e037efb70a3a012d97b169cdfd8a2e90N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

e037efb70a3a012d97b169cdfd8a2e90N.exe
Size

357KB
MD5

e037efb70a3a012d97b169cdfd8a2e90
SHA1

51ebcd7e7f1bc1449986572960b06849cc9ea681
SHA256

f170f0c3cf199b913fbc75e92e5a512be3764d2e3e3bb98ed6577664708f71d3
SHA512

2d9ecea66b66b5300793cf175a7a80f1666b385d664f3bd2d275cd551e3e03eb3a2e8d6951f99cfedb8ad172182d0a8fafda9ad76588250cf15294d2b591f9e6
SSDEEP

6144:x/PrATwpoEjOxzDJyHsXL8IpBAdy4Rjs2vW:h8T6jOxzDP8IpoycPe

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e037efb70a3a012d97b169cdfd8a2e90N.exe

Files

e037efb70a3a012d97b169cdfd8a2e90N.exe
.dll windows:5 windows x86 arch:x86

a9493492a4d1dc002bf83d9a1fe54a80

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

pelcomm

IsWin95
IsWin98
AttachForegroundThread
IsNT

kernel32

lstrcpynA
WinExec
OutputDebugStringA
GetProcAddress
LoadLibraryA
FreeLibrary
GetTickCount
GetFileAttributesA
ExpandEnvironmentStringsA
GetModuleHandleA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CloseHandle
FlushFileBuffers
GetConsoleMode
GetConsoleCP
SetStdHandle
SetFilePointer
HeapSize
ReadFile
RtlUnwind
InitializeCriticalSectionAndSpinCount
WriteFile
HeapReAlloc
VirtualAlloc
GetLocaleInfoA
HeapAlloc
EnterCriticalSection
LeaveCriticalSection
GetVersionExA
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
VirtualFree
HeapDestroy
HeapCreate
GetEnvironmentStringsW
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStartupInfoA
GetFileType
GetStdHandle
SetHandleCount
ExitProcess
GetLastError
SetLastError
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
IsValidCodePage
GetOEMCP
GetACP
InterlockedDecrement
InterlockedIncrement
GetCPInfo
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCommandLineA
HeapFree
lstrcmpiA
InitializeCriticalSection
lstrlenA
GetCurrentThreadId
Sleep
lstrcpyA
lstrcmpA
GetStringTypeW
GetProcessHeap
DeleteCriticalSection
CreateFileA

user32

GetKeyboardState
GetWindow
GetClassNameA
GetTopWindow
GetParent
GetWindowLongA
GetLastActivePopup
SetKeyboardState
UnhookWindowsHookEx
VkKeyScanA
SetTimer
LoadStringA
DialogBoxParamA
EndDialog
GetDlgItemTextA
SetDlgItemTextA
SendDlgItemMessageA
MessageBoxA
mouse_event
MapVirtualKeyA
FindWindowA
wsprintfA
keybd_event
GetForegroundWindow
GetFocus
GetDesktopWindow
SendInput
GetDlgItem
GetKeyState
GetMenu
CreatePopupMenu
SendMessageA
GetMenuState
GetMenuStringA
GetSubMenu
GetMenuItemID
AppendMenuA
SetFocus
TrackPopupMenu
RemoveMenu
DestroyMenu
DestroyWindow
CreateDialogParamA
GetCursorPos
GetWindowTextA
BringWindowToTop
IsWindowVisible
GetClientRect
SetForegroundWindow
IsWindow
IsIconic
IsZoomed
KillTimer
ShowWindow
GetWindowThreadProcessId
AttachThreadInput
LoadBitmapA
SetWindowPos
PostMessageA
RedrawWindow
SetCursorPos
ClipCursor
ScreenToClient
GetWindowDC
ReleaseDC
WindowFromPoint
GetWindowRect
GetScrollInfo
GetSystemMetrics
SetWindowsHookExA

gdi32

GetObjectA
CreateCompatibleDC
BitBlt
DeleteDC
CreatePen
SelectObject
SetROP2
MoveToEx
LineTo
DeleteObject

