Download_Ready_553465[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Download_Ready_553465.exe
Size

23.3MB
MD5

c14dcefd2f7814317acbb0747fce915f
SHA1

c26511c6edb46fdd63e705a9570459fdb1321ec2
SHA256

2d3361c52e00fa7c393633c9a09ba3dd4115399428f1b99a3c50a1c54dfa936b
SHA512

2d1ae9c11e4588c4a5d538fdf4c19c798340c6aab5a5f5510ebac38dc4df69878b84e2364cfd872db661052cb485d21b041087acc5272848532151f82a9440af
SSDEEP

393216:46b5R1iW9vFevjZ1wFC9WWajo0oeYvq4vHj5Xov/2MjdshHzeobmKNV+lMG5DMPF:46b5R1iW89WWajo0oeYvq4vHj54vuVzL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Download_Ready_553465.exe

Files

Download_Ready_553465.exe
.exe windows:6 windows x86 arch:x86

d0461df990406d115985c9a9aa005886

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetStdHandle
FindClose
InitializeCriticalSection
DeleteCriticalSection
GlobalMemoryStatus
ReadFile
IsValidLocale
MoveFileExW
IsProcessorFeaturePresent
EnumSystemLocalesW
GetEnvironmentVariableA
GetSystemTimeAsFileTime
AcquireSRWLockExclusive
DeleteTimerQueueTimer
GetCommandLineA
FindFirstFileExW
SleepEx
EncodePointer
SetEndOfFile
GetFileAttributesExW
QueryDepthSList
TlsAlloc
GetConsoleMode
ReadConsoleW
GetTimeZoneInformation
HeapFree
lstrcatA
GetFileSize
GetACP
ResetEvent
CreateEventW
GetDateFormatW
ExitThread
HeapReAlloc
GetCurrentProcessId
InterlockedFlushSList
InitializeSListHead
WriteFile
LocalFree
FileTimeToLocalFileTime
GetModuleHandleExW
GetEnvironmentStringsW
GetSystemDirectoryW
SetStdHandle
GetFileType
Sleep
RaiseException
GetLogicalProcessorInformation
CreateTimerQueueTimer
SignalObjectAndWait
GetProcAddress
SetUnhandledExceptionFilter
QueryPerformanceFrequency
DecodePointer
UnregisterWaitEx
WaitForSingleObject
GetTickCount
GetNumaHighestNodeNumber
SetPriorityClass
InterlockedPushEntrySList
FreeLibraryAndExitThread
GetCommandLineW
GetModuleFileNameW
GetLocaleInfoW
FreeLibrary
DeleteFileW
FreeEnvironmentStringsW
GlobalAlloc
WriteConsoleW
GlobalLock
CompareFileTime
TlsSetValue
HeapAlloc
ReleaseSemaphore
FlushFileBuffers
GetModuleHandleA
FindNextFileW
GetStartupInfoW
HeapSize
VirtualProtect
VerSetConditionMask
WaitForSingleObjectEx
GetLastError
GetCurrentThreadId
SetFilePointerEx
InitializeCriticalSectionAndSpinCount
SetFileAttributesW
InitializeCriticalSectionEx
FindFirstFileW
UnhandledExceptionFilter
TryEnterCriticalSection
ExitProcess
SwitchToThread
CloseHandle
GetFileAttributesW
CompareStringW
GetThreadTimes
GetCPInfo
GetFileInformationByHandle
QueryPerformanceCounter
WaitForMultipleObjects
CreateDirectoryW
VerifyVersionInfoW
IsValidCodePage
CreateFileW
SetEvent
SetThreadAffinityMask
GlobalFree
GetUserDefaultLCID
GetCurrentThread
TlsFree
ChangeTimerQueueTimer
GetOEMCP
GetConsoleOutputCP
InterlockedPopEntrySList
SetLastError
WideCharToMultiByte
GetVersion
VirtualFree
SetEnvironmentVariableW
ReleaseSRWLockExclusive
GetProcessHeap
SetFileTime
GetCurrentDirectoryW
GetProcessAffinityMask
FileTimeToSystemTime
GetCurrentProcess
GetThreadPriority
GetFullPathNameW
GetSystemInfo
GlobalUnlock
CreateTimerQueue
DuplicateHandle
FormatMessageW
SystemTimeToTzSpecificLocalTime
TlsGetValue
RtlUnwind
GetLogicalDriveStringsW
CreateSemaphoreW
SetThreadPriority
PeekNamedPipe
GetDriveTypeW
LeaveCriticalSection
VirtualAlloc
LCMapStringW
SetFilePointer
RegisterWaitForSingleObject
GetTimeFormatW
RemoveDirectoryW
GetModuleHandleW
GetVersionExW
LoadLibraryW
lstrlenA
EnterCriticalSection
LoadLibraryExW
GetFileSizeEx
MultiByteToWideChar
GetStringTypeW
GetTickCount64
IsDebuggerPresent
TerminateProcess
MoveFileW
CreateThread
UnregisterWait

