05bec685a43c049c21225e21cf1cebd0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

05bec685a43c049c21225e21cf1cebd0N.exe
Size

409KB
MD5

05bec685a43c049c21225e21cf1cebd0
SHA1

933ffa734fafc92146fd58beca6fe41bdaa3ed0d
SHA256

4d92e8c02f3601deffd88a8f6aa77812a7cc18a8906dba6497f33920d8b07808
SHA512

94e40d097da94169fa29ac39f6e2e225610a7fe2e91a974c84099e38add17c7f0bbc1f97aaca71d8126dc4e8c7cea3e6927b81cddefdb5fa6089afe5fd4819d5
SSDEEP

3072:/jwczGLGyWl6/uZk2y+aR/pf7IGbPf+FuAEc20jZOKrZKiLNmABWbLY1RMM4yx9O:/sKhaF2k9L+/XjZOpiqDnrsTr1hFRc7X

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
05bec685a43c049c21225e21cf1cebd0N.exe

Files

05bec685a43c049c21225e21cf1cebd0N.exe
.exe windows:4 windows x64 arch:x64

ea955d8cbfc6c7758fbcdea503206f6b

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

psapi

GetModuleFileNameExA

kernel32

GetModuleHandleA
GetVersionExA
SetStdHandle
GetStdHandle
LoadLibraryW
FreeLibrary
GetLastError
SetEvent
WaitForSingleObject
CreateEventA
Process32Next
OpenProcess
Process32First
CreateToolhelp32Snapshot
GetCurrentProcessId
MulDiv
GlobalFree
GlobalAlloc
Sleep
GlobalUnlock
GlobalLock
GlobalMemoryStatus
GetFileAttributesA
SetPriorityClass
GetCurrentProcess
VirtualAlloc
VirtualFree
SetEndOfFile
GetProcAddress
HeapReAlloc
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
HeapSize
RtlLookupFunctionEntry
RtlVirtualUnwind
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetConsoleMode
GetConsoleCP
InitializeCriticalSection
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
LCMapStringW
AllocConsole
OutputDebugStringA
WriteFile
FlushFileBuffers
GetLocalTime
MoveFileA
SetFilePointer
CreateFileA
GetFileSize
ReadFile
CloseHandle
SizeofResource
LoadLibraryA
SetEnvironmentVariableA
FindResourceA
LoadResource
LockResource
ExpandEnvironmentStringsA
lstrlenA
GetCommandLineA
CreateThread
GetModuleFileNameA
GetCurrentDirectoryA
SetCurrentDirectoryA
lstrcatA
lstrcpyA
GetFullPathNameA
FindFirstFileA
FindNextFileA
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
DeleteCriticalSection
GetFileType
SetHandleCount
HeapFree
HeapAlloc
GetProcessHeap
GetStartupInfoA
HeapSetInformation
HeapCreate
ExitProcess
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
FlsGetValue
FlsSetValue
TlsFree
FlsFree
SetLastError
GetCurrentThreadId
FlsAlloc
RtlUnwindEx
EnterCriticalSection
LeaveCriticalSection

user32

SetForegroundWindow
DefWindowProcA
MessageBoxA
PeekMessageA
DestroyWindow
GetSystemMetrics
ShowWindow
UpdateWindow
InvalidateRect
GetDC
CopyImage
BeginPaint
EndPaint
EnumWindows
DdeUninitialize
GetWindowInfo
GetWindowThreadProcessId
DdeConnect
DdeClientTransaction
CreateWindowExA
TranslateMessage
DispatchMessageA
GetMessageA
DdeInitializeA
DdeCreateStringHandleA
DdeNameService
DdeGetData
LoadCursorA
RegisterClassExA
DdeFreeStringHandle

gdi32

GetObjectA
GetDeviceCaps
CreateFontA
DeleteObject
SelectObject
BitBlt
DeleteDC
SetBkMode
SetBkColor
SetTextColor
TextOutA
GetStockObject
CreateCompatibleDC

advapi32

RegCloseKey
RegEnumKeyExA
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
SetServiceStatus
OpenServiceA
DeleteService
OpenSCManagerA
CreateServiceA
CloseServiceHandle
RegOpenKeyA
RegEnumValueA
RegOpenKeyExA
RegQueryValueExA
RegDeleteKeyA
RegCreateKeyExA
RegSetValueExA

ole32

CoUninitialize
CreateStreamOnHGlobal
CoInitialize

Exports

Exports

DDE_Ready
INI_GetDictionary
INI_GetProperty
Log_LogIt
SplashScreen_Close
SplashScreen_GetWindowHandle
SplashScreen_SetText
SplashScreen_SetTextBgColor
SplashScreen_SetTextColor
SplashScreen_SetTextFont

Sections

.text
Size: 121KB - Virtual size: 121KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 29KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 72KB - Virtual size: 89KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 170KB - Virtual size: 169KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ea955d8cbfc6c7758fbcdea503206f6b

Headers

DLL Characteristics

File Characteristics

Imports

psapi

kernel32

user32

gdi32

advapi32

ole32

Exports

Exports

Sections

.text Size: 121KB - Virtual size: 121KB

.rdata Size: 29KB - Virtual size: 28KB

.data Size: 72KB - Virtual size: 89KB

.pdata Size: 6KB - Virtual size: 5KB

.rsrc Size: 170KB - Virtual size: 169KB

.text
Size: 121KB - Virtual size: 121KB

.rdata
Size: 29KB - Virtual size: 28KB

.data
Size: 72KB - Virtual size: 89KB

.pdata
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 170KB - Virtual size: 169KB