427c7d6c88b5c1c22024f233342464d2[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

427c7d6c88b5c1c22024f233342464d2.exe
Size

1.7MB
MD5

427c7d6c88b5c1c22024f233342464d2
SHA1

c7f5ca6cf7105d9356423720f7ff4bb396582eb8
SHA256

9ef95f67e220bb2c21e564af32614ba616871a79e96e0d50a441470f3605345b
SHA512

340d70385c6c6cb67e600b2b0b9738fbe52c01b9082203fe14d22f53d09c264b0c67ed713fe42137606e3307a83a1525fccdf493a0572c4a102d09921f1ec3ef
SSDEEP

24576:EyQUxnv1g6TgA+Zw6elBAsOv4Dem9SN/cC0Fh7jDv2R6hDrykyqsPTsE69:EyMpS3AP4DemmpkqR6rNbs41

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
427c7d6c88b5c1c22024f233342464d2.exe

Files

427c7d6c88b5c1c22024f233342464d2.exe
.exe windows:5 windows x86 arch:x86

7c912fb7c397b34505d99f3f32c95937

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\buildbot\slave\workdir\repos\opera\chromium\src\out\Release\launcher.exe.pdb

Imports

advapi32

RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
BuildTrusteeWithSidW
GetNamedSecurityInfoW
SetNamedSecurityInfoW
SetEntriesInAclW
AllocateAndInitializeSid
RegEnumValueW
RegSetValueExW
RegEnumKeyExW
RegDeleteKeyW
RegQueryInfoKeyW
RegGetKeySecurity
GetUserNameW
DuplicateToken
CheckTokenMembership
FreeSid
OpenProcessToken
BuildExplicitAccessWithNameW
GetExplicitEntriesFromAclW
AccessCheck
AdjustTokenPrivileges
LookupPrivilegeValueW
RegQueryValueExW
RegDeleteValueW
CreateProcessAsUserW

kernel32

IsValidCodePage
CreateFileW
ReadFile
CloseHandle
IsProcessorFeaturePresent
GetModuleFileNameW
MultiByteToWideChar
CreateFileA
WriteFile
QueryPerformanceCounter
QueryPerformanceFrequency
LoadResource
LockResource
SizeofResource
FindResourceW
LoadLibraryW
HeapAlloc
HeapReAlloc
HeapFree
HeapSize
GetLastError
WaitForSingleObject
SetLastError
Sleep
LocalFree
InitializeCriticalSectionAndSpinCount
RaiseException
DecodePointer
DeleteCriticalSection
GetProcessHeap
GetFileAttributesW
SetFileAttributesW
RemoveDirectoryW
GetCurrentProcess
GetProcAddress
GetModuleHandleW
FindResourceExW
GetStartupInfoW
DeleteFileW
GetCurrentDirectoryW
GetCurrentProcessId
FormatMessageA
GetTickCount
SetThreadPriority
GetCurrentThreadId
DuplicateHandle
GetCurrentThread
GetThreadPriority
CreateThread
IsDebuggerPresent
CreateDirectoryW
GetLongPathNameW
GetTempPathW
MoveFileExW
ReplaceFileW
CopyFileW
GetTempFileNameW
MoveFileW
GetVersionExW
GetNativeSystemInfo
QueryThreadCycleTime
TzSpecificLocalTimeToSystemTime
FileTimeToSystemTime
GetOEMCP
SystemTimeToTzSpecificLocalTime
GetSystemTimeAsFileTime
ExpandEnvironmentStringsW
CreateEventW
GetCommandLineW
SetEndOfFile
SetFilePointerEx
FlushFileBuffers
FindFirstFileW
FindFirstFileExW
FindNextFileW
FindClose
GetHandleInformation
GetUserDefaultUILanguage
GetLocaleInfoW
TerminateProcess
GetExitCodeProcess
SetHandleInformation
GetStdHandle
AssignProcessToJobObject
CreatePipe
ResumeThread
CreateProcessW
RtlCaptureStackBackTrace
GetThreadId
GetModuleHandleExW
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TlsSetValue
TlsAlloc
TlsGetValue
TlsFree
SetEvent
ResetEvent
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
SleepConditionVariableSRW
WideCharToMultiByte
SetUnhandledExceptionFilter
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
ReleaseSRWLockShared
AcquireSRWLockShared
GetSystemDirectoryW
GetWindowsDirectoryW
EnterCriticalSection
LeaveCriticalSection
FreeLibrary
GetTimeZoneInformation
WriteConsoleW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
ReadConsoleW
GetACP
ExitProcess
SetStdHandle
GetFullPathNameW
GetConsoleMode
GetConsoleCP
GetFileType
GetDriveTypeW
GetCommandLineA
LoadLibraryExW
RtlUnwind
OutputDebugStringW
InitializeSListHead
UnhandledExceptionFilter
GetCPInfo
GetStringTypeW
LCMapStringW
CompareStringW
EncodePointer
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetEnvironmentVariableW
GetEnvironmentVariableW
SystemTimeToFileTime

ole32

CoAllowSetForegroundWindow
CoTaskMemFree
CoInitializeEx
CoUninitialize
CoCreateInstance

oleaut32

VariantClear
VariantChangeType
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysFreeString
VariantInit
SafeArrayCreate
VariantTimeToSystemTime
SafeArrayPutElement
SafeArrayGetVartype

shell32

SHChangeNotify
ShellExecuteExW
SHGetFolderPathW
SHGetKnownFolderPath
SHOpenWithDialog
CommandLineToArgvW

shlwapi

SHDeleteKeyW

user32

WaitForInputIdle
wsprintfW
MessageBoxW

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

winmm

timeEndPeriod
timeGetTime
timeBeginPeriod

userenv

CreateEnvironmentBlock
DestroyEnvironmentBlock

Exports

Exports

GetHandleVerifier
Launch

Sections

.text
Size: 545KB - Virtual size: 548KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 87KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.gfids
Size: 1024B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.tls
Size: 512B - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1.1MB - Virtual size: 1.1MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7c912fb7c397b34505d99f3f32c95937

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

advapi32

kernel32

ole32

oleaut32

shell32

shlwapi

user32

version

winmm

userenv

Exports

Exports

Sections

.text Size: 545KB - Virtual size: 548KB

.rdata Size: 87KB - Virtual size: 88KB

.data Size: 5KB - Virtual size: 20KB

.gfids Size: 1024B - Virtual size: 4KB

.tls Size: 512B - Virtual size: 4KB

.rsrc Size: 1.1MB - Virtual size: 1.1MB

.text
Size: 545KB - Virtual size: 548KB

.rdata
Size: 87KB - Virtual size: 88KB

.data
Size: 5KB - Virtual size: 20KB

.gfids
Size: 1024B - Virtual size: 4KB

.tls
Size: 512B - Virtual size: 4KB

.rsrc
Size: 1.1MB - Virtual size: 1.1MB