c9817d415d34ea3ae07094dae818ffe8e3fb1d5bcb13eb0e65fd361b7859eda7[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

c9817d415d34ea3ae07094dae818ffe8e3fb1d5bcb13eb0e65fd361b7859eda7.exe
Size

30.1MB
MD5

8f6f306ba501a7e435db720bb97cb1e4
SHA1

66de656287a3bff5a7bf89f9a0972d679e3afe3f
SHA256

c9817d415d34ea3ae07094dae818ffe8e3fb1d5bcb13eb0e65fd361b7859eda7
SHA512

33140e4ebd897ac76da0e2caf7b03a7938c49408fc1be5dbc6a07c15258c3cb9211dd86dde999f502b53e2f7d4947446d81c57eb18137eed92c22657bdeb4ec6
SSDEEP

786432:08Mc+2YBT6yL1+5FFg3qmMB4RR2qO+Nkpzsn:5i2GT6S4pg3qmg4qQipz

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
c9817d415d34ea3ae07094dae818ffe8e3fb1d5bcb13eb0e65fd361b7859eda7.exe

Files

c9817d415d34ea3ae07094dae818ffe8e3fb1d5bcb13eb0e65fd361b7859eda7.exe
.exe windows:5 windows x86 arch:x86

0e1635dd4c4571f7777699cd8979ad20

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

J:\work\res_checker\netdia\Release\NetDiagnotor.pdb

Imports

kernel32

GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetTimeZoneInformation
GetStringTypeW
GetSystemTimeAsFileTime
GetConsoleMode
ReadConsoleW
SetFilePointerEx
LCMapStringW
WriteConsoleW
SetEnvironmentVariableA
HeapQueryInformation
HeapSize
GetFileType
SetStdHandle
IsProcessorFeaturePresent
IsDebuggerPresent
VirtualQuery
VirtualAlloc
GetModuleHandleExW
ExitProcess
CreatePipe
HeapReAlloc
RtlUnwind
HeapAlloc
ExitThread
CreateThread
QueryPerformanceCounter
GetCommandLineW
FindResourceExW
VirtualProtect
Sleep
GetProfileIntW
SearchPathW
GetWindowsDirectoryW
GetTempPathW
GetTempFileNameW
SetErrorMode
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
GetCurrentDirectoryW
GlobalFlags
VerifyVersionInfoW
VerSetConditionMask
lstrcmpiW
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
DeleteFileW
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FindFirstFileW
FindClose
GetThreadLocale
GetStartupInfoW
GetProcessHeap
HeapFree
GetStdHandle
GlobalGetAtomNameW
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
InterlockedIncrement
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
ResumeThread
SetThreadPriority
lstrcpyW
CompareStringA
lstrcmpA
GetVersionExW
GetCurrentThread
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryA
lstrcmpW
GlobalDeleteAtom
GetSystemDirectoryW
DecodePointer
EncodePointer
LoadLibraryW
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetVersion
OutputDebugStringA
GetFileAttributesW
InterlockedDecrement
FileTimeToSystemTime
LocalAlloc
LoadLibraryExW
FreeLibrary
FileTimeToLocalFileTime
SetLastError
CopyFileW
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalSize
GetTickCount
GetQueuedCompletionStatus
SetEvent
WideCharToMultiByte
WaitForSingleObject
InterlockedExchange
ResetEvent
RaiseException
PostQueuedCompletionStatus
GetSystemInfo
TerminateThread
GetExitCodeThread
LeaveCriticalSection
EnterCriticalSection
CreateIoCompletionPort
DeleteCriticalSection
CreateEventW
InitializeCriticalSectionAndSpinCount
OutputDebugStringW
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetModuleFileNameW
AddVectoredExceptionHandler
CreateMutexW
WriteFile
CreateFileW
FreeResource
GlobalUnlock
GlobalLock
GlobalAlloc
GetLastError
MultiByteToWideChar
FindResourceW
LoadResource
LockResource
SizeofResource
ReadFile
CloseHandle
CreateProcessW
SetHandleInformation
GetConsoleCP

