np21nt[.]exe | Triage

Sharing

Copy URL Twitter E-mail

General

Target

np21nt.exe
Size

940KB
MD5

51856b0f00af5a79274d8f5e323f1578
SHA1

b8c5de85e1294d48bc8c5704282242c6541f6990
SHA256

246305b0e4b91726b4114b94c3639cc63eaf63159ddca392bde862fb2c1ed191
SHA512

d22bcf6e18cdf151c2416ee9897821d1584d337944af4082426ba54c0630a265443e7549c44b8d569ebdef315fa5a9110a46bf9fa2a687b40dce1434de853d12
SSDEEP

12288:caAkz/OSxhjzV+IJndFHPYzXWBGasz1GOEQZ5oTAdyXaCE6Al7FbYglXUJw1xrg0:ca7hHkETBGJVYgFSwwWdnPlT4nT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
np21nt.exe

Files

np21nt.exe
.exe windows:4 windows x86 arch:x86

c47af159cf4ffe1f779e58da5d2b51a3

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

FindFirstFileW
SizeofResource
LockResource
LoadResource
FindResourceW
GetOEMCP
WaitForSingleObject
ResetEvent
SetEvent
GetPrivateProfileStringW
lstrcpynW
MoveFileExW
GetCurrentThread
SetThreadPriority
CreateEventW
GetModuleFileNameW
GetCommandLineW
WideCharToMultiByte
WaitForMultipleObjects
OpenMutexW
GetLocalTime
MoveFileW
GetTempPathW
LocalFree
InterlockedExchange
LocalAlloc
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetStdHandle
LoadLibraryA
GetACP
GetCPInfo
FlushFileBuffers
GetStringTypeW
GetStringTypeA
LCMapStringW
FindNextFileW
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetFileType
GetStdHandle
SetHandleCount
UnhandledExceptionFilter
RaiseException
SetLastError
TlsAlloc
IsBadWritePtr
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
GetVersionExA
GetEnvironmentVariableA
GetModuleFileNameA
GetVersion
GetCommandLineA
GetStartupInfoA
GetModuleHandleA
InterlockedIncrement
InterlockedDecrement
HeapSize
HeapReAlloc
GetSystemTime
GetTimeZoneInformation
ExitThread
TlsGetValue
TlsSetValue
GetCurrentThreadId
CreateThread
RtlUnwind
GetCurrentProcess
TerminateProcess
ExitProcess
HeapFree
HeapAlloc
lstrcmpW
FindClose
GetLastError
GetFileAttributesW
DeleteFileW
GetFileTime
FileTimeToLocalFileTime
FileTimeToSystemTime
SetEndOfFile
SetFilePointer
GetModuleHandleW
ClearCommError
ReadFile
GetCommState
SetCommState
WriteFile
CreateFileW
CloseHandle
GlobalAlloc
GlobalFree
lstrcatW
MultiByteToWideChar
lstrcpyW
LoadLibraryW
lstrlenW
FreeLibrary
GetProcAddress
GetTickCount
DeleteCriticalSection
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
Sleep
GetFileSize
LCMapStringA
CreateFileA

