0007fd27842cef63899ecf1c107fd4e0N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

0007fd27842cef63899ecf1c107fd4e0N.exe
Size

1.7MB
MD5

0007fd27842cef63899ecf1c107fd4e0
SHA1

0cb8a2014720e2f329981c91b722fb4a0d609619
SHA256

46b4c8e23f02a6be19abe6302f7528f76d544e8763ee4d7ecc7246061c50c4d5
SHA512

7178fa24cb0831ad8100ab5af1ebc7fd9ecb3aa5ceb30a38bf02c85d52df86401c3ebb73d6189678b257066accdfe3584249f5852deb27178db6e527877c02c7
SSDEEP

24576:A39VT39Vdr39Vm39VgT39Vx39V7K39V9z739VhIpqzdd2LUv0ke0+iZg0SOcDQ07:W3pLIY9/IZthuTHNCKwj7K7

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0007fd27842cef63899ecf1c107fd4e0N.exe

Files

0007fd27842cef63899ecf1c107fd4e0N.exe
.exe windows:4 windows x86 arch:x86

fd840b33535761c2c64027425f55ae2c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

imm32

ImmReleaseContext
ImmGetOpenStatus
ImmGetContext

comctl32

_TrackMouseEvent
InitCommonControlsEx

version

GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW

kernel32

GetFileType
GetFullPathNameW
GetLastError
GetLocaleInfoA
GetLocaleInfoW
GetModuleFileNameA
GetModuleFileNameW
GetModuleHandleA
GetModuleHandleW
GetOEMCP
GetPrivateProfileSectionW
GetPrivateProfileStringW
GetProcAddress
GetProcessHeap
GetStartupInfoW
GetStdHandle
GetStringTypeA
GetStringTypeW
GetSystemInfo
GetThreadLocale
GetTimeFormatA
GetTimeZoneInformation
GetUserDefaultLCID
GetVersionExA
GetVolumeInformationW
GlobalAddAtomW
GlobalAlloc
GlobalDeleteAtom
GlobalFindAtomW
GlobalFlags
GlobalFree
GlobalHandle
GlobalLock
GlobalReAlloc
GlobalUnlock
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
InterlockedDecrement
InterlockedExchange
InterlockedIncrement
IsValidCodePage
IsValidLocale
GetFileTime
LCMapStringW
LoadLibraryW
LoadResource
LocalAlloc
LocalFree
LocalReAlloc
LockFile
LockResource
lstrcmpA
lstrcmpW
lstrlenA
lstrlenW
MulDiv
OutputDebugStringW
RaiseException
ReadFile
SetEndOfFile
SetEnvironmentVariableA
SetErrorMode
SetEvent
SetFilePointer
SetHandleCount
SetLastError
SetStdHandle
SetUnhandledExceptionFilter
SizeofResource
Sleep
TerminateProcess
TerminateThread
TlsAlloc
TlsFree
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnlockFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
WaitForSingleObject
WideCharToMultiByte
WriteConsoleA
WriteConsoleW
WriteFile
WritePrivateProfileStringW
WriteProcessMemory
lstrcpyA
GetEnvironmentVariableA
GetVersion
RtlUnwind
GetFileSize
GetFileAttributesW
GetExitCodeThread
GetEnvironmentVariableW
GetEnvironmentStringsW
GetEnvironmentStrings
GetDateFormatA
GetCPInfo
GetConsoleOutputCP
GetConsoleMode
GetConsoleCP
GetCommandLineW
GetACP
FreeResource
FreeLibrary
FreeEnvironmentStringsW
FreeEnvironmentStringsA
FormatMessageW
FlushFileBuffers
FindResourceW
FindResourceExW
FindFirstFileW
FindClose
FileTimeToSystemTime
FileTimeToLocalFileTime
ExitProcess
EnumSystemLocalesA
EnumResourceLanguagesW
DuplicateHandle
DeleteCriticalSection
CreateProcessW
CreateFileW
CreateFileA
CreateDirectoryW
ConvertDefaultLocale
CompareStringW
CompareStringA
CloseHandle
MultiByteToWideChar
GetStartupInfoA
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
GetVersionExW
GetCurrentProcess
LCMapStringA

user32

LoadBitmapW
LoadCursorFromFileW
LoadCursorW
LoadIconW
LoadImageW
LoadMenuW
MapDialogRect
MapWindowPoints
MessageBeep
MessageBoxW
ModifyMenuW
MoveWindow
OffsetRect
PeekMessageW
PostMessageW
PostQuitMessage
PostThreadMessageW
PtInRect
RegisterClassW
RegisterClipboardFormatW
RegisterWindowMessageW
ReleaseCapture
RemovePropW
ScreenToClient
ScrollWindow
SendDlgItemMessageA
SendDlgItemMessageW
SendMessageW
SetActiveWindow
SetCapture
SetCursor
SetFocus
SetForegroundWindow
SetMenuItemBitmaps
SetPropW
SetRect
SetRectEmpty
SetScrollInfo
SetTimer
SetWindowContextHelpId
SetWindowLongW
SetWindowPos
SetWindowRgn
SetWindowsHookExW
SetWindowTextW
ShowWindow
SystemParametersInfoA
SystemParametersInfoW
TabbedTextOutW
TrackPopupMenu
TranslateMessage
UnhookWindowsHookEx
UnregisterClassA
UnregisterClassW
UpdateWindow
ValidateRect
WindowFromPoint
WinHelpW
VkKeyScanA
KillTimer
GetWindowTextLengthW
GetWindowRgn
GetWindowRect
GetWindowPlacement
GetWindowLongW
GetWindowDC
GetTopWindow
GetSystemMetrics
GetSysColorBrush
GetSubMenu
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetNextDlgTabItem
GetNextDlgGroupItem
GetMessageW
GetMessageTime
GetMessagePos
GetLastActivePopup
GetKeyState
GetForegroundWindow
GetFocus
GetDlgItem
GetDesktopWindow
GetCursorPos
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetActiveWindow
FindWindowW
FillRect
EqualRect
EndDialog
EnableWindow
EnableMenuItem
DrawTextW
DrawTextExW
DispatchMessageW
DestroyWindow
DestroyMenu
DestroyIcon
DefWindowProcW
CreateWindowExW
CreatePopupMenu
CreateDialogIndirectParamW
CopyRect
CopyAcceleratorTableW
ClientToScreen
CheckMenuItem
CharUpperW
CharNextW
CallWindowProcW
IsWindowVisible
IsWindowEnabled
IsRectEmpty
IsIconic
LoadStringW
ReleaseDC
GetDC
IsDialogMessageW
IsChild
InvalidateRgn
InvalidateRect
IntersectRect
InflateRect
GrayStringW
GetWindowThreadProcessId
GetWindowTextW
GetDlgCtrlID

gdi32

DeleteDC
DeleteObject
DPtoLP
Escape
ExtCreateRegion
ExtSelectClipRgn
ExtTextOutW
FrameRgn
GetBkColor
GetClipBox
GetMapMode
GetObjectW
GetRegionData
GetRgnBox
CreateCompatibleDC
GetTextColor
GetTextExtentPoint32W
GetViewportExtEx
GetWindowExtEx
CreateSolidBrush
OffsetViewportOrgEx
PtVisible
RectVisible
RestoreDC
SaveDC
ScaleViewportExtEx
ScaleWindowExtEx
SelectClipRgn
SelectObject
SetBkColor
SetBkMode
SetDIBColorTable
SetMapMode
SetTextColor
CreateCompatibleBitmap
CreateBitmap
CombineRgn
GetDeviceCaps
CreateRectRgnIndirect
OffsetRgn
CreateDIBSection
GetStockObject
CreateFontIndirectW

advapi32

RegSetValueExW
RegQueryValueW
RegQueryValueExW
RegOpenKeyExW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegOpenKeyW

shell32

CommandLineToArgvW
ShellExecuteExW
Shell_NotifyIconW

ole32

OleIsCurrentClipboard
OleInitialize
OleFlushClipboard
CreateILockBytesOnHGlobal
CoTaskMemFree
OleUninitialize
CoRevokeClassObject
CoRegisterMessageFilter
CoGetClassObject
CoFreeUnusedLibraries
CLSIDFromString
CLSIDFromProgID
StringFromIID
StgOpenStorageOnILockBytes
CoTaskMemAlloc
StgCreateDocfileOnILockBytes

shlwapi

PathIsUNCW
PathFindFileNameW
PathStripToRootW
PathFindExtensionW
PathFileExistsW
PathRemoveFileSpecW
PathIsDirectoryW
PathAddBackslashW
PathAppendW

Sections

.text
Size: 420KB - Virtual size: 416KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.adata8
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

osgm924
Size: 1.2MB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

fd840b33535761c2c64027425f55ae2c

Headers

File Characteristics

Imports

imm32

comctl32

version

kernel32

user32

gdi32

advapi32

shell32

ole32

shlwapi

Sections

.text Size: 420KB - Virtual size: 416KB

.adata8 Size: 12KB - Virtual size: 11KB

.data Size: 12KB - Virtual size: 20KB

.rsrc Size: 80KB - Virtual size: 80KB

osgm924 Size: 1.2MB - Virtual size: 1.2MB

.text
Size: 420KB - Virtual size: 416KB

.adata8
Size: 12KB - Virtual size: 11KB

.data
Size: 12KB - Virtual size: 20KB

.rsrc
Size: 80KB - Virtual size: 80KB

osgm924
Size: 1.2MB - Virtual size: 1.2MB