Source-Explorer-v2[.]2[.]0-Windows-x64[.]zip

Sharing

Copy URL Twitter E-mail

General

Target

Source-Explorer-v2.2.0-Windows-x64.zip
Size

25.7MB
MD5

33354a8244fa4983fc6ee9b33368af48
SHA1

2556bf3042c49f67ec8909dc35e320732a195fe8
SHA256

8e9c93236e71394d83a2b7e645e5c257d09a459bd30db6dd5cc9d84ae52a66eb
SHA512

63f3e10d8e31730cb3575e65f7bbe0b251cb8e835b1f49613392a5494f2a85853b304e8abf4d2fd22e9c656757854cbbe75c07772d1f6de2072b6dca61f4cd02
SSDEEP

393216:3D0AlkmEHYpV7++Gqr7I6GfPlAXiyxjTGF/ZeW4XGdLYbie8C9AGBor2aLNqY8hP:zvuHMxGqrOHY/2x9Q3NAPr2aXuces2b

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/srcexp.exe

Files

Source-Explorer-v2.2.0-Windows-x64.zip
.zip
srcexp.exe
.exe windows:6 windows x64 arch:x64

b05cac73c51ef8e40b9844438c0c1477

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\a\SourceExplorer\SourceExplorer\build\srcexp.pdb

Imports

winmm

waveOutClose
waveOutGetNumDevs
waveOutGetDevCapsW
timeEndPeriod
waveOutOpen
waveOutGetErrorTextW
waveInUnprepareHeader
waveOutPrepareHeader
waveInReset
waveInStart
waveInAddBuffer
timeBeginPeriod
waveInPrepareHeader
waveInClose
waveInOpen
waveInGetDevCapsW
waveInGetNumDevs
waveOutReset
waveOutWrite
waveOutUnprepareHeader

setupapi

SetupDiGetDeviceRegistryPropertyA
SetupDiGetDeviceInterfaceDetailA
CM_Get_Parent
CM_Locate_DevNodeA
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
CM_Get_Device_IDA
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo

version

VerQueryValueA
GetFileVersionInfoSizeA
GetFileVersionInfoA

imm32

ImmGetCompositionStringW
ImmSetCompositionStringW
ImmGetCandidateListW
ImmNotifyIME
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmAssociateContextEx
ImmGetIMEFileNameA
ImmGetContext
ImmAssociateContext
ImmReleaseContext

kernel32

GetSystemInfo
VirtualAlloc
VirtualFree
VirtualQuery
LocalAlloc
LocalFree
FormatMessageW
GetModuleFileNameW
QueryPerformanceCounter
QueryPerformanceFrequency
FreeLibrary
GetProcAddress
LoadLibraryA
WriteFile
OutputDebugStringW
AttachConsole
WriteConsoleW
CreateFileW
GetFileSizeEx
ReadFile
SetFilePointer
SetFilePointerEx
CloseHandle
SetErrorMode
GetTickCount
GetModuleHandleW
MulDiv
SetThreadExecutionState
GetCurrentProcess
ExitProcess
TerminateProcess
GlobalMemoryStatusEx
CreateDirectoryW
CreateToolhelp32Snapshot
Process32First
Process32Next
LoadLibraryW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
TryEnterCriticalSection
DeleteCriticalSection
GetCurrentThreadId
ReleaseSemaphore
WaitForSingleObjectEx
CreateSemaphoreW
Sleep
GetEnvironmentVariableA
SetEnvironmentVariableA
IsDebuggerPresent
RaiseException
CreateThread
GetCurrentThread
SetThreadPriority
VerSetConditionMask
CreateFileA
DeviceIoControl
GetOverlappedResult
CancelIo
ResetEvent
WaitForSingleObject
CreateEventW
VerifyVersionInfoW
CreateEventExW
TlsAlloc
TlsGetValue
TlsSetValue
LoadLibraryExW
GlobalAlloc
GlobalUnlock
GlobalLock
CompareStringA
GetModuleHandleExW
WideCharToMultiByte
GetSystemPowerStatus
GetLocaleInfoA
FlushFileBuffers
GetFileInformationByHandle
GetFileSize
GetConsoleMode
LockFileEx
SetEndOfFile
UnlockFile
GetLastError
ReleaseMutex
CreateMutexA
CreateEventA
SignalObjectAndWait
GetCurrentProcessId
TlsFree
OpenProcess
GetVersion
MapViewOfFileEx
FlushViewOfFile
UnmapViewOfFile
FormatMessageA
OpenMutexA
CreateFileMappingA
MultiByteToWideChar
GlobalFree
InitializeSListHead
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
GetTickCount64
GetSystemTimeAsFileTime
GetCurrentProcessorNumber
FlushProcessWriteBuffers
CreateSemaphoreExW
SleepConditionVariableCS
InitOnceExecuteOnce
InitializeSRWLock
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetStringTypeW
GetCPInfo
CompareStringEx
SleepConditionVariableSRW
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
LCMapStringEx
DecodePointer
EncodePointer
InitializeCriticalSectionEx
TryAcquireSRWLockExclusive
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetNativeSystemInfo
GetExitCodeThread
SwitchToThread
CreateSymbolicLinkW
GetFileInformationByHandleEx
CreateHardLinkW
MoveFileExW
CopyFileW
CreateDirectoryExW
AreFileApisANSI
RtlUnwindEx
GetTempPathW
SetFileTime
SetFileInformationByHandle
SetFileAttributesW
GetFullPathNameW
GetFinalPathNameByHandleW
GetFileAttributesExW
GetFileAttributesW
GetDiskFreeSpaceExW
FindNextFileW
FindFirstFileExW
FindFirstFileW
FindClose
GetCurrentDirectoryW
SetCurrentDirectoryW
GetLocaleInfoEx
GetStdHandle
SetConsoleMode
HeapFree
GetDateFormatW
GetTimeFormatW
CompareStringW
SetLastError
ExitThread
ResumeThread
FreeLibraryAndExitThread
GetFileType
GetCommandLineA
GetCommandLineW
SetEvent
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetStartupInfoW
InterlockedPushEntrySList
InterlockedFlushSList
RtlPcToFileHeader
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetConsoleOutputCP
ReadConsoleW
SetConsoleCtrlHandler
HeapReAlloc
HeapSize
HeapQueryInformation
GetTimeZoneInformation
IsValidCodePage
GetACP
GetOEMCP
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
SetStdHandle
LockFile
RtlUnwind
HeapAlloc

