDirectoryA
GetWindowsDirectoryA
GetCurrentProcess
WideCharToMultiByte
GetLocalTime
GetVersion
FlushInstructionCache
Process32Next
Process32First
CreateToolhelp32Snapshot
SetFilePointer
GetFileSize
TerminateProcess
OpenProcess
LoadLibraryExA
SetLastError
WriteProfileStringA
GetTimeZoneInformation
GetLocaleInfoA
InterlockedIncrement
Beep
VirtualFree
VirtualAlloc
LocalAlloc
lstrcpynA
GetThreadLocale
GetStartupInfoA
UnhandledExceptionFilter
RtlUnwind
RaiseException
GetStdHandle
TlsSetValue
TlsGetValue
TlsFree
TlsAlloc
VirtualQuery
GlobalFindAtomA
GlobalDeleteAtom
GlobalAddAtomA
GetStringTypeExA
GetCPInfo
GetACP
EnumCalendarInfoA
GetTempFileNameA
FileTimeToSystemTime
IsDBCSLeadByte
lstrcmpA
lstrcmpiA
FileTimeToLocalFileTime
GetFileType
DuplicateHandle
SystemTimeToFileTime
DosDateTimeToFileTime
SetFileTime
FormatMessageA
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GlobalGetAtomNameA
GlobalHandle
LocalReAlloc
GetFileTime
GetCurrentThread
GlobalFlags
GetProfileIntA
SetErrorMode
GetProcessVersion
GetOEMCP
GetSystemTime
HeapSize
SetStdHandle
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetEnvironmentVariableA
HeapDestroy
HeapCreate
SetEnvironmentVariableA
LCMapStringA
LCMapStringW
IsBadWritePtr
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
CompareStringA
CompareStringW
IsBadReadPtr
IsBadCodePtr
WriteFile
ReadFile
GetLastError
WaitForMultipleObjects
CreateFileA
DeviceIoControl
SetEvent
FindResourceA
LoadResource
LockResource
GetModuleFileNameA
GetCurrentThreadId
ExitProcess
GlobalSize
GlobalFree
DeleteCriticalSection
InitializeCriticalSection
lstrcatA
WinExec
lstrcpyA
FindNextFileA
GlobalReAlloc
HeapFree
HeapReAlloc
GetProcessHeap
HeapAlloc
GetUserDefaultLCID
GetFullPathNameA
FreeLibrary
LoadLibraryA
lstrlenA
lstrlenW
GetVersionExA
WritePrivateProfileStringA
GetPrivateProfileStringA
CreateThread
CreateEventA
Sleep
GlobalAlloc
GlobalLock
GlobalUnlock
GetTempPathA
FindFirstFileA
FindClose
SetFileAttributesA
GetFileAttributesA
MoveFileA
DeleteFileA
CopyFileA
CreateDirectoryA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetVolumeInformationA
GetModuleHandleA
GetProcAddress
GetDiskFreeSpaceA
MulDiv
SetLocalTime
GetCommandLineA
GetTickCount
CreateProcessA
WaitForSingleObject
CloseHandle
InterlockedExchange
LeaveCriticalSection

