133dad4c785cbb29d94346c55973fa00N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

133dad4c785cbb29d94346c55973fa00N.exe
Size

128KB
MD5

133dad4c785cbb29d94346c55973fa00
SHA1

f24c70b4155788c460e327b6184b442d4a19dd3c
SHA256

0bffb45f1bbc4e0b4d5ad4f1afc2fb66c8489061731b9c639fc7040bc4bef2e8
SHA512

9f7770e081e15e59ebaeaac94545dfcfd451c03675bed4bdbaa091c8eb6c0ec77085f0fbec1d51bb60c7197671e6085ff1a848a6041cfe84de84f5cd7b74b3f9
SSDEEP

1536:uVqPqxo/+WTwUTVTaBQgHmUA9wQNc0etGzPjrCbSn8ncv+cvrPpO5DjOAkFIuYFW:uxWki/givNcizK4vtrPY5DjzkF27+RN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
133dad4c785cbb29d94346c55973fa00N.exe

Files

133dad4c785cbb29d94346c55973fa00N.exe
.exe windows:5 windows x86 arch:x86

e06b57702bda28aef4fbf9d4406d2fbe

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

InitializeCriticalSection
SetThreadPriority
LocalFree
WritePrivateProfileStringA
SystemTimeToFileTime
GetProcAddress
CreateFileA
FreeLibrary
ResumeThread
SetFileTime
lstrcatA
GlobalAlloc
GetModuleFileNameA
RemoveDirectoryA
WideCharToMultiByte
GetSystemTime
GetFileAttributesA
GetPrivateProfileStringA
lstrlenW
GetFileTime
GetSystemInfo
GetLastError
GetComputerNameA
GetThreadPriority
MoveFileA
UnmapViewOfFile
IsBadReadPtr
GetModuleHandleA
Sleep
SetFilePointer
GetCurrentThreadId
LoadLibraryA
GetCurrentThread
GetTickCount
CreateFileMappingA
lstrlenA
FindResourceA
InterlockedExchange
SetFileAttributesA
CreateProcessA
lstrcmpA
FileTimeToSystemTime
GlobalFree
MultiByteToWideChar
EnterCriticalSection
GetDiskFreeSpaceA
GetLocaleInfoA
GlobalMemoryStatus
lstrcpyA
HeapDestroy
DeleteCriticalSection
GetFileSize
LockResource
GetVolumeInformationA
WaitForSingleObject
InterlockedDecrement
GetTempPathA
LoadResource
WriteFile
GetVersion
CloseHandle
ExitProcess
GetProcessHeap
HeapCreate
LoadLibraryExA
GlobalUnlock
ReadFile
GetVersionExA
InterlockedIncrement
SetEndOfFile
CreateMutexA
FormatMessageA
GetStartupInfoA
LocalAlloc

user32

GetParent
LoadBitmapA
ReleaseDC
DrawIconEx
GetWindowLongA
PeekMessageA
SendMessageA
CallNextHookEx
SetCapture
GetMenuItemCount
DestroyMenu
PtInRect
AdjustWindowRectEx
GetMenuItemInfoA
GetDlgCtrlID
PostMessageA
UnionRect
SetMenuItemInfoA
SetWindowPos
GetSysColor
SetMenuDefaultItem
AppendMenuA
GetCapture
SetCursor
KillTimer
MapWindowPoints
IsIconic
DestroyCaret
BringWindowToTop
ScreenToClient
IntersectRect
InvalidateRect
GetMessageA
EnableWindow
UpdateWindow
GetWindow
SetTimer
GetSubMenu
GetCursorPos
RemoveMenu
WindowFromPoint
EndDeferWindowPos
LockWindowUpdate
PostQuitMessage
GetActiveWindow
GetClassLongA
GetWindowRect
SetCaretPos
BeginDeferWindowPos
GetClientRect
CreateWindowExA
IsMenu
GetTopWindow
WaitMessage
GetDC
CreateCaret
OffsetRect
ReleaseCapture
PostThreadMessageA
SetWindowContextHelpId
GetMenuState
ModifyMenuA
RegisterClipboardFormatA
DrawEdge
LoadImageA
LoadCursorA
UnhookWindowsHookEx
wvsprintfA
GetDesktopWindow
GetDCEx
SetRectEmpty
RedrawWindow
CheckMenuItem
SetWindowsHookExA
GetMenuStringA
FillRect
DeleteMenu
MessageBoxA
GetMenuItemID
GetMessagePos
GetKeyState
SetParent
HideCaret
TrackPopupMenu
DrawFrameControl
LoadMenuA
IsWindowVisible
ShowCaret
GetSystemMetrics
DeferWindowPos
GetNextDlgTabItem
wsprintfA
DrawTextA
InsertMenuA
InflateRect
IsRectEmpty
GetSystemMenu
CopyRect
IsWindow
RegisterWindowMessageA
GetMenu
SetRect
DispatchMessageA
EnableMenuItem
SetForegroundWindow
EqualRect
CreatePopupMenu
FlashWindow
SystemParametersInfoA
ClientToScreen
MapDialogRect
IsZoomed

winspool.drv

ClosePrinter

shell32

SHFileOperationA
SHGetMalloc
SHGetPathFromIDListA
SHGetSpecialFolderLocation
ShellExecuteA
SHBrowseForFolderA

ole32

StringFromGUID2
CLSIDFromString
StringFromCLSID
CoGetClassObject
CoTaskMemFree
CoCreateGuid

oleaut32

SysFreeString
VariantClear
SysAllocStringLen

comctl32

ImageList_AddMasked
ImageList_BeginDrag
ord8
ImageList_GetImageCount
ImageList_SetBkColor
ImageList_EndDrag
ImageList_DragEnter
ImageList_DragLeave

winmm

PlaySoundA

wsock32

connect
shutdown
closesocket
getsockname
accept
htons
WSAAsyncSelect
ntohs
bind
WSAGetLastError
getpeername
send
ioctlsocket
recv
WSASetLastError
inet_addr
gethostbyname
socket
listen

msvcrt

_acmdln
longjmp
_initterm
_itoa
gmtime
atoi
_open
sprintf
_setjmp3
??1type_info@@UAE@XZ
fseek
_chdir
ctime
__RTDynamicCast
_ftol
strncat
isdigit
_strdup
_except_handler3
isalpha
_exit
fopen
floor
_mbctoupper
_XcptFilter
fclose
free
_CxxThrowException
_CIpow
__getmainargs
exit
wcslen
_mbschr
clock
??8type_info@@QBEHABV0@@Z
isalnum
_onexit
__dllonexit
vsprintf
wcscpy
_mbsinc
_endthread
_close
_adjust_fdiv
?terminate@@YAXXZ
fprintf
_purecall
_chdrive
__setusermatherr
__set_app_type
__CxxFrameHandler
fgets
_setmbcp
qsort
__p__fmode
time
_fstat
atof

Sections

.text
Size: 43KB - Virtual size: 42KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 60KB - Virtual size: 86KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e06b57702bda28aef4fbf9d4406d2fbe

Headers

File Characteristics

Imports

kernel32

user32

winspool.drv

shell32

ole32

oleaut32

comctl32

winmm

wsock32

msvcrt

Sections

.text Size: 43KB - Virtual size: 42KB

.rdata Size: 20KB - Virtual size: 19KB

.data Size: 60KB - Virtual size: 86KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 43KB - Virtual size: 42KB

.rdata
Size: 20KB - Virtual size: 19KB

.data
Size: 60KB - Virtual size: 86KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB