e7bd74af424d38a80e094d997dbe88a45e2b29e07d98a402ee85954ef051f919

Sharing

Copy URL Twitter E-mail

General

Target

e7bd74af424d38a80e094d997dbe88a45e2b29e07d98a402ee85954ef051f919
Size

1.6MB
MD5

bd6ee4ec3ffbdd3c689499bbf5825c08
SHA1

d0fe242dc3d96f68b677daac9e8357f4b4b26aa4
SHA256

e7bd74af424d38a80e094d997dbe88a45e2b29e07d98a402ee85954ef051f919
SHA512

e92cacae31ffe7096c9f1c98b0d37343b4ade5718321efcd527d755855e81acc597dd5476f8000dcf6a5796956e08d64bd0c0109df71322e335113715074f029
SSDEEP

49152:U2H16MSyqvLZoUzYXZxvpqvLZoUzYXZxvIt2r4PRSEk1ul:D19qv9oUzYXTvpqv9oUzYXTvIt2sEE5

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
e7bd74af424d38a80e094d997dbe88a45e2b29e07d98a402ee85954ef051f919

Files

e7bd74af424d38a80e094d997dbe88a45e2b29e07d98a402ee85954ef051f919
.exe windows:6 windows x64 arch:x64

b47021d3eaa3fb885cf65e5d5f169c0e

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

C:\Users\Administrator\Desktop\AsusLinkToScreenXpert\x64\Release\AsusLinkToScreenXpert.pdb

Imports

kernel32

CreateDirectoryW
CompareFileTime
WriteFile
CreateFileW
Sleep
FileTimeToSystemTime
lstrlenW
WriteConsoleW
HeapSize
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetStdHandle
WideCharToMultiByte
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
SetFilePointerEx
GetLastError
GetTickCount
MapViewOfFile
SystemTimeToFileTime
GetProcessHeap
DeleteCriticalSection
FileTimeToLocalFileTime
HeapAlloc
CreateThread
CloseHandle
TerminateThread
SetEvent
GetTickCount64
MultiByteToWideChar
CreateEventW
UnmapViewOfFile
OpenFileMappingW
WaitForSingleObject
InitializeCriticalSection
LeaveCriticalSection
WaitForMultipleObjects
EnterCriticalSection
HeapFree
HeapReAlloc
GetFileType
GetStdHandle
ExitProcess
GetModuleHandleExW
ExitThread
RaiseException
RtlPcToFileHeader
RtlUnwindEx
TryEnterCriticalSection
GetCurrentThreadId
DuplicateHandle
WaitForSingleObjectEx
GetCurrentProcess
SwitchToThread
GetCurrentThread
GetStringTypeW
QueryPerformanceCounter
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
EncodePointer
DecodePointer
LCMapStringW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
CreateTimerQueue
SignalObjectAndWait
SetThreadPriority
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
GetThreadTimes
FreeLibrary
FreeLibraryAndExitThread
GetModuleFileNameW
GetModuleHandleA
LoadLibraryExW
GetVersionExW
VirtualAlloc
VirtualProtect
VirtualFree
ReleaseSemaphore
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
LoadLibraryW

user32

BeginPaint
UpdateWindow
wsprintfW
PostQuitMessage
LoadCursorW
ChangeWindowMessageFilterEx
DialogBoxParamW
EndPaint
RegisterClassExW
FindWindowW
SendMessageTimeoutW
GetMessageW
DefWindowProcW
DestroyWindow
LoadIconW
EndDialog
CreateWindowExW
LoadAcceleratorsW
LoadStringW
DispatchMessageW
TranslateAcceleratorW
TranslateMessage

advapi32

CryptGetHashParam
EnumServicesStatusExW
EventWriteTransfer
EventRegister
EventSetInformation
CryptDestroyKey
CryptAcquireContextW
CryptEncrypt
CryptCreateHash
CryptDeriveKey
CryptHashData
CryptDestroyHash
InitializeSecurityDescriptor
CryptReleaseContext
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegOpenKeyExW
SetSecurityDescriptorDacl
CloseServiceHandle
OpenSCManagerW

shell32

ShellExecuteW

ole32

CoCreateGuid

crypt32

CryptStringToBinaryW

ws2_32

WSACleanup
WSALookupServiceEnd
WSAGetLastError
WSALookupServiceNextW
WSAStartup
WSALookupServiceBeginW

api-ms-win-shcore-scaling-l1-1-1

SetProcessDpiAwareness

rpcrt4

UuidToStringW

Sections

.text
Size: 283KB - Virtual size: 282KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 135KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 17KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 665KB - Virtual size: 665KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 572KB - Virtual size: 576KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Sharing

General

Malware Config

Signatures

Files

b47021d3eaa3fb885cf65e5d5f169c0e

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

advapi32

shell32

ole32

crypt32

ws2_32

api-ms-win-shcore-scaling-l1-1-1

rpcrt4

Sections

.text Size: 283KB - Virtual size: 282KB

.rdata Size: 135KB - Virtual size: 135KB

.data Size: 9KB - Virtual size: 18KB

.pdata Size: 17KB - Virtual size: 16KB

.rsrc Size: 665KB - Virtual size: 665KB

.reloc Size: 572KB - Virtual size: 576KB

.text
Size: 283KB - Virtual size: 282KB

.rdata
Size: 135KB - Virtual size: 135KB

.data
Size: 9KB - Virtual size: 18KB

.pdata
Size: 17KB - Virtual size: 16KB

.rsrc
Size: 665KB - Virtual size: 665KB

.reloc
Size: 572KB - Virtual size: 576KB