mirthconnect-4[.]5[.]1[.]b332-windows-x64[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

mirthconnect-4.5.1.b332-windows-x64.exe
Size

269.3MB
MD5

4dc7b6a60ce98c4879987375b87d9c12
SHA1

c98f62b66394326a2fbfb18f2b77ec757fde49c2
SHA256

09d6f4d42e3aab5b32a0ac6112f504dca5f0cf18f6eadaa375d1d3425ef1c13d
SHA512

37bbb6a1016e00142667c108e07be7d43fec62b95a2631e5c11992fa172ace1a54391c899f1c0e362ed865ad41f909a18a5b85314662a3363a715a655dffca03
SSDEEP

6291456:jSbxra7TQ4lLkssaY0sA/Lu+qPOBIeK/5wAoGM3pdfRITmY2:jSbxrSTQ4Aan/LqOBIb3oxbRLY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mirthconnect-4.5.1.b332-windows-x64.exe

Files

mirthconnect-4.5.1.b332-windows-x64.exe
.exe windows:5 windows x64 arch:x64

cb6737079b49f92cc532485f5cc7d47c

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

user32

SetWindowPos
OffsetRect
CopyRect
GetWindowRect
GetDesktopWindow
GetParent
MonitorFromPoint
FindWindowA
GetWindowThreadProcessId
LookupIconIdFromDirectoryEx
CreateIconFromResourceEx
DestroyIcon
FlashWindow
MonitorFromWindow
GetMonitorInfoA
GetSystemMenu
GetWindowLongA
IsZoomed
SetMenuDefaultItem
TrackPopupMenu
PostMessageA
CallWindowProcA
SetWindowLongPtrA
SetMenuItemInfoA
SendMessageA
GetClientRect
FillRect
LoadIconW
RegisterClipboardFormatW
FindWindowW
GetWindowLongPtrW
GetClassNameW
GetWindow
GetWindowTextW
SendMessageTimeoutW
GetWindowPlacement
PostMessageW
wsprintfW
MessageBoxA
EnableWindow
DialogBoxParamA
EndDialog
SetWindowTextW
SetDlgItemTextW
GetDlgItem
DefDlgProcW
LoadIconA
LoadCursorA
RegisterClassW
SendDlgItemMessageW
SendDlgItemMessageA
ExitWindowsEx
EnumWindows
IsIconic
ShowWindow
SetForegroundWindow
GetLastActivePopup
IsWindowVisible
MessageBoxW

advapi32

RegQueryInfoKeyW
RegEnumKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegRestoreKeyW
RegSaveKeyW
RegCreateKeyExW
LookupAccountSidW
ChangeServiceConfigW
ChangeServiceConfig2W
CreateServiceW
DeleteService
StartServiceW
ControlService
QueryServiceConfigW
OpenSCManagerW
OpenServiceW
QueryServiceStatus
CloseServiceHandle
GetLengthSid
CopySid
LookupPrivilegeValueW
RegOpenKeyExW
RegQueryValueExW
LookupAccountNameW
AllocateAndInitializeSid
FreeSid
GetNamedSecurityInfoW
SetEntriesInAclW
SetNamedSecurityInfoW
RegDeleteValueA
LookupPrivilegeValueA
AdjustTokenPrivileges
InitializeSecurityDescriptor
SetSecurityDescriptorDacl
OpenProcessToken
GetTokenInformation
ConvertSidToStringSidA
RegEnumKeyExA
RegOpenKeyExA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey
RegEnumValueW

ole32

CreateStreamOnHGlobal
CoCreateInstance
CoInitializeEx
GetHGlobalFromStream
CoInitialize
CoTaskMemFree
ReleaseStgMedium
CoUninitialize

oleaut32

SysFreeString
SysAllocString
SafeArrayAccessData
SafeArrayUnaccessData

kernel32

RtlUnwindEx
RtlPcToFileHeader
RaiseException
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
HeapAlloc
SetUnhandledExceptionFilter
UnhandledExceptionFilter
DeleteCriticalSection
MoveFileExW
RemoveDirectoryW
CreateSemaphoreW
HeapFree
DebugBreak
HeapReAlloc
GetCommandLineA
GetStartupInfoA
LCMapStringA
LCMapStringW
GetCPInfo
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
GetCurrentThreadId
FlsAlloc
HeapSize
GetConsoleCP
GetConsoleMode
SetHandleCount
GetACP
GetOEMCP
IsValidCodePage
HeapSetInformation
HeapCreate
GetTimeZoneInformation
GetDriveTypeA
InitializeCriticalSectionAndSpinCount
SetStdHandle
SetEndOfFile
GetProcessHeap
QueryPerformanceCounter
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
EnumSystemLocalesA
IsValidLocale
WriteConsoleA
CompareStringA
CompareStringW
IsDebuggerPresent
GetExitCodeProcess
CreateDirectoryW
FormatMessageW
GetCurrentThread
GlobalFree
DisconnectNamedPipe
WaitNamedPipeW
SetLastError
ConnectNamedPipe
CreateNamedPipeW
GetConsoleTitleW
SetConsoleTitleW
GetNativeSystemInfo
GetModuleHandleExW
GetDiskFreeSpaceExW
GetLastError
CreateFileW
SetFilePointer
WriteFile
ReadFile
GetProcAddress
LoadLibraryA
GetUserDefaultLCID
CloseHandle
CreateFileA
CreateDirectoryA
FlushFileBuffers
WriteConsoleW
GetFileType
GetStdHandle
GetLongPathNameW
ExitProcess
CreateProcessW
GetTempFileNameW
GetModuleFileNameW
RemoveDirectoryA
MultiByteToWideChar
AreFileApisANSI
FindClose
FindFirstFileA
FindFirstFileW
TerminateProcess
GetLocaleInfoW
GetWindowsDirectoryW
SetHandleInformation
CreatePipe
GetShortPathNameA
GetModuleFileNameA
GetShortPathNameW
GetCurrentProcessId
GetLongPathNameA
FoldStringW
GetWindowsDirectoryA
GetEnvironmentVariableW
GetEnvironmentVariableA
GetTempPathW
GetTempPathA
GetTempFileNameA
GetFullPathNameW
GetFullPathNameA
FindNextFileA
DeleteFileA
GetModuleHandleA
FreeEnvironmentStringsW
GetEnvironmentStringsW
FreeEnvironmentStringsA
GetEnvironmentStrings
GetExitCodeThread
WaitForSingleObject
CreateThread
GetConsoleOutputCP
SetEnvironmentVariableA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetVersionExA
CreateProcessA
SearchPathA
GetSystemTimeAsFileTime
DeleteFileW
EnterCriticalSection
InitializeCriticalSection
LeaveCriticalSection
Sleep
GetMailslotInfo
CreateMailslotA
GetCommandLineW
CreateSemaphoreA
LocalFree
GetCurrentProcess
LocalAlloc
SizeofResource
LockResource
LoadResource
FindResourceA
GlobalUnlock
GlobalSize
GlobalLock
SetConsoleTitleA
GetTickCount
GetConsoleTitleA
AllocConsole
LoadLibraryExA
SetEnvironmentVariableW
SetCurrentDirectoryW
SetThreadPriority
WideCharToMultiByte
GetModuleHandleW
LoadLibraryExW
LoadLibraryW
GetSystemDirectoryW
GetDriveTypeW
WaitForMultipleObjects
OpenProcess
GetProcessId
GlobalMemoryStatus
FreeLibrary