comdlg32

GetOpenFileNameA

advapi32

RegSetValueExA
RegQueryInfoKeyA
RegEnumKeyExA
RegCreateKeyExA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA
RegOpenKeyA
RegQueryValueExA

shell32

SHGetSpecialFolderLocation
ShellExecuteA
SHGetSpecialFolderPathA
ShellExecuteExA

ole32

CoTaskMemFree
CoUninitialize
CoInitializeEx

winmm

mciSendStringA

Exports

Exports

ActionListRetrieve
BatteryGetLocalName
CheckCombinedKey
CheckHorizontalScroll
CheckTiltWheelZooming
CombinedKeyGetDescript
CombinedKeyGetLocalName
DlgShortcutSetting
EXTRA_ACTION
EmulateLeftButtonDown
EmulateLeftButtonUp
GetMouseName
GetProductName
GetStandardFunctionDescript
GetStandardFunctionLocalName
GetStandardFunctionName
IsWhistler
IsWin2000
IsWin2000Above
KeyDown
KeyUp
KeyUpEx
MAX_ACTIONS
NextDoc
NextWindow
OnCalculator
OnCloseWindow
OnCombinedKey
OnControlPanel
OnDoubleClick
OnDragLock
OnExplorer
OnFavorites
OnHorizontalDown
OnHorizontalUp
OnHyperMenu
OnInternet
OnKeyStroke
OnMaximize
OnMediaKey
OnMediaPlayer
OnMiddleButtonDown
OnMiddleButtonUp
OnMiniAllWindow
OnMinimize
OnMsgUser
OnMyBriefcase
OnMyComputer
OnMyDragLock
OnNavigatorDown
OnNavigatorDown1
OnNavigatorUp
OnNextDoc
OnNextWindow
OnPrinters
OnRecentApps
OnRecycleBin
OnRemoteMsgUser
OnRemoteNavigatorDown1
OnRestore
OnRightClick
OnRunDaemon
OnScrollLeftDown
OnScrollLeftUp
OnScrollRightDown
OnScrollRightUp
OnSendBackward
OnSendForward
OnSendKey
OnSendKeyDown
OnSendKeyF1
OnSendKeyF1Down
OnSendKeyF1Up
OnSendKeyUp
OnSendPgDnDown
OnSendPgDnUp
OnSendPgUpDown
OnSendPgUpUp
OnShortcut
OnStart
OnWebLink
PMNavigateDestroy
PMNavigateInit
PelUtil_SetBTMouse
PelUtil_SetDriverFunction
ProcessExtraEvent
ProcessExtraFunction
SendInput_KeyDown
SendInput_KeyUp
SendInput_MouseMessage
SendSpecialKey
ShortcutGetDescript
ShortcutGetLocalName
_GetRootWindow@0
_MaximizeWindow@0
_MinimizeWindow@0
_Navigator@16
_SPMsgDlgProc@16
_SPPlugDlgProc@16
_SendKeys@8
_action_list
_bHyperMenu
_bNT
_bTaskbarPopupMenuOn
_bWin98
_hTargetWnd
_wPS2Mouse

Sections

.text
Size: 84KB - Virtual size: 84KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.shdata
Size: 512B - Virtual size: 44B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 178KB - Virtual size: 177KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.rmnet
Size: 56KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

a9493492a4d1dc002bf83d9a1fe54a80

Headers

File Characteristics

Imports

pelcomm

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

winmm

Exports

Exports

Sections

.text Size: 84KB - Virtual size: 84KB

.rdata Size: 18KB - Virtual size: 18KB

.data Size: 9KB - Virtual size: 27KB

.shdata Size: 512B - Virtual size: 44B

.rsrc Size: 178KB - Virtual size: 177KB

.reloc Size: 9KB - Virtual size: 8KB

.rmnet Size: 56KB - Virtual size: 60KB

.text
Size: 84KB - Virtual size: 84KB

.rdata
Size: 18KB - Virtual size: 18KB

.data
Size: 9KB - Virtual size: 27KB

.shdata
Size: 512B - Virtual size: 44B

.rsrc
Size: 178KB - Virtual size: 177KB

.reloc
Size: 9KB - Virtual size: 8KB

.rmnet
Size: 56KB - Virtual size: 60KB