d8f78241f9e732ff57f1f307c99d7e27796829927283172653634470ab9b90aaN[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

d8f78241f9e732ff57f1f307c99d7e27796829927283172653634470ab9b90aaN.exe
Size

900KB
MD5

338b828676d1d088ed1bd3a335e9b780
SHA1

4bc3d044e35d9953a71ac426c212b6a3c9de509c
SHA256

d8f78241f9e732ff57f1f307c99d7e27796829927283172653634470ab9b90aa
SHA512

f4f97fcba6d28aad4cc05408cb97e96603b6cab093317457cf72a4c2474114d7dfbb85e0b1f381e1a56c55221db7f4d1cec54e846c31349258f4dd72e0d702e3
SSDEEP

12288:MGVNJAvuPFUl/faxmVlBLXKCgFfEK7JRLeHlX//ve7Y:t3JAvRl/fKQKCgFfx4P/vaY

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
d8f78241f9e732ff57f1f307c99d7e27796829927283172653634470ab9b90aaN.exe

Files

d8f78241f9e732ff57f1f307c99d7e27796829927283172653634470ab9b90aaN.exe
.dll windows:5 windows x64 arch:x64

72906e44c69f979a7a4dfcb492a7b5bb

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Imports

user32

GetDoubleClickTime
GetForegroundWindow
GetClipboardOwner
DdeSetQualityOfService
ClientToScreen
DefDlgProcW

gdi32

RemoveFontMemResourceEx
GetClipBox
GetTextColor

ole32

StringFromCLSID

kernel32

GetVersion
GetQueuedCompletionStatus
GetErrorMode
GetExitCodeProcess
SetCommTimeouts
GetUserDefaultLangID
SetFileBandwidthReservation
GetNamedPipeClientSessionId
GetTapeStatus