Exports

Exports

Java_com_install4j_runtime_installer_platform_win32_ACLHandling_addACE
Java_com_install4j_runtime_installer_platform_win32_FileVersion_compare0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getDriveType0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getPathFromRegistry0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getShortPathName0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getSpecialFolder0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getSystemDirectory0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getUniversalPathName0
Java_com_install4j_runtime_installer_platform_win32_FolderInfo_getWindowsDirectory0
Java_com_install4j_runtime_installer_platform_win32_Misc_broadcastSettingChange0
Java_com_install4j_runtime_installer_platform_win32_Misc_getEnvVarPairs0
Java_com_install4j_runtime_installer_platform_win32_Misc_getFreeDiskSpace0
Java_com_install4j_runtime_installer_platform_win32_Misc_getMachine0
Java_com_install4j_runtime_installer_platform_win32_Misc_getOsBuildNumber0
Java_com_install4j_runtime_installer_platform_win32_Misc_getPhysicalMemory0
Java_com_install4j_runtime_installer_platform_win32_Misc_getPidFromHandle0
Java_com_install4j_runtime_installer_platform_win32_Misc_getRunningModules0
Java_com_install4j_runtime_installer_platform_win32_Misc_getTopLevelWindows0
Java_com_install4j_runtime_installer_platform_win32_Misc_getWindowTitle0
Java_com_install4j_runtime_installer_platform_win32_Misc_moveWithDelayUntilReboot0
Java_com_install4j_runtime_installer_platform_win32_Misc_reboot0
Java_com_install4j_runtime_installer_platform_win32_Misc_registerExtensionFunctions0
Java_com_install4j_runtime_installer_platform_win32_Misc_setForegroundWindow0
Java_com_install4j_runtime_installer_platform_win32_Misc_terminateProcesses0
Java_com_install4j_runtime_installer_platform_win32_Misc_toFront0
Java_com_install4j_runtime_installer_platform_win32_ObjectPicker_show0
Java_com_install4j_runtime_installer_platform_win32_Registry_changeNotifyAssociations0
Java_com_install4j_runtime_installer_platform_win32_Registry_createKey0
Java_com_install4j_runtime_installer_platform_win32_Registry_deleteKey0
Java_com_install4j_runtime_installer_platform_win32_Registry_deleteValue0
Java_com_install4j_runtime_installer_platform_win32_Registry_enumSubKeys0
Java_com_install4j_runtime_installer_platform_win32_Registry_enumValues0
Java_com_install4j_runtime_installer_platform_win32_Registry_getValue0
Java_com_install4j_runtime_installer_platform_win32_Registry_keyExists0
Java_com_install4j_runtime_installer_platform_win32_Registry_restoreKey0
Java_com_install4j_runtime_installer_platform_win32_Registry_saveKey0
Java_com_install4j_runtime_installer_platform_win32_Registry_setValue0
Java_com_install4j_runtime_installer_platform_win32_ShellLink_changeNotify0
Java_com_install4j_runtime_installer_platform_win32_ShellLink_create0
Java_com_install4j_runtime_installer_platform_win32_ShellLink_createWide0
Java_com_install4j_runtime_installer_platform_win32_ShellLink_initialize0
Java_com_install4j_runtime_installer_platform_win32_ShellLink_uninitialize
Java_com_install4j_runtime_installer_platform_win32_VistaFileChooser_displayDialog0
Java_com_install4j_runtime_installer_platform_win32_VistaFileChooser_initialize0
Java_com_install4j_runtime_installer_platform_win32_VistaTaskDialog_init0
Java_com_install4j_runtime_installer_platform_win32_VistaTaskDialog_show0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_closeHandle0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_connectClient0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_connectNamedPipe0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_createCurrentUserSecurityAttributes0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_createListener0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_disconnectNamedPipe0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_getCurrentProcessId0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_getInvalidHandle0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_isProcessAlive0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_readDataBlock0
Java_com_install4j_runtime_installer_platform_win32_Win32CommunicationBackend_writeDataBlock0
Java_com_install4j_runtime_installer_platform_win32_Win32Exec_launch0
Java_com_install4j_runtime_installer_platform_win32_Win32Firewall_addRule0
Java_com_install4j_runtime_installer_platform_win32_Win32Firewall_deleteRules0
Java_com_install4j_runtime_installer_platform_win32_Win32Firewall_getCurrentProfileTypes0
Java_com_install4j_runtime_installer_platform_win32_Win32Firewall_initialize0
Java_com_install4j_runtime_installer_platform_win32_Win32Handle_close0
Java_com_install4j_runtime_installer_platform_win32_Win32Handle_getDeviceName0
Java_com_install4j_runtime_installer_platform_win32_Win32Handle_list0
Java_com_install4j_runtime_installer_platform_win32_Win32Proxy_getAutoProxyConfig0