user32

ScrollWindowEx
IsDialogMessageA
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
wvsprintfA
SetWindowContextHelpId
MapDialogRect
GetNextDlgGroupItem
PostThreadMessageA
AdjustWindowRectEx
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollPos
RegisterClassA
GetClassLongA
GetMessageTime
GetLastActivePopup
GetWindowPlacement
EndDialog
CreateDialogIndirectParamA
DestroyWindow
EndPaint
BeginPaint
GetWindowTextLengthA
CreateWindowExA
CharUpperA
ChangeClipboardChain
CountClipboardFormats
EnumClipboardFormats
GetClipboardFormatNameA
RegisterHotKey
RegisterWindowMessageA
SetClipboardViewer
UnregisterHotKey
CharNextA
GetKeyboardType
CreateIconIndirect
GetIconInfo
CopyIcon
LoadStringA
GetDlgItem
FindWindowA
GetWindowThreadProcessId
keybd_event
GetClassNameA
VkKeyScanExA
GetKeyboardLayout
CheckMenuItem
GetDesktopWindow
IsMenu
GetMenuItemRect
DrawMenuBar
RemovePropA
GetSysColorBrush
GetMenuItemInfoA
GetForegroundWindow
GetDoubleClickTime
ClipCursor
GetWindowTextA
SetWindowTextA
GetMenuItemCount
GetMenuItemID
GetMenuStringA
GetMenuState
GetTabbedTextExtentA
GrayStringA
TabbedTextOutA
WindowFromDC
EnumChildWindows
GetWindowDC
UnhookWindowsHookEx
CallNextHookEx
SetWindowsHookExA
GetPropA
MoveWindow
CallWindowProcA
SetPropA
DrawTextA
GetCursor
DrawStateA
GetNextDlgTabItem
SystemParametersInfoA
TranslateMessage
LoadIconA
DrawFrameControl
DrawEdge
DrawFocusRect
WindowFromPoint
GetMessageA
DispatchMessageA
SetRectEmpty
RegisterClipboardFormatA
CreateIconFromResourceEx
CreateIconFromResource
DrawIconEx
CreatePopupMenu
AppendMenuA
ModifyMenuA
CreateMenu
CreateAcceleratorTableA
GetDlgCtrlID
GetSubMenu
EnableMenuItem
ClientToScreen
EnumDisplaySettingsA
LoadImageA
ShowWindow
IsWindowEnabled
TranslateAcceleratorA
GetKeyState
CopyAcceleratorTableA
PostQuitMessage
IsZoomed
GetSystemMenu
DeleteMenu
GetClassInfoA
DefWindowProcA
GetMenu
SetMenu
PeekMessageA
IsIconic
SetFocus
GetActiveWindow
GetWindow
DestroyAcceleratorTable
SetWindowRgn
GetMessagePos
ScreenToClient
ChildWindowFromPointEx
CopyRect
LoadBitmapA
WinHelpA
KillTimer
SetTimer
ReleaseCapture
GetCapture
SetCapture
GetScrollRange
SetScrollRange
SetScrollPos
InflateRect
SetRect
IntersectRect
DestroyIcon
PtInRect
OffsetRect
IsWindowVisible
RedrawWindow
GetWindowLongA
SetWindowLongA
GetSysColor
SetActiveWindow
SetCursorPos
LoadCursorA
SetCursor
GetDC
FillRect
InvertRect
IsRectEmpty
ReleaseDC
IsChild
TrackPopupMenu
DestroyMenu
SetForegroundWindow
GetWindowRect
EqualRect
UpdateWindow
ValidateRect
InvalidateRect
GetClientRect
GetFocus
GetParent
GetTopWindow
PostMessageA
IsWindow
SetParent
DestroyCursor
SendMessageA
SetWindowPos
MessageBeep
MessageBoxA
GetCursorPos
GetSystemMetrics
IsClipboardFormatAvailable
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
wsprintfA
WaitForInputIdle
SendDlgItemMessageA
FrameRect
MapWindowPoints
UnregisterClassA
EnableWindow

gdi32

FillRgn
PatBlt
CreatePen
SelectObject
CreatePatternBrush
CreateBitmap
CreateHatchBrush
CreateBrushIndirect
CreateDCA
CreateCompatibleBitmap
GetPolyFillMode
GetStretchBltMode
GetROP2
GetBkColor
GetBkMode
GetTextColor
CreateRoundRectRgn
CreateEllipticRgn
PathToRegion
EndPath
BeginPath
GetWindowOrgEx
GetViewportOrgEx
GetWindowExtEx
GetDIBits
RealizePalette
SelectPalette
StretchBlt
CreatePalette
GetSystemPaletteEntries
CreateDIBitmap
DeleteObject
SelectClipRgn
CreateRectRgn
GetClipRgn
SetStretchBltMode
SetPixel
CreateDIBSection
CreateRectRgnIndirect
SetBkColor
TextOutA
SetBkMode
SetTextColor
CombineRgn
CreateFontA
SetWindowOrgEx
SaveDC
RestoreDC
CreatePenIndirect
PtVisible
RectVisible
ExtTextOutA
Escape
GetTextMetricsA
AbortDoc
SetBrushOrgEx
ExtSelectClipRgn
GetViewportExtEx
GetMapMode
CopyMetaFileA
ExcludeClipRect
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SetMapMode
SetROP2
SetPolyFillMode
TranslateCharsetInfo
MoveToEx
LineTo
OffsetRgn
FrameRgn
CreateSolidBrush
CreateFontIndirectA
GetStockObject
GetObjectA
EndPage
EndDoc
DeleteDC
StartDocA
StartPage
BitBlt
GetPixel
CreateCompatibleDC
SetPixelV
Ellipse
Rectangle
LPtoDP
DPtoLP
GetCurrentObject
RoundRect
Pie
Chord
SetDIBitsToDevice
Arc
Polygon
GetTextExtentPoint32A
CreatePolygonRgn
GetDeviceCaps
GetClipBox

