Indian_Fucker[.]exe | Triage

Resubmissions

19-09-2024 05:18

240919-fzsqtasgrn 8

19-09-2024 01:37

240919-b14r9athnp 8

Sharing

General

Target

Indian_Fucker.exe
Size

206KB
MD5

d5f741b0bb991604d5331de863d49d8b
SHA1

1c73d032211696e954259b48c3e83029d7852846
SHA256

adac36e4faab7c953354b50391774c9b01379cb4445de52f074464c58d751d1d
SHA512

a84b1acec34996a5047ff082985510cecf1d381b216e3b02dca2113b16500d417c6f89833ad93a3b1ba96b23cbcc8af5cd5d065fe6235d5273c1c8412538fa30
SSDEEP

3072:CKEiM0DPxUKQf5kv+Tx5DQdqRd+vKWbb1boDu8:WifPxDzvRdMdoh1D8

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Indian_Fucker.exe

Files

Indian_Fucker.exe
.exe windows:5 windows x86 arch:x86

bc435f8e44f15daf0a963adc0a54ccdc

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\Niko\documents\visual studio 2013\Projects\QSO J1228+3128\Release\QSO J1228+3128.pdb

Imports

kernel32

WriteConsoleW
SetFilePointerEx
SetStdHandle
GetConsoleMode
GetConsoleCP
FlushFileBuffers
OutputDebugStringW
LCMapStringW
DeleteFileA
LocalFree
CloseHandle
CreateToolhelp32Snapshot
DeviceIoControl
LocalAlloc
Process32Next
LoadLibraryA
SetFileAttributesA
GetProcAddress
GetConsoleWindow
TerminateProcess
Sleep
OpenProcess
WriteFile
Process32First
GetCurrentProcess
CreateFileA
GetStringTypeW
ExitProcess
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
GetCommandLineA
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
GetLastError
GetModuleHandleExW
AreFileApisANSI
MultiByteToWideChar
WideCharToMultiByte
DeleteFileW
HeapFree
HeapSize
SetLastError
GetCurrentThreadId
HeapAlloc
GetProcessHeap
GetStdHandle
GetFileType
DeleteCriticalSection
GetStartupInfoW
GetModuleFileNameA
GetModuleFileNameW
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapReAlloc
CreateFileW

user32

GetWindowRect
GetWindowDC
LoadIconA
DrawIcon
GetDC
GetForegroundWindow
MessageBoxA
SetCursorPos
GetDesktopWindow
GetCursorPos
ShowWindow
GetSystemMetrics

gdi32

PatBlt
LineTo
SetTextColor
StretchBlt
SetBkColor
SelectObject
Rectangle
Ellipse
CreateSolidBrush
TextOutA
BitBlt

advapi32

AdjustTokenPrivileges
RegOpenKeyExA
RegCreateKeyExA
LookupPrivilegeValueA
RegSetValueExA
OpenProcessToken
RegCloseKey

Sections

.text
Size: 55KB - Virtual size: 54KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 30KB - Virtual size: 29KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 12KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 110KB - Virtual size: 110KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