Java_com_install4j_runtime_installer_platform_win32_Win32Proxy_getDefaultConfig0
Java_com_install4j_runtime_installer_platform_win32_Win32Proxy_getIEConfig0
Java_com_install4j_runtime_installer_platform_win32_Win32Proxy_loadFunctions0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_changeServiceConfig0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_getServiceBinary0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_getStartType0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_installService0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_queryStatus0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_setDelayedAutoStart0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_setRestartServiceConfig0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_startService0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_stopService0
Java_com_install4j_runtime_installer_platform_win32_Win32Services_uninstallService0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_addUser0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_deleteLocalGroup0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_deleteUser0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_executeElevated0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_getAccountName0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_getElevationType0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_getUserProfileDirectory0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_getUserSid0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_isMemberOfGroup0
Java_com_install4j_runtime_installer_platform_win32_Win32UserInfo_setLsaAccountRight0
Java_com_install4j_runtime_installer_platform_win32_WinGuiHelper_createHIcon0
Java_com_install4j_runtime_installer_platform_win32_WinGuiHelper_destroyHIcon0
Java_com_install4j_runtime_installer_platform_win32_WinGuiHelper_flashWindow0
Java_com_install4j_runtime_installer_platform_win32_WinGuiHelper_getHwnd0
Java_com_install4j_runtime_installer_platform_win32_WinGuiHelper_getPeer0
Java_com_install4j_runtime_installer_platform_win32_WinTaskBar_initTaskBar0
Java_com_install4j_runtime_installer_platform_win32_WinTaskBar_setOverlayIcon0
Java_com_install4j_runtime_installer_platform_win32_WinTaskBar_setProgress0
Java_com_install4j_runtime_installer_platform_win32_WinTaskBar_setState0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_clearError0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_connect0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_destroy0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_getErrorCode0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_getErrorLocation0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_getErrorMessage0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_getHeaders0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_init0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_internetErrorDlg0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_openRequest0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_read0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_sendRequest0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_setDwordOption0
Java_com_install4j_runtime_installer_platform_win32_wininet_WinInet_setOption0
Java_com_install4j_shadow_com_formdev_flatlaf_ui_FlatWindowsNativeWindowBorder_00024WndProc_installImpl
Java_com_install4j_shadow_com_formdev_flatlaf_ui_FlatWindowsNativeWindowBorder_00024WndProc_setWindowBackground
Java_com_install4j_shadow_com_formdev_flatlaf_ui_FlatWindowsNativeWindowBorder_00024WndProc_showWindow
Java_com_install4j_shadow_com_formdev_flatlaf_ui_FlatWindowsNativeWindowBorder_00024WndProc_uninstallImpl
Java_com_install4j_shadow_com_formdev_flatlaf_ui_FlatWindowsNativeWindowBorder_00024WndProc_updateFrame
Java_com_install4j_shadow_com_formdev_flatlaf_ui_FlatWindowsNativeWindowBorder_registryGetIntValue
registerNatives
registerNativesFlatlaf

Sections

.text
Size: 354KB - Virtual size: 353KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 159KB - Virtual size: 158KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 10KB - Virtual size: 80KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 15KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

cb6737079b49f92cc532485f5cc7d47c

Headers

DLL Characteristics

File Characteristics

Imports

user32

advapi32

ole32

oleaut32

kernel32

Exports

Exports

Sections

.text Size: 354KB - Virtual size: 353KB

.rdata Size: 159KB - Virtual size: 158KB

.data Size: 10KB - Virtual size: 80KB

.pdata Size: 15KB - Virtual size: 15KB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 3KB - Virtual size: 2KB

.text
Size: 354KB - Virtual size: 353KB

.rdata
Size: 159KB - Virtual size: 158KB

.data
Size: 10KB - Virtual size: 80KB

.pdata
Size: 15KB - Virtual size: 15KB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 3KB - Virtual size: 2KB