6020a49ee136299afde02f24bde77020N[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

6020a49ee136299afde02f24bde77020N.exe
Size

288KB
MD5

6020a49ee136299afde02f24bde77020
SHA1

0cc6f40e7a521425a7c7083b6e08c48180d5b10c
SHA256

73d6d6b94ddbf44958dc740a8b6c2099be57883602e7b74c523b7d7323c668cd
SHA512

3d38b1581556dc60a4e6f75da1b649ce1ac472b292dd414cb1c293db408bc606782fd54ecea7faf758dad26fdfbed31eccb9de668baee5e35dd065e3ae27d1b6
SSDEEP

6144:4lQr6bRPrR1AjUnpZQ8oDPBV+UdvrEFp7hKVN:Rr4RPCUZkzBjvrEH7kN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
6020a49ee136299afde02f24bde77020N.exe

Files

6020a49ee136299afde02f24bde77020N.exe
.exe windows:4 windows x86 arch:x86

313c4789b5a67d5dc63b272506e3337d

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
wcslen
wcscpy
wcscat
wcsncpy
wcscmp
memmove
memcmp
_stricmp
sprintf
strcpy
atoi
strlen
strcat
_CIpow
_wcsnicmp
_wcsicmp
wcschr
memcpy
_wcsdup
free
wcsncmp
floor
_snwprintf
tolower
localtime
mktime
_itow
gmtime
fabs
malloc
ceil
fseek
ftell
fread
fclose
pow
??3@YAXPAX@Z
setlocale
swscanf
wcsstr
_isnan
_vsnwprintf

kernel32

GetModuleHandleW
HeapCreate
HeapDestroy
ExitProcess
GetBinaryTypeW
GetCurrentProcess
CloseHandle
GetLastError
SetLastError
GetDateFormatW
GetTimeFormatW
GetLogicalDriveStringsW
GetDriveTypeW
GetVolumeInformationW
ExpandEnvironmentStringsW
FileTimeToSystemTime
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
CreateThread
HeapFree
HeapAlloc
GetCurrentProcessId
GetCurrentThreadId
GetEnvironmentVariableW
SetEnvironmentVariableW
GetModuleFileNameW
DuplicateHandle
CreatePipe
GetStdHandle
CreateProcessW
PeekNamedPipe
GetExitCodeProcess
ReadFile
HeapReAlloc
CreateFileW
GetFileSize
SetFilePointer
WideCharToMultiByte
MultiByteToWideChar
SetEndOfFile
WriteFile
FreeLibrary
LoadLibraryW
GetProcAddress
SetErrorMode
GetDiskFreeSpaceW
FindFirstFileW
FindNextFileW
FindClose
GetLogicalDrives
GetWindowsDirectoryW
WaitForMultipleObjects
ResetEvent
SetEvent
FindCloseChangeNotification
FindNextChangeNotification
TerminateThread
CreateEventW
FindFirstChangeNotificationW
Sleep
MulDiv
GetFileAttributesW
GetCurrentDirectoryW
GetTempPathW
SetFileAttributesW
DeleteFileW
RemoveDirectoryW
GetLocalTime
TlsAlloc
GetVersionExW
TlsFree
TlsGetValue
TlsSetValue
DeleteCriticalSection
InterlockedCompareExchange
InterlockedExchange
UnregisterWait
GetCurrentThread
RegisterWaitForSingleObject

gdiplus

GdipDeleteFont
GdipDeleteGraphics
GdipDeletePath
GdipDeleteMatrix
GdipDeletePen
GdipDeleteStringFormat
GdipFree
GdipGetDpiX
GdipGetDpiY