user32

CharLowerW
GetKeyboardState
IsMenu
PostMessageW
ClientToScreen
GetClientRect
GetParent
EndDialog
SetFocus
GetWindowRect
EnableWindow
GetDlgItem
SetDlgItemTextW
SendMessageW
GetDlgItemTextW
SendDlgItemMessageW
DialogBoxParamW
GetWindowLongW
SetWindowTextW
GetWindowTextW
InvalidateRect
TrackPopupMenu
GetCursorPos
LoadIconW
GetDlgCtrlID
ShowWindow
PtInRect
AppendMenuW
SetMenuItemInfoW
DeleteMenu
ScreenToClient
RegisterClassW
LoadCursorW
DefDlgProcW
MoveWindow
SystemParametersInfoW
DestroyMenu
DrawMenuBar
GetMenu
SetMenu
SetWindowPos
ShowCursor
ClipCursor
GetDC
ReleaseDC
wsprintfW
SetWindowLongW
IsWindow
ModifyMenuW
GetSubMenu
GetMenuState
LoadBitmapW
PostQuitMessage
WINNLSEnableIME
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
GetKeyboardType
SetForegroundWindow
FindWindowW
ChangeDisplaySettingsW
EnumDisplaySettingsW
DrawFocusRect
CallWindowProcW
LoadImageW
CloseWindow
SetCursorPos
GetClassLongW
SetClassLongW
EnableMenuItem
GetSystemMenu
LoadMenuW
CreatePopupMenu
InsertMenuW
InsertMenuItemW
GetMenuItemCount
GetMenuItemInfoW
FillRect
SetRect
GetKeyState
CheckMenuItem
GetSystemMetrics
CreateWindowExW
UpdateWindow
DestroyWindow
GetAsyncKeyState
MessageBoxW
DefWindowProcW
BeginPaint
EndPaint
SetScrollInfo

gdi32

SetTextColor
CreateSolidBrush
CreateCompatibleBitmap
GetSystemPaletteEntries
SetDIBColorTable
GetTextExtentPoint32W
GetStockObject
SetDIBitsToDevice
CreateFontW
DeleteObject
ChoosePixelFormat
GetDeviceCaps
GdiFlush
SetStretchBltMode
StretchBlt
SwapBuffers
TextOutW
DeleteDC
SetPixelFormat
SelectObject
BitBlt
CreateCompatibleDC
CreateDIBSection
GetObjectW
PatBlt
SetBkColor

comdlg32

GetSaveFileNameW
GetOpenFileNameW

shell32

DragQueryFileW
ShellExecuteW
DragAcceptFiles
DragFinish

ole32

CoUninitialize
CoInitialize

ddraw

DirectDrawCreate

dsound

ord1

winmm

midiOutGetDevCapsW
midiOutGetNumDevs
midiInGetDevCapsW
midiInGetNumDevs
midiInStart
midiInAddBuffer
midiInPrepareHeader
midiOutClose
midiInReset
midiInOpen
midiOutReset
midiOutOpen
midiOutShortMsg
midiOutUnprepareHeader
timeBeginPeriod
timeEndPeriod
joyGetNumDevs
joyGetPos
midiInStop
midiInUnprepareHeader
midiInClose
midiOutPrepareHeader
midiOutLongMsg

comctl32

CreatePropertySheetPageW
PropertySheetW

wsock32

WSACleanup
closesocket
WSAGetLastError
connect
htons
WSAAsyncSelect
socket
WSAStartup
send
recv
inet_ntoa

dinput8

DirectInput8Create

opengl32

glViewport
glTexSubImage2D
glClearColor
glClear
glColor3f
glEnable
glBegin
glTexCoord2f
glVertex2d
glEnd
glDisable
glPixelZoom
glRasterPos2i
glDrawPixels
glFlush
wglCreateContext
wglMakeCurrent
glPixelStorei
glTexImage2D
glTexParameteri
glGetString
wglGetProcAddress
wglDeleteContext

Sections

.text
Size: 724KB - Virtual size: 722KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 112KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 52KB - Virtual size: 5.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48KB - Virtual size: 46KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

c47af159cf4ffe1f779e58da5d2b51a3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

comdlg32

shell32

ole32

ddraw

dsound

winmm

comctl32

wsock32

dinput8

opengl32

Sections

.text Size: 724KB - Virtual size: 722KB

.rdata Size: 112KB - Virtual size: 110KB

.data Size: 52KB - Virtual size: 5.7MB

.rsrc Size: 48KB - Virtual size: 46KB

.text
Size: 724KB - Virtual size: 722KB

.rdata
Size: 112KB - Virtual size: 110KB

.data
Size: 52KB - Virtual size: 5.7MB

.rsrc
Size: 48KB - Virtual size: 46KB