user32

KillTimer
ScreenToClient
LoadStringW
SetDlgItemTextW
SetWindowTextW
EnableWindow
MoveWindow
CloseClipboard
GetDlgItem
MapDialogRect
GetParent
EndDialog
GetWindowTextW
GetWindowRect
EmptyClipboard
SetCursor
GetWindowTextLengthW
wsprintfA
MessageBoxW
GetFocus
CharUpperW
InvalidateRect
SetClipboardData
GetMonitorInfoA
SetTimer
MonitorFromWindow
MessageBoxA
PostMessageW
ShowWindow
SendMessageW
CheckDlgButton
LoadCursorW
GetKeyState
IsDlgButtonChecked
DialogBoxParamW
GetWindowLongW
OpenClipboard
SetFocus
LoadIconW
SystemParametersInfoW
SetWindowLongW

advapi32

CloseServiceHandle
CryptHashData
CryptReleaseContext
CryptGetHashParam
CryptImportKey
CryptEncrypt
CryptDestroyKey
CryptDestroyHash
CryptAcquireContextW
CryptCreateHash

shell32

SHBrowseForFolderW
SHGetPathFromIDListW
SHGetFileInfoW
SHGetSpecialFolderPathW

ole32

CoInitialize
OleInitialize
CoCreateInstance
CoTaskMemFree
CoUninitialize

oleaut32

SysAllocString
SysFreeString
VariantClear
SysAllocStringLen
SysStringLen

bcrypt

BCryptGenRandom

crypt32

CertFindCertificateInStore
CryptDecodeObjectEx
CertFreeCertificateChainEngine
CertEnumCertificatesInStore
CryptStringToBinaryW
CryptQueryObject
CertGetNameStringW
CertFreeCertificateContext
CertAddCertificateContextToStore
CertCreateCertificateChainEngine
PFXImportCertStore
CertFindExtension
CertOpenStore
CertCloseStore
CertGetCertificateChain
CertFreeCertificateChain

wldap32

ord73
ord301
ord147
ord133
ord79
ord142
ord167
ord127
ord145
ord219
ord46
ord14
ord216
ord208
ord41
ord117
ord26
ord27

ws2_32

recvfrom
sendto
getpeername
ioctlsocket
gethostname
WSAEnumNetworkEvents
WSAIoctl
getsockopt
send
WSAWaitForMultipleEvents
freeaddrinfo
WSAEventSelect
socket
WSACloseEvent
getaddrinfo
closesocket
WSAGetLastError
ntohs
WSASetLastError
WSAStartup
WSACleanup
htons
setsockopt
WSACreateEvent
__WSAFDIsSet
select
accept
bind
connect
getsockname
htonl
listen
recv
WSAResetEvent

Sections

.text
Size: 6.7MB - Virtual size: 6.7MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 279KB - Virtual size: 278KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 13KB - Virtual size: 34KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 9B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 98KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d0461df990406d115985c9a9aa005886

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

ole32

oleaut32

bcrypt

crypt32

wldap32

ws2_32

Sections

.text Size: 6.7MB - Virtual size: 6.7MB

.rdata Size: 279KB - Virtual size: 278KB

.data Size: 13KB - Virtual size: 34KB

.gfids Size: 3KB - Virtual size: 2KB

.tls Size: 512B - Virtual size: 9B

.rsrc Size: 9KB - Virtual size: 9KB

.reloc Size: 98KB - Virtual size: 97KB

.text
Size: 6.7MB - Virtual size: 6.7MB

.rdata
Size: 279KB - Virtual size: 278KB

.data
Size: 13KB - Virtual size: 34KB

.gfids
Size: 3KB - Virtual size: 2KB

.tls
Size: 512B - Virtual size: 9B

.rsrc
Size: 9KB - Virtual size: 9KB

.reloc
Size: 98KB - Virtual size: 97KB