msimg32

AlphaBlend
TransparentBlt
GradientFill

winspool.drv

DocumentPropertiesA
SetPrinterA
EnumPrintersA
OpenPrinterA
ClosePrinter
GetPrinterA

comdlg32

GetFileTitleA
PrintDlgA
GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError
ChooseFontA
ChooseColorA

advapi32

RegCreateKeyExA
RegQueryValueA
RegSetValueExA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey

shell32

Shell_NotifyIconA
DragAcceptFiles
DragFinish
DragQueryFileA
SHGetSpecialFolderPathA
ShellExecuteA

ole32

CreateILockBytesOnHGlobal
OleDuplicateData
RevokeDragDrop
CoLockObjectExternal
DoDragDrop
OleGetClipboard
OleIsCurrentClipboard
OleFlushClipboard
CoGetClassObject
ReleaseStgMedium
CoTaskMemAlloc
CoTaskMemFree
CoUninitialize
CLSIDFromProgID
OleInitialize
OleUninitialize
CLSIDFromString
CreateStreamOnHGlobal
CoCreateInstance
OleRun
CoFreeUnusedLibraries
CoRegisterMessageFilter
CoRevokeClassObject
StgOpenStorageOnILockBytes
OleSetClipboard
StgCreateDocfileOnILockBytes

oleaut32

SafeArrayGetElemsize
VarDateFromStr
SysAllocStringLen
VariantTimeToSystemTime
SysStringLen
SysAllocStringByteLen
SysFreeString
UnRegisterTypeLi
OleCreateFontIndirect
GetActiveObject
LoadTypeLi
LHashValOfNameSys
RegisterTypeLi
GetErrorInfo
VariantCopy
VariantClear
VariantChangeType
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SafeArrayUnaccessData
SafeArrayAccessData
VariantCopyInd
VariantInit
SysAllocString
SafeArrayDestroy
SafeArrayCreate
SafeArrayPutElement

odbc32

ord50
ord45
ord51
ord15
ord23
ord14
ord11
ord4
ord41
ord1
ord2
ord43
ord48
ord49
ord20
ord68
ord46
ord44
ord8
ord59
ord9
ord10
ord3
ord19
ord72
ord12
ord18
ord13
ord61
ord16
ord5
ord17

comctl32

ImageList_Read
ImageList_DrawIndirect
ImageList_Duplicate
ImageList_ReplaceIcon
ImageList_GetIcon
ImageList_GetImageInfo
ImageList_LoadImageA
ImageList_GetImageCount
ord17
ImageList_EndDrag
ImageList_DragShowNolock
ImageList_DragMove
ImageList_DragLeave
ImageList_DragEnter
ImageList_Destroy
ImageList_Create
ImageList_BeginDrag
ImageList_Add
ImageList_AddMasked
ImageList_Draw
_TrackMouseEvent
ImageList_SetBkColor

oledlg

ord8

wininet

InternetCloseHandle

Sections

.text
Size: 4.2MB - Virtual size: 4.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

CODE
Size: 36KB - Virtual size: 34KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.5MB - Virtual size: 2.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 156KB - Virtual size: 663KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

DATA
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

BSS
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

m_sdaran
Size: 4KB - Virtual size: 21B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 40KB - Virtual size: 36KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5f3161e73c1cc83853b912c3a70c7939

Headers

File Characteristics

Imports

mfc42

msvcrt

msvfw32

avifil32

winmm

ws2_32

rasapi32

kernel32

user32

gdi32

msimg32

winspool.drv

comdlg32

advapi32

shell32

ole32

oleaut32

odbc32

comctl32

oledlg

wininet

Sections

.text Size: 4.2MB - Virtual size: 4.2MB

CODE Size: 36KB - Virtual size: 34KB

.rdata Size: 2.5MB - Virtual size: 2.5MB

.data Size: 156KB - Virtual size: 663KB

DATA Size: 4KB - Virtual size: 1KB

BSS Size: 24KB - Virtual size: 22KB

m_sdaran Size: 4KB - Virtual size: 21B

.rsrc Size: 40KB - Virtual size: 36KB

.text
Size: 4.2MB - Virtual size: 4.2MB

CODE
Size: 36KB - Virtual size: 34KB

.rdata
Size: 2.5MB - Virtual size: 2.5MB

.data
Size: 156KB - Virtual size: 663KB

DATA
Size: 4KB - Virtual size: 1KB

BSS
Size: 24KB - Virtual size: 22KB

m_sdaran
Size: 4KB - Virtual size: 21B

.rsrc
Size: 40KB - Virtual size: 36KB