msvcrt

memset

Exports

Exports

GetTapi16CallbackMsg
LAddrParamsInited
LOpenDialAsst
LocWizardDlgProc
MMCAddProvider
MMCConfigProvider
MMCGetAvailableProviders
MMCGetDeviceFlags
MMCGetLineInfo
MMCGetLineStatus
MMCGetPhoneInfo
MMCGetPhoneStatus
MMCGetProviderList
MMCGetServerConfig
MMCInitialize
MMCRemoveProvider
MMCSetLineInfo
MMCSetPhoneInfo
MMCSetServerConfig
MMCShutdown
NonAsyncEventThread
TAPIWndProc
TUISPIDLLCallback
internalConfig
internalCreateDefLocation
internalNewLocationW
internalPerformance
internalRemoveLocation
internalRenameLocationW
lineAccept
lineAddProvider
lineAddProviderA
lineAddProviderW
lineAddToConference
lineAgentSpecific
lineAnswer
lineBlindTransfer
lineBlindTransferA
lineBlindTransferW
lineClose
lineCompleteCall
lineCompleteTransfer
lineConfigDialog
lineConfigDialogA
lineConfigDialogEdit
lineConfigDialogEditA
lineConfigDialogEditW
lineConfigDialogW
lineConfigProvider
lineCreateAgentA
lineCreateAgentSessionA
lineCreateAgentSessionW
lineCreateAgentW
lineDeallocateCall
lineDevSpecific
lineDevSpecificFeature
lineDial
lineDialA
lineDialW
lineDrop
lineForward
lineForwardA
lineForwardW
lineGatherDigits
lineGatherDigitsA
lineGatherDigitsW
lineGenerateDigits
lineGenerateDigitsA
lineGenerateDigitsW
lineGenerateTone
lineGetAddressCaps
lineGetAddressCapsA
lineGetAddressCapsW
lineGetAddressID
lineGetAddressIDA
lineGetAddressIDW
lineGetAddressStatus
lineGetAddressStatusA
lineGetAddressStatusW
lineGetAgentActivityListA
lineGetAgentActivityListW
lineGetAgentCapsA
lineGetAgentCapsW
lineGetAgentGroupListA
lineGetAgentGroupListW
lineGetAgentInfo
lineGetAgentSessionInfo
lineGetAgentSessionList
lineGetAgentStatusA
lineGetAgentStatusW
lineGetAppPriority
lineGetAppPriorityA
lineGetAppPriorityW
lineGetCallInfo
lineGetCallInfoA
lineGetCallInfoW
lineGetCallStatus
lineGetConfRelatedCalls
lineGetCountry
lineGetCountryA
lineGetCountryW
lineGetDevCaps
lineGetDevCapsA
lineGetDevCapsW
lineGetDevConfig
lineGetDevConfigA
lineGetDevConfigW
lineGetGroupListA
lineGetGroupListW
lineGetID
lineGetIDA
lineGetIDW
lineGetIcon
lineGetIconA
lineGetIconW
lineGetLineDevStatus
lineGetLineDevStatusA
lineGetLineDevStatusW
lineGetMessage
lineGetNewCalls
lineGetNumRings
lineGetProviderList
lineGetProviderListA
lineGetProviderListW
lineGetProxyStatus
lineGetQueueInfo
lineGetQueueListA
lineGetQueueListW
lineGetRequest
lineGetRequestA
lineGetRequestW
lineGetStatusMessages
lineGetTranslateCaps
lineGetTranslateCapsA
lineGetTranslateCapsW
lineHandoff
lineHandoffA
lineHandoffW
lineHold
lineInitialize
lineInitializeExA
lineInitializeExW
lineMakeCall
lineMakeCallA
lineMakeCallW
lineMonitorDigits
lineMonitorMedia
lineMonitorTones
lineNegotiateAPIVersion
lineNegotiateExtVersion
lineOpen
lineOpenA
lineOpenW
linePark
lineParkA
lineParkW
linePickup
linePickupA
linePickupW
linePrepareAddToConference
linePrepareAddToConferenceA
linePrepareAddToConferenceW
lineProxyMessage
lineProxyResponse
lineRedirect
lineRedirectA
lineRedirectW
lineRegisterRequestRecipient
lineReleaseUserUserInfo
lineRemoveFromConference
lineRemoveProvider
lineSecureCall
lineSendUserUserInfo
lineSetAgentActivity
lineSetAgentGroup
lineSetAgentMeasurementPeriod
lineSetAgentSessionState
lineSetAgentState
lineSetAgentStateEx
lineSetAppPriority
lineSetAppPriorityA
lineSetAppPriorityW
lineSetAppSpecific
lineSetCallData
lineSetCallParams
lineSetCallPrivilege
lineSetCallQualityOfService
lineSetCallTreatment
lineSetCurrentLocation
lineSetDevConfig
lineSetDevConfigA
lineSetDevConfigW
lineSetLineDevStatus
lineSetMediaControl
lineSetMediaMode
lineSetNumRings
lineSetQueueMeasurementPeriod
lineSetStatusMessages
lineSetTerminal
lineSetTollList
lineSetTollListA
lineSetTollListW
lineSetupConference
lineSetupConferenceA
lineSetupConferenceW
lineSetupTransfer
lineSetupTransferA
lineSetupTransferW
lineShutdown
lineSwapHold
lineTranslateAddress
lineTranslateAddressA
lineTranslateAddressW
lineTranslateDialog
lineTranslateDialogA
lineTranslateDialogW
lineUncompleteCall
lineUnhold
lineUnpark
lineUnparkA
lineUnparkW
phoneClose
phoneConfigDialog
phoneConfigDialogA
phoneConfigDialogW
phoneDevSpecific
phoneGetButtonInfo
phoneGetButtonInfoA
phoneGetButtonInfoW
phoneGetData
phoneGetDevCaps
phoneGetDevCapsA
phoneGetDevCapsW
phoneGetDisplay
phoneGetGain
phoneGetHookSwitch
phoneGetID
phoneGetIDA
phoneGetIDW
phoneGetIcon
phoneGetIconA
phoneGetIconW
phoneGetLamp
phoneGetMessage
phoneGetRing
phoneGetStatus
phoneGetStatusA
phoneGetStatusMessages
phoneGetStatusW
phoneGetVolume
phoneInitialize
phoneInitializeExA
phoneInitializeExW
phoneNegotiateAPIVersion
phoneNegotiateExtVersion
phoneOpen
phoneSetButtonInfo
phoneSetButtonInfoA
phoneSetButtonInfoW
phoneSetData
phoneSetDisplay
phoneSetGain
phoneSetHookSwitch
phoneSetLamp
phoneSetRing
phoneSetStatusMessages
phoneSetVolume
phoneShutdown
tapiGetLocationInfo
tapiGetLocationInfoA
tapiGetLocationInfoW
tapiRequestDrop
tapiRequestMakeCall
tapiRequestMakeCallA
tapiRequestMakeCallW
tapiRequestMediaCall
tapiRequestMediaCallA
tapiRequestMediaCallW