user32

FrameRect
CopyIcon
ReuseDDElParam
UnpackDDElParam
InsertMenuItemW
TranslateAcceleratorW
ModifyMenuW
CharUpperBuffW
RegisterClipboardFormatW
LoadImageW
EmptyClipboard
SetClipboardData
CloseClipboard
OpenClipboard
SetClassLongW
LockWindowUpdate
BringWindowToTop
SetParent
SetCursorPos
DestroyAcceleratorTable
CreateAcceleratorTableW
LoadAcceleratorsW
MapVirtualKeyW
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
DrawIconEx
DrawFocusRect
DrawFrameControl
DrawEdge
MapDialogRect
SetWindowContextHelpId
SetRect
InvalidateRgn
CopyAcceleratorTableW
CharNextW
DestroyIcon
WaitMessage
CopyImage
MonitorFromPoint
UnionRect
EnableScrollBar
DestroyMenu
IsMenu
IsRectEmpty
SetMenuDefaultItem
GetMenuDefaultItem
GetMenuItemInfoW
CreatePopupMenu
NotifyWinEvent
OffsetRect
WindowFromPoint
MessageBeep
SetWindowRgn
DeleteMenu
GetSystemMenu
LoadMenuW
KillTimer
SetTimer
IsZoomed
TrackMouseEvent
IntersectRect
InflateRect
RealChildWindowFromPoint
SendDlgItemMessageA
UnregisterClassW
EnumDisplayMonitors
SetRectEmpty
CharUpperW
LoadCursorW
GetSysColorBrush
SetCursor
ShowOwnedPopups
TranslateMessage
GetMessageW
PostQuitMessage
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
CheckMenuItem
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
GetTopWindow
GetClassLongW
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
PeekMessageW
DispatchMessageW
IsDialogMessageW
GetWindow
SetWindowLongW
GetWindowTextLengthW
GetWindowTextW
SetWindowTextW
SetFocus
GetDlgCtrlID
CheckDlgButton
SetWindowPos
MoveWindow
ShowWindow
CallNextHookEx
SetWindowsHookExW
PtInRect
GetFocus
GetSysColor
ScreenToClient
ClientToScreen
EndPaint
BeginPaint
ReleaseDC
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
GetWindowRgn
GetComboBoxInfo
DestroyCursor
InvertRect
HideCaret
CreateMenu
SubtractRect
GetUpdateRect
IsClipboardFormatAvailable
TranslateMDISysAccel
DefMDIChildProcW
GetLastActivePopup
GetWindowThreadProcessId
DefFrameProcW
DrawMenuBar
MapVirtualKeyExW
GetKeyNameTextW
IsCharLowerW
GetIconInfo
GetDoubleClickTime
GetNextDlgGroupItem
EnableMenuItem
PostThreadMessageW
GetWindowLongW
SetActiveWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamW
DestroyWindow
UnhookWindowsHookEx
GetClassNameW
FillRect
InvalidateRect
UpdateWindow
DrawStateW
GetDesktopWindow
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
PostMessageW
GetParent
GetAsyncKeyState
DrawIcon
GetClientRect
GetSystemMetrics
IsIconic
SetLayeredWindowAttributes
MessageBoxW
SendMessageTimeoutW
RegisterWindowMessageW
EnableWindow
IsWindow
ReleaseCapture
SetCapture
GetCursorPos
SetForegroundWindow
LoadBitmapW
SendMessageW
UpdateLayeredWindow
GetDC
GetWindowRect
LoadIconW
SystemParametersInfoW