user32

PtInRect
IntersectRect
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
RemovePropW
SetPropW
SetWindowLongW
SetActiveWindow
GetFocus
SetFocus
FlashWindowEx
SetLayeredWindowAttributes
ShowWindow
CreateWindowExW
RegisterClassW
GetWindowLongPtrW
SetWindowLongPtrW
GetParent
GetWindowThreadProcessId
SetWindowsHookExW
UnhookWindowsHookEx
CreateIconFromResource
SetForegroundWindow
AttachThreadInput
SendMessageW
RegisterRawInputDevices
CreateIconIndirect
CopyImage
LoadCursorW
SetCursorPos
MonitorFromWindow
SetWindowRgn
ReleaseCapture
SetCapture
EnumDisplayMonitors
GetMonitorInfoW
MonitorFromPoint
EnumDisplayDevicesW
EnumDisplaySettingsW
ChangeDisplaySettingsExW
ReleaseDC
GetDC
MapVirtualKeyW
ToUnicode
GetDesktopWindow
GetKeyboardLayout
IsClipboardFormatAvailable
EmptyClipboard
GetClipboardData
SetClipboardData
GetClipboardSequenceNumber
CloseClipboard
OpenClipboard
DestroyWindow
RegisterClassExA
UnregisterClassA
UnregisterDeviceNotification
RegisterDeviceNotificationW
GetDoubleClickTime
RegisterWindowMessageA
GetRawInputData
DestroyIcon
LoadIconW
CallNextHookEx
GetWindowLongW
IsRectEmpty
ClipCursor
ScreenToClient
ClientToScreen
GetClipCursor
GetCursorPos
SetCursor
AdjustWindowRectEx
GetWindowRect
GetClientRect
GetPropW
ValidateRect
InvalidateRect
GetUpdateRect
GetForegroundWindow
GetMenu
GetSystemMetrics
KillTimer
SetTimer
GetAsyncKeyState
GetKeyState
IsIconic
SetWindowPos
GetClassInfoExW
RegisterClassExW
UnregisterClassW
CallWindowProcW
DefWindowProcW
PostMessageW
GetMessageExtraInfo
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
TrackMouseEvent
MessageBoxA
GetRawInputDeviceInfoA
MonitorFromRect
GetRawInputDeviceList
PostThreadMessageW
DialogBoxIndirectParamW
EndDialog
GetDlgItem
SystemParametersInfoW
SystemParametersInfoA
GetKeyboardState
DrawTextW
CreateWindowExA

gdi32

Rectangle
SelectObject
SetBkMode
SetTextColor
CreateDIBSection
ExtTextOutW
CreateCompatibleBitmap
CreateDCW
GetDeviceCaps
GetDIBits
CreateBitmap
GetICMProfileW
GetTextExtentPoint32W
SetDeviceGammaRamp
CombineRgn
CreateRectRgn
ChoosePixelFormat
DescribePixelFormat
GetPixelFormat
SetPixelFormat
SwapBuffers
BitBlt
CreateFontIndirectW
GetTextExtentPoint32A
GetTextMetricsW
DeleteObject
DeleteDC
CreateSolidBrush
CreatePen
GetDeviceGammaRamp
CreateCompatibleDC
CreateFontW

shell32

ShellExecuteW
DragAcceptFiles
SHGetFolderPathW
ExtractIconExW
DragFinish
DragQueryFileW
SHCreateItemFromParsingName

ole32

CoInitializeEx
CoCreateInstance
CoTaskMemFree
CLSIDFromString
PropVariantClear
CoUninitialize

oleaut32

SysFreeString

advapi32

InitializeSecurityDescriptor
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
SetSecurityDescriptorDacl

Sections

.text
Size: 7.9MB - Virtual size: 7.9MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2.1MB - Virtual size: 2.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 151KB - Virtual size: 209KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 380KB - Virtual size: 380KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 12KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
srcexp.pdb

Sharing

General

Malware Config

Signatures

Files

b05cac73c51ef8e40b9844438c0c1477

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

winmm

setupapi

version

imm32

kernel32

user32

gdi32

shell32

ole32

oleaut32

advapi32

Sections

.text Size: 7.9MB - Virtual size: 7.9MB

.rdata Size: 2.1MB - Virtual size: 2.1MB

.data Size: 151KB - Virtual size: 209KB

.pdata Size: 380KB - Virtual size: 380KB

_RDATA Size: 512B - Virtual size: 348B

.reloc Size: 12KB - Virtual size: 12KB

.text
Size: 7.9MB - Virtual size: 7.9MB

.rdata
Size: 2.1MB - Virtual size: 2.1MB

.data
Size: 151KB - Virtual size: 209KB

.pdata
Size: 380KB - Virtual size: 380KB

_RDATA
Size: 512B - Virtual size: 348B

.reloc
Size: 12KB - Virtual size: 12KB