Sections

.text
Size: 260KB - Virtual size: 259KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 488KB - Virtual size: 486KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 324B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

.hszx
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jjzy
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.ktuiav
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.axiiwg
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bofc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.aewm
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.yfx
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.euvwhf
Size: 8KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.woxi
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.pgmc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.jsfvn
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rnk
Size: 4KB - Virtual size: 276B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.qpk
Size: 4KB - Virtual size: 431B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.xpr
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.zqfs
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

72906e44c69f979a7a4dfcb492a7b5bb

Headers

DLL Characteristics

File Characteristics

Imports

user32

gdi32

ole32

kernel32

msvcrt

Exports

Exports

Sections

.text Size: 260KB - Virtual size: 259KB

.rdata Size: 4KB - Virtual size: 3KB

.data Size: 488KB - Virtual size: 486KB

.pdata Size: 4KB - Virtual size: 324B

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 8KB - Virtual size: 7KB

.hszx Size: 28KB - Virtual size: 27KB

.jjzy Size: 28KB - Virtual size: 27KB

.ktuiav Size: 4KB - Virtual size: 1KB

.axiiwg Size: 4KB - Virtual size: 1KB

.bofc Size: 4KB - Virtual size: 3KB

.aewm Size: 8KB - Virtual size: 6KB

.yfx Size: 4KB - Virtual size: 2KB

.euvwhf Size: 8KB - Virtual size: 4KB

.woxi Size: 4KB - Virtual size: 1KB

.pgmc Size: 8KB - Virtual size: 6KB

.jsfvn Size: 8KB - Virtual size: 6KB

.rnk Size: 4KB - Virtual size: 276B

.qpk Size: 4KB - Virtual size: 431B

.xpr Size: 4KB - Virtual size: 2KB

.zqfs Size: 8KB - Virtual size: 7KB

.text
Size: 260KB - Virtual size: 259KB

.rdata
Size: 4KB - Virtual size: 3KB

.data
Size: 488KB - Virtual size: 486KB

.pdata
Size: 4KB - Virtual size: 324B

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 8KB - Virtual size: 7KB

.hszx
Size: 28KB - Virtual size: 27KB

.jjzy
Size: 28KB - Virtual size: 27KB

.ktuiav
Size: 4KB - Virtual size: 1KB

.axiiwg
Size: 4KB - Virtual size: 1KB

.bofc
Size: 4KB - Virtual size: 3KB

.aewm
Size: 8KB - Virtual size: 6KB

.yfx
Size: 4KB - Virtual size: 2KB

.euvwhf
Size: 8KB - Virtual size: 4KB

.woxi
Size: 4KB - Virtual size: 1KB

.pgmc
Size: 8KB - Virtual size: 6KB

.jsfvn
Size: 8KB - Virtual size: 6KB

.rnk
Size: 4KB - Virtual size: 276B

.qpk
Size: 4KB - Virtual size: 431B

.xpr
Size: 4KB - Virtual size: 2KB

.zqfs
Size: 8KB - Virtual size: 7KB