gdi32

SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateCompatibleBitmap
CreateDIBitmap
CreateFontIndirectW
CreateRectRgnIndirect
EnumFontFamiliesW
GetTextCharsetInfo
GetTextMetricsW
GetTextExtentPoint32W
CombineRgn
GetMapMode
PatBlt
SetRectRgn
DPtoLP
CreateRoundRectRgn
CreateDIBSection
GetBkColor
GetTextColor
GetRgnBox
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
RealizePalette
SetPixel
StretchBlt
SetDIBColorTable
OffsetRgn
Rectangle
SetViewportOrgEx
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
ExtFloodFill
SetPaletteEntries
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
GetWindowOrgEx
LPtoDP
GetViewportOrgEx
EnumFontFamiliesExW
SetPixelV
GetTextFaceW
SetTextAlign
SetTextColor
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
RoundRect
CreateCompatibleDC
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SetBkColor
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteDC
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateBitmap
BitBlt
GetObjectW
GetStockObject
CreateSolidBrush
GetDeviceCaps
CreateDCW
CopyMetaFileW
DeleteObject
SelectObject

msimg32

AlphaBlend
TransparentBlt

winspool.drv

DocumentPropertiesW
ClosePrinter
OpenPrinterW

advapi32

RegSetValueExW
RegEnumKeyExW
RegEnumValueW
RegQueryValueW
RegEnumKeyW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegOpenKeyExW

shell32

DragFinish
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDesktopFolder
SHGetFileInfoW
ShellExecuteW
SHGetMalloc
DragQueryFileW
SHAppBarMessage

comctl32

InitCommonControlsEx

shlwapi

PathFileExistsW
PathFindExtensionW
PathFindFileNameW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathRemoveFileSpecW

uxtheme

OpenThemeData
IsAppThemed
DrawThemeParentBackground
DrawThemeText
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetWindowTheme
GetThemeSysColor
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData

ole32

OleInitialize
OleUninitialize
CoFreeUnusedLibraries
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CreateStreamOnHGlobal
CoInitializeEx
CLSIDFromProgID
CoCreateInstance
CoGetObject
CoTaskMemAlloc
CoTaskMemFree
OleDuplicateData
ReleaseStgMedium
CoUninitialize
CoRegisterMessageFilter
CoRevokeClassObject
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
CoCreateGuid
CoInitialize
CoDisconnectObject
CLSIDFromString

oleaut32

SysAllocString
OleCreateFontIndirect
VarBstrFromDate
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayDestroy
SafeArrayCreate
VariantTimeToSystemTime
SystemTimeToVariantTime
SysStringLen
DispCallFunc
LoadRegTypeLi
VariantCopy
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
LoadTypeLi

oledlg

OleUIBusyW

gdiplus

GdipDrawImageI
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageGraphicsContext
GdipDrawImageRectI
GdipSetInterpolationMode
GdipDeleteGraphics
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromStream
GdipCreateBitmapFromHBITMAP
GdipGetImageWidth
GdipGetImageHeight
GdipCreateHBITMAPFromBitmap
GdipFree
GdipDisposeImage
GdipAlloc
GdipCloneImage

dbghelp

MiniDumpWriteDump

ws2_32

shutdown
freeaddrinfo
closesocket
connect
socket
getaddrinfo
WSACleanup
WSAStartup

wininet

HttpOpenRequestW
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetReadFile
InternetConnectW
InternetCloseHandle
InternetOpenW
HttpSendRequestW
HttpQueryInfoW

oleacc

CreateStdAccessibleObject
AccessibleObjectFromWindow
LresultFromObject

imm32

ImmReleaseContext
ImmGetContext
ImmGetOpenStatus

winmm

PlaySoundW

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 328KB - Virtual size: 327KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 26KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 28.0MB - Virtual size: 28.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 394KB - Virtual size: 394KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0e1635dd4c4571f7777699cd8979ad20

Headers

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

msimg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

uxtheme

ole32

oleaut32

oledlg

gdiplus

dbghelp

ws2_32

wininet

oleacc

imm32

winmm

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 328KB - Virtual size: 327KB

.data Size: 26KB - Virtual size: 56KB

.rsrc Size: 28.0MB - Virtual size: 28.0MB

.reloc Size: 394KB - Virtual size: 394KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 328KB - Virtual size: 327KB

.data
Size: 26KB - Virtual size: 56KB

.rsrc
Size: 28.0MB - Virtual size: 28.0MB

.reloc
Size: 394KB - Virtual size: 394KB