Script - Free Trial[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

Script - Free Trial.exe
Size

3.3MB
MD5

4a71bdf74444b3a76c70c24e703550ec
SHA1

7098416e93230a00ac4a5599021f0e487ec7ec83
SHA256

67e24464820d4591c70444c2fdd508168421163b9457cd59e6cf8848f25122b7
SHA512

06e7ecdc2436a631cf0c4d9732103bced5bd7c7464f62eb4fc0b99886fe3ef15c08430e7a237fb5c80c331ce29385f0cd31845bb568b9a00b140bbf950bb7c6f
SSDEEP

49152:EGK+pVPQikYNmjFpzqCX/uAln/3i6vBZRtSDWyVXFtmQdhXPDkD:XpmAVoPp+q+7dJW

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Script - Free Trial.exe

Files

Script - Free Trial.exe
.exe windows:5 windows x86 arch:x86

fb19af9d41b2e8d1021e146306725709

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

wsock32

htonl
getservbyname
htons
WSAGetLastError
gethostbyname
ioctlsocket
getservbyport
gethostbyaddr
inet_ntoa
inet_addr
WSAAsyncSelect
recv
send
WSAStartup
socket
connect
WSACleanup
shutdown
gethostname
ntohs
WSASetLastError
closesocket

winmm

joyGetPosEx
mixerSetControlDetails
mciSendStringW
mixerGetLineControlsW
mixerOpen
mixerGetDevCapsW
mixerGetLineInfoW
mixerGetControlDetailsW
joyGetDevCapsW
waveOutSetVolume
waveOutGetVolume
mixerClose

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

comctl32

ImageList_Create
ImageList_GetIconSize
ImageList_AddMasked
ImageList_ReplaceIcon
CreateStatusWindowW
ImageList_Destroy

shlwapi

HashData

crypt32

CryptBinaryToStringA

psapi

GetModuleBaseNameW
GetProcessImageFileNameW
GetModuleFileNameExW

wininet

InternetOpenW
InternetOpenUrlW
InternetCloseHandle
InternetReadFileExA
InternetReadFile

kernel32

GetSystemTimeAsFileTime
VirtualProtect
InitializeCriticalSection
SetErrorMode
LoadLibraryW
AddVectoredExceptionHandler
GlobalLock
GlobalUnlock
WideCharToMultiByte
GetSystemDirectoryA
LoadLibraryA
FreeLibrary
GetCurrentThreadId
GetEnvironmentVariableW
SuspendThread
ResumeThread
EnterCriticalSection
LeaveCriticalSection
OpenThread
lstrcmpiW
GetStringTypeExW
CreateThread
SetThreadPriority
GetExitCodeThread
CloseHandle
CreateMutexW
GetLastError
GetModuleHandleW
MultiByteToWideChar
SystemTimeToFileTime
SetFilePointerEx
ReadFile
SetFilePointer
GlobalSize
lstrcpyA
lstrlenA
lstrcmpiA
lstrcmpA
LocalFileTimeToFileTime
CreateDirectoryA
CreateDirectoryW
IsBadReadPtr
CreateFileW
CreateFileA
WriteFile
SetFileTime
DuplicateHandle
LoadResource
LockResource
SizeofResource
GetCurrentDirectoryA
GetLocalTime
FileTimeToDosDateTime
GetFileInformationByHandle
GetFileSize
lstrlenW
FindFirstFileW
FindNextFileW
FindClose
GetCurrentProcess
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
SetLastError
FlushInstructionCache
GetTempPathA
HeapAlloc
HeapReAlloc
VirtualAlloc
VirtualFree
GetProcessHeap
HeapCreate
HeapFree
HeapDestroy
GetCommandLineW
WaitForSingleObject
GetThreadLocale
VirtualQuery
GetVersionExW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetModuleFileNameW
GetFileAttributesW
OpenProcess
GetCurrentProcessId
GetFullPathNameW
LocalFree
GetShortPathNameW
FileTimeToLocalFileTime
SetEnvironmentVariableW
Beep
MoveFileW
OutputDebugStringW
CreateProcessW
GetExitCodeProcess
WriteProcessMemory
ReadProcessMemory
TerminateProcess
SetPriorityClass
GetDateFormatW
GetTimeFormatW
GetDiskFreeSpaceExW
SetVolumeLabelW
DeviceIoControl
GetDriveTypeW
GetVolumeInformationW
GetDiskFreeSpaceW
GetCurrentDirectoryW
DeleteFileW
CopyFileW
SetFileAttributesW
GetFileSizeEx
GetSystemTime
GetSystemDefaultUILanguage
GetComputerNameW
GetSystemWindowsDirectoryW
GetTempPathW
TryEnterCriticalSection
QueryDosDeviceW
CompareStringW
RemoveDirectoryW
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
FormatMessageW
GetPrivateProfileStringW
GetPrivateProfileSectionW
GetPrivateProfileSectionNamesW
WritePrivateProfileStringW
WritePrivateProfileSectionW
HeapWalk
HeapSize
SetEndOfFile
GetACP
GetFileType
GetStdHandle
FileTimeToSystemTime
VirtualAllocEx
VirtualFreeEx
EnumResourceNamesW
LoadLibraryExW
RemoveVectoredExceptionHandler
ExitProcess
ExitThread
CheckRemoteDebuggerPresent
GetCurrentThread
GetProcAddress
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GlobalFree
QueryPerformanceCounter
_lclose
_lopen
_lread
GetProcessTimes
GetModuleFileNameA
GlobalAlloc
GetModuleHandleA
FindResourceW
GetCPInfo
SetCurrentDirectoryW
Sleep
GetTickCount
MulDiv
InitializeSListHead

