r-studio_rportable_rec[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

r-studio_rportable_rec.exe
Size

163KB
MD5

46d339d522f960f7c5fc07331c7ef197
SHA1

b984f81937efa3c55682758f1f57a6b2d6e3db80
SHA256

6fa1629bd5b419761d64a4d999c57f44d2bb0128d3aa73a51d220c4e49d64792
SHA512

6f47d09e505f8374d18f06208b56da0122832ea8e0028ccbf49d42e924e7bcaf52c91a19eca784e729e6bb040ed952269b05439b2329aaa0b4a7c6cc84407e33
SSDEEP

3072:ohBOqhjdheBvTwamXAeUfGSMqWrt1E6ZDX8wvcd5u95vsk7eOwb8:ohwudheB7aA0fvE6WwQ5e597N

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
r-studio_rportable_rec.exe

Files

r-studio_rportable_rec.exe
.exe windows:4 windows x86 arch:x86

9eaa2486835bd3f6565ee40106e8746c

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
wcscmp
memmove
wcslen
wcscpy
memcpy
wcsncmp
_wcsicmp
fabs
malloc
free
ceil
floor
fseek
ftell
fread
fclose
pow
??3@YAXPAX@Z
cos
fmod
sin
abs
wcsncpy
wcscat
localtime
mktime
gmtime
tolower
_vsnwprintf

kernel32

GetModuleHandleW
HeapCreate
HeapDestroy
ExitProcess
VirtualProtect
GetProcAddress
EnterCriticalSection
CloseHandle
LeaveCriticalSection
InitializeCriticalSection
WaitForSingleObject
CreateThread
TerminateThread
GetModuleFileNameW
HeapAlloc
FreeLibrary
HeapFree
LoadLibraryW
HeapReAlloc
GetVersionExW
SetLastError
GetCurrentProcessId
CreateFileW
WriteFile
DeleteFileW
MultiByteToWideChar
WideCharToMultiByte
TlsAlloc
TlsSetValue
MulDiv
GetDriveTypeW
FindFirstFileW
FindClose
GetFileAttributesW
MoveFileW
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToFileTime
LocalFileTimeToFileTime
SetFileTime
GetLocalTime
SetFilePointer
GetFileSize
ReadFile
DeleteCriticalSection
InterlockedCompareExchange
Sleep
InterlockedExchange
GlobalAlloc
GlobalLock
GlobalUnlock

user32

FindWindowW
GetWindowRect
MoveWindow
InvalidateRect
MessageBoxW
SendMessageW
SetMenu
DestroyMenu
CreatePopupMenu
AppendMenuW
GetCursorPos
SetForegroundWindow
TrackPopupMenu
DestroyWindow
SystemParametersInfoW
GetWindowTextLengthW
GetWindowTextW
GetSysColor
GetSysColorBrush
GetDC
SetRect
DrawTextW
GetWindowLongW
GetSystemMetrics
ReleaseDC
CreateWindowExW
GetKeyState
GetPropW
BeginPaint
EndPaint
ClipCursor
UpdateWindow
SetFocus
RedrawWindow
GetMessagePos
ScreenToClient
ChildWindowFromPointEx
SetCursor
CallWindowProcW
GetCapture
ReleaseCapture
GetClientRect
MapWindowPoints
SetCapture
DefWindowProcW
FillRect
GetFocus
DrawStateW
DrawFocusRect
LoadCursorW
SetPropW
RegisterClassExW
EnableWindow
GetWindow
SetWindowLongW
SetWindowTextW
IsWindowEnabled
RemovePropW
SetWindowPos
SetScrollPos
GetParent
InflateRect
GetWindowDC
SetActiveWindow
DestroyIcon
LoadIconW
PeekMessageW
MsgWaitForMultipleObjects
GetMessageW
GetActiveWindow
TranslateAcceleratorW
TranslateMessage
DispatchMessageW
RegisterClassW
AdjustWindowRectEx
ShowWindow
CreateAcceleratorTableW
UnregisterClassW
DefFrameProcW
DestroyAcceleratorTable
EnumChildWindows
PostMessageW
IsWindowVisible
GetClassNameW
GetWindowThreadProcessId
IsChild
RegisterWindowMessageW
EnumDisplaySettingsW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetIconInfo
DrawIconEx

gdi32

CreateSolidBrush
GetStockObject
SetBkMode
SetTextColor
DeleteObject
CreateFontIndirectW
SetBkColor
SelectObject
GetObjectW
CreateCompatibleDC
BitBlt
DeleteDC
CreateCompatibleBitmap
CreateDIBSection
GdiGetBatchLimit
GdiSetBatchLimit
GetTextExtentPoint32W
ExcludeClipRect
GetObjectType
CreateDCW
SetStretchBltMode
StretchBlt
GetDeviceCaps
CreateRectRgnIndirect
GetClipRgn
ExtSelectClipRgn
SelectClipRgn
CreateBitmap
SetPixel
GetDIBits
SetTextAlign
TextOutW
SetBrushOrgEx
GetTextMetricsW
GetPixel
CreateFontW

comdlg32

GetOpenFileNameW

ole32

RevokeDragDrop

gdiplus

GdipDeleteFont
GdipDeleteGraphics
GdipDeletePath
GdipDeleteMatrix
GdipDeletePen
GdipDeleteStringFormat
GdipFree
GdipGetDpiX
GdipGetDpiY

comctl32

InitCommonControlsEx
_TrackMouseEvent
ImageList_Replace
ImageList_Add
ImageList_ReplaceIcon
ImageList_Remove
ImageList_AddMasked
ImageList_Destroy
ImageList_Create

Sections

.code
Size: 10KB - Virtual size: 9KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 90KB - Virtual size: 90KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 35KB - Virtual size: 37KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9eaa2486835bd3f6565ee40106e8746c

Headers

File Characteristics

Imports

msvcrt

kernel32

user32

gdi32

comdlg32

ole32

gdiplus

comctl32

Sections

.code Size: 10KB - Virtual size: 9KB

.text Size: 90KB - Virtual size: 90KB

.rdata Size: 2KB - Virtual size: 1KB

.data Size: 35KB - Virtual size: 37KB

.rsrc Size: 24KB - Virtual size: 23KB

.code
Size: 10KB - Virtual size: 9KB

.text
Size: 90KB - Virtual size: 90KB

.rdata
Size: 2KB - Virtual size: 1KB

.data
Size: 35KB - Virtual size: 37KB

.rsrc
Size: 24KB - Virtual size: 23KB