01444f7fd7509238af9fd25701a637c0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

01444f7fd7509238af9fd25701a637c0N.exe
Size

212KB
MD5

01444f7fd7509238af9fd25701a637c0
SHA1

cb7a1af7e521ce4cf52b8aaa65eb41699ac3f625
SHA256

75ab84d8d776893a46882e039caa1828633a395419d2040a009985202b2016e7
SHA512

37653a7d746221dedb185ce912f346159d52d791da46a7e46f1b5464635c02d362fb051aac50ace3df2c1b93b41ca6487c0e44f77509c62b28b3075c484414e6
SSDEEP

3072:pVMZEBUvx7CiTS+kA7lJ1Gn7UgHlpyzPm3KnCPjhQutOUzR+aP/wv+9CkdB5SX9W:3MZWSx7yApJ4Qz9nK9ld+anwA/uX9W

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
01444f7fd7509238af9fd25701a637c0N.exe

Files

01444f7fd7509238af9fd25701a637c0N.exe
.exe windows:5 windows x86 arch:x86

9a0a377c7590c106ca5b4fdba8ee8806

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

user32

SendMessageA
InvalidateRect
DefWindowProcA
BeginPaint
GetClientRect
FillRect
DrawTextA
EndPaint
SetClipboardData
EndDialog
ScreenToClient
GetWindowRect
EnableMenuItem
GetSystemMenu
SetClassLongA
IsWindowEnabled
SetWindowPos
GetSysColor
GetWindowLongA
SetCursor
LoadCursorA
CheckDlgButton
GetMessagePos
LoadBitmapA
CallWindowProcA
IsWindowVisible
CloseClipboard
ShowWindow
EmptyClipboard
RegisterClassA
TrackPopupMenu
AppendMenuA
CreatePopupMenu
GetSystemMetrics
SetDlgItemTextA
GetDlgItemTextA
MessageBoxIndirectA
CharPrevA
DispatchMessageA
PeekMessageA
DestroyWindow
CreateDialogParamA
SetTimer
SetWindowTextA
PostQuitMessage
SetForegroundWindow
wsprintfA
SendMessageTimeoutA
FindWindowExA
SystemParametersInfoA
CreateWindowExA
GetClassInfoA
DialogBoxParamA
CharNextA
OpenClipboard
ExitWindowsEx
IsWindow
GetDlgItem
SetWindowLongA
LoadImageA
GetDC
EnableWindow

shell32

SHFileOperationA
ShellExecuteA
SHGetFileInfoA
SHGetSpecialFolderLocation
SHBrowseForFolderA
SHGetPathFromIDListA

ole32

CoTaskMemFree
OleInitialize
OleUninitialize
CoCreateInstance

advapi32

RegEnumKeyA
RegCloseKey
RegDeleteValueA
RegQueryValueExA
RegSetValueExA
RegCreateKeyExA
RegEnumValueA
RegOpenKeyExA
RegDeleteKeyA

gdi32

GetDeviceCaps
DeleteObject
CreateBrushIndirect
CreateFontIndirectA
SetBkMode
SetTextColor
SelectObject
SetBkColor

opengl32

glNormal3d
glColor3uiv
glTexCoord2i
glNormal3dv
glClear
glFogiv
glLoadMatrixd
glEvalMesh1

comctl32

ImageList_Destroy
ImageList_Create
ImageList_AddMasked

version

GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA

kernel32

GetLocaleInfoA
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCurrentProcessId
QueryPerformanceCounter
HeapFree
VirtualFree
HeapCreate
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetStdHandle
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
LeaveCriticalSection
EnterCriticalSection
GetStartupInfoA
GetSystemTimeAsFileTime
CompareFileTime
SearchPathA
GetShortPathNameA
GetFullPathNameA
MoveFileA
SetCurrentDirectoryA
GetFileAttributesA
FlushFileBuffers
RaiseException
HeapSize
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
RtlUnwind
InitializeCriticalSectionAndSpinCount
HeapAlloc
VirtualAlloc
HeapReAlloc
GetConsoleMode
GetConsoleCP
GetLastError
CreateDirectoryA
SetFileAttributesA
Sleep
GetTickCount
GetFileSize
GetModuleFileNameA
GetCurrentProcess
CopyFileA
TlsFree
FindClose
ExitProcess
GetWindowsDirectoryA
SetFileTime
GetCommandLineA
DeleteCriticalSection
GlobalCompact
CancelDeviceWakeupRequest
GetStringTypeExW
GetPrivateProfileIntA
TryEnterCriticalSection
SetLastError
SetFileAttributesW
GetTempPathA
DeleteFileA
FindFirstFileA
FindNextFileA
SetFilePointer
MulDiv
ReadFile
WriteFile
GetPrivateProfileStringA
WritePrivateProfileStringA
MultiByteToWideChar
FreeLibrary
GetProcAddress
LoadLibraryExA
GetModuleHandleA
GetExitCodeProcess
WaitForSingleObject
GlobalAlloc
GlobalFree
ExpandEnvironmentStringsA
lstrcmpA
lstrcmpiA
CloseHandle
GetVersion
GetSystemDirectoryA
lstrcatA
lstrlenA
GetTempFileNameA
CreateFileA
RemoveDirectoryA
CreateProcessA
CreateThread
GlobalLock
GlobalUnlock
GetDiskFreeSpaceA
lstrcpynA
LoadLibraryA
SetErrorMode

Sections

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 20KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 13KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 94KB - Virtual size: 96KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

9a0a377c7590c106ca5b4fdba8ee8806

Headers

DLL Characteristics

File Characteristics

Imports

user32

shell32

ole32

advapi32

gdi32

opengl32

comctl32

version

kernel32

Sections

.text Size: 90KB - Virtual size: 90KB

.rdata Size: 20KB - Virtual size: 20KB

.data Size: 5KB - Virtual size: 13KB

.rsrc Size: 94KB - Virtual size: 96KB

.text
Size: 90KB - Virtual size: 90KB

.rdata
Size: 20KB - Virtual size: 20KB

.data
Size: 5KB - Virtual size: 13KB

.rsrc
Size: 94KB - Virtual size: 96KB