user32

SendMessageW
CreateWindowExW
GetSysColor
DestroyIcon
SystemParametersInfoW
SendInput
GetDC
ReleaseDC
FindWindowW
IsWindow
GetForegroundWindow
GetWindowThreadProcessId
AttachThreadInput
SetForegroundWindow
GetKeyboardLayout
VkKeyScanExW
EnableWindow
MessageBeep
IsWindowVisible
GetWindowLongW
IsWindowEnabled
EnumWindows
SetWindowPos
SetMenu
DestroyMenu
CreatePopupMenu
AppendMenuW
EnableMenuItem
GetCursorPos
TrackPopupMenu
DestroyWindow
ShowWindow
GetWindowRect
GetParent
MapWindowPoints
MoveWindow
InvalidateRect
RedrawWindow
ScreenToClient
ClientToScreen
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SetWindowLongW
GetClientRect
GetClassNameW
IntersectRect
ValidateRect
GetWindow
CallWindowProcW
GetUpdateRect
DefWindowProcW
SendDlgItemMessageW
GetDlgItemTextW
SetDlgItemTextW
EndDialog
CreateDialogParamW
GetSysColorBrush
SetRect
DrawTextW
GetSystemMetrics
SetPropW
GetPropW
RemovePropW
FillRect
LoadCursorW
RegisterClassExW
SetClassLongW
GetIconInfo
UpdateWindow
ReleaseCapture
BeginPaint
DrawStateW
EndPaint
SetCapture
SetFocus
GetFocus
PostMessageW
GetScrollPos
DrawFrameControl
TranslateMessage
DispatchMessageW
PeekMessageW
EnumPropsExW
SetActiveWindow
LoadIconW
RegisterClassW
AdjustWindowRectEx
CreateAcceleratorTableW
UnregisterClassW
IsZoomed
IsIconic
MsgWaitForMultipleObjects
GetMessageW
GetActiveWindow
TranslateAcceleratorW
GetMenu
SetTimer
KillTimer
DefFrameProcW
DestroyAcceleratorTable
EnumChildWindows
GetKeyState
IsChild
RegisterWindowMessageW
CharUpperW
CharLowerW

gdi32

GetStockObject
GetObjectW
EnumFontFamiliesExW
DeleteObject
CreateFontIndirectW
SetBkMode
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
CreateBrushIndirect
DeleteDC
SetTextColor
SetBkColor
GetTextExtentPoint32W
GetObjectType
CreateDCW
SetStretchBltMode
StretchBlt
CreatePen
MoveToEx
LineTo
CreateDIBSection
CreateSolidBrush
GetDeviceCaps
CreateBitmap
SetPixel
GetDIBits
BitBlt
CreateFontW

comdlg32

GetSaveFileNameW
GetOpenFileNameW

advapi32

RegLoadKeyW
RegUnLoadKeyW
InitiateSystemShutdownW
RegOpenKeyExW
RegQueryValueExW
RegCloseKey
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges

comctl32

InitCommonControlsEx
ImageList_Destroy
ImageList_GetImageCount
ImageList_Duplicate
ImageList_SetBkColor
ImageList_Replace
ImageList_Add
ImageList_ReplaceIcon
ImageList_Remove
ImageList_AddMasked
ImageList_Create
ImageList_GetIconSize

ole32

CoCreateInstance
CoInitialize
CoTaskMemFree
RevokeDragDrop

shell32

SHCreateDirectory
ShellExecuteExW
SHGetFileInfoW
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFolderLocation

winmm

timeBeginPeriod

Sections

.code
Size: 75KB - Virtual size: 74KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 20KB - Virtual size: 26KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

313c4789b5a67d5dc63b272506e3337d

Headers

File Characteristics

Imports

msvcrt

kernel32

gdiplus

user32

gdi32

comdlg32

advapi32

comctl32

ole32

shell32

winmm

Sections

.code Size: 75KB - Virtual size: 74KB

.text Size: 94KB - Virtual size: 94KB

.rdata Size: 2KB - Virtual size: 2KB

.data Size: 20KB - Virtual size: 26KB

.rsrc Size: 19KB - Virtual size: 19KB

.code
Size: 75KB - Virtual size: 74KB

.text
Size: 94KB - Virtual size: 94KB

.rdata
Size: 2KB - Virtual size: 2KB

.data
Size: 20KB - Virtual size: 26KB

.rsrc
Size: 19KB - Virtual size: 19KB