user32

IsCharAlphaW
DestroyWindow
DestroyIcon
UnregisterClassW
DestroyAcceleratorTable
LoadCursorW
RegisterClassExW
CreateWindowExW
LoadAcceleratorsW
SetClipboardViewer
ChangeClipboardChain
LoadImageW
CharLowerA
CheckMenuItem
GetMenu
BlockInput
IsWindowVisible
SetWindowTextW
GetIconInfo
SetRect
DrawTextW
AdjustWindowRectEx
SystemParametersInfoW
GetClientRect
GetWindowRect
MoveWindow
EnumChildWindows
SetActiveWindow
SetFocus
SetWindowRgn
VkKeyScanExW
SetLayeredWindowAttributes
InvalidateRect
EnableWindow
GetWindowTextLengthW
EnumWindows
IsZoomed
IsIconic
EnumDisplayMonitors
GetMonitorInfoW
RegisterWindowMessageW
GetSysColor
GetSysColorBrush
DrawIconEx
FillRect
DefWindowProcW
SetForegroundWindow
DialogBoxParamW
SendDlgItemMessageW
GetDlgItem
SetDlgItemTextW
MessageBeep
ClientToScreen
GetCursorInfo
GetLastInputInfo
GetSystemMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuStringW
ExitWindowsEx
SetScrollInfo
ScrollWindow
SetMenu
FlashWindow
GetPropW
SetPropW
RemovePropW
MapWindowPoints
RedrawWindow
SetParent
GetClassInfoExW
DefDlgProcW
GetAncestor
MapVirtualKeyExW
GetMessagePos
GetClassLongW
CallWindowProcW
CheckRadioButton
IntersectRect
PtInRect
CreateDialogIndirectParamW
CreateAcceleratorTableW
InsertMenuItemW
SetMenuDefaultItem
RemoveMenu
SetMenuItemInfoW
IsMenu
GetMenuItemInfoW
CreateMenu
CreatePopupMenu
SetMenuInfo
AppendMenuW
DestroyMenu
TrackPopupMenuEx
GetDesktopWindow
CopyImage
CreateIconIndirect
CreateIconFromResourceEx
EnumClipboardFormats
GetWindow
BringWindowToTop
GetTopWindow
GetQueueStatus
UnhookWindowsHookEx
SetWindowsHookExW
PostThreadMessageW
IsCharAlphaNumericW
IsCharUpperW
IsCharLowerW
ToUnicodeEx
GetKeyboardLayout
CallNextHookEx
CharLowerW
ReleaseDC
GetDC
MessageBoxW
OpenClipboard
GetClipboardData
GetClipboardFormatNameW
CloseClipboard
SetClipboardData
EmptyClipboard
PostMessageW
FindWindowW
EndDialog
IsWindow
DispatchMessageW
TranslateMessage
CountClipboardFormats
SetWindowLongW
ScreenToClient
IsDialogMessageW
WindowFromPoint
SendMessageW
IsWindowEnabled
GetWindowLongW
GetKeyState
TranslateAcceleratorW
KillTimer
PeekMessageW
GetFocus
GetClassNameW
GetForegroundWindow
GetMessageW
SetTimer
GetScrollInfo
GetParent
GetDlgCtrlID
CharUpperW
IsClipboardFormatAvailable
GetKeyboardLayoutNameW
ActivateKeyboardLayout
GetGUIThreadInfo
GetWindowTextW
mouse_event
GetSystemMetrics
keybd_event
SetKeyboardState
GetKeyboardState
GetCursorPos
GetUpdateRect
MapVirtualKeyW
GetAsyncKeyState
AttachThreadInput
SendInput
UnregisterHotKey
RegisterHotKey
PostQuitMessage
UpdateWindow
SendMessageTimeoutW
ShowWindow
GetWindowThreadProcessId
SetWindowPos

gdi32

CreateDCW
GetTextMetricsW
GetObjectW
DeleteDC
GetStockObject
SelectObject
GetTextFaceW
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgn
CreatePolygonRgn
CreateCompatibleDC
GetDIBits
GetSystemPaletteEntries
CreateCompatibleBitmap
BitBlt
GetPixel
FillRgn
GetClipBox
GetCharABCWidthsW
SetBkMode
CreatePatternBrush
SetBrushOrgEx
EnumFontFamiliesExW
CreateDIBSection
GdiFlush
CreateFontW
DeleteObject
GetDeviceCaps
CreateEllipticRgn
ExcludeClipRect
SetTextColor
SetBkColor
GetClipRgn

comdlg32

GetOpenFileNameW
CommDlgExtendedError
GetSaveFileNameW

advapi32

CryptReleaseContext
CryptDestroyHash
CryptDeriveKey
CryptHashData
CryptCreateHash
CryptAcquireContextW
RegDeleteValueW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegQueryValueExW
AdjustTokenPrivileges
LookupPrivilegeValueW
OpenProcessToken
CloseServiceHandle
UnlockServiceDatabase
LockServiceDatabase
OpenSCManagerW
GetUserNameW
RegEnumKeyExW
RegEnumValueW
RegQueryInfoKeyW
RegOpenKeyExW
RegConnectRegistryW
RegCloseKey
CryptDestroyKey

shell32

SHFileOperationW
SHGetDesktopFolder
SHEmptyRecycleBinW
DragQueryPoint
ExtractIconW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
SHGetFolderPathW
ShellExecuteExW
CommandLineToArgvW
Shell_NotifyIconW
DragFinish
DragQueryFileW

ole32

StringFromGUID2
CoGetObject
CLSIDFromProgID
CLSIDFromString
CoUninitialize
CoCreateInstance
CoInitialize
CreateStreamOnHGlobal

oleaut32

SysAllocString
SysFreeString
SafeArrayDestroy
GetActiveObject
SysStringLen
SafeArrayCreate
VariantClear
VariantChangeType
SafeArrayCopy
VariantCopyInd
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SafeArrayLock
SafeArrayPtrOfIndex
SafeArrayUnlock
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayUnaccessData
OleLoadPicture

vcruntime140

memset
__current_exception_context
__current_exception
_CxxThrowException
__std_exception_destroy
__std_exception_copy
_except_handler4_common
wcsstr
strstr
strchr
wcschr
_purecall
wcsrchr
__std_terminate
__CxxFrameHandler3
_except_handler3
__RTDynamicCast
memcpy
memmove

api-ms-win-crt-convert-l1-1-0

_itow
_i64tow
strtol
_wtof
_wcstoi64
_wtoi64
wcstol
atof
_atoi64
atoi
wcstod
_ultoa
_itoa
_ultow
wcstoul
wcstombs
_wtoi
_wcstoui64
strtoul

api-ms-win-crt-string-l1-1-0

wcsncpy
isdigit
toupper
_strnicmp
iswdigit
_stricmp
strncmp
strcat_s
wcsncmp
tolower
strncpy_s
strcpy_s
_isctype
towupper
_wcsupr
iswxdigit
wcscspn
_wcsnicmp
isxdigit
_wcsdup
_wcsicmp
iswspace

api-ms-win-crt-heap-l1-1-0

realloc
_set_new_mode
_callnewh
_expand
_msize
calloc
free
malloc

api-ms-win-crt-runtime-l1-1-0

_get_wide_winmain_command_line
_set_app_type
_seh_filter_exe
_initterm
_initialize_wide_environment
exit
_initterm_e
_beginthreadex
_cexit
_exit
_configure_wide_argv
_c_exit
_crt_atexit
_register_onexit_function
_register_thread_local_exe_atexit_callback
terminate
_initialize_onexit_table
_controlfp_s
__p___wargv
__p___argc

api-ms-win-crt-stdio-l1-1-0

fwrite
fclose
__stdio_common_vswprintf
setvbuf
fread
ftell
fseek
_wfopen
__p__commode
__acrt_iob_func
_set_fmode
__stdio_common_vsprintf_s
__stdio_common_vsprintf

api-ms-win-crt-utility-l1-1-0

bsearch
rand
qsort

api-ms-win-crt-filesystem-l1-1-0

_wsplitpath

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

Exports

Exports

ADDFILE
ADDSCRIPT
AHKASSIGN
AHKEXEC
AHKEXECUTELINE
AHKFINDFUNC
AHKFINDLABEL
AHKFUNCTION
AHKGETVAR
AHKISUNICODE
AHKLABEL
AHKPAUSE
AHKPOSTFUNCTION
AddFile
AddScript
Addfile
Addscript
AhkAssign
AhkExec
AhkExecuteLine
AhkExecuteline
AhkFindFunc
AhkFindLabel
AhkFindfunc
AhkFindlabel
AhkFunction
AhkGetVar
AhkGetvar
AhkIsUnicode
AhkIsunicode
AhkLabel
AhkPause
AhkPostFunction
AhkPostfunction
Ahkassign
Ahkexec
AhkexecuteLine
Ahkexecuteline
AhkfindFunc
AhkfindLabel
Ahkfindfunc
Ahkfindlabel
Ahkfunction
AhkgetVar
Ahkgetvar
AhkisUnicode
Ahkisunicode
Ahklabel
Ahkpause
AhkpostFunction
Ahkpostfunction
MinHookDisable
MinHookEnable
addFile
addScript
addfile
addscript
ahkAssign
ahkExec
ahkExecuteLine
ahkExecuteline
ahkFindFunc
ahkFindLabel
ahkFindfunc
ahkFindlabel
ahkFunction
ahkGetVar
ahkGetvar
ahkIsUnicode
ahkIsunicode
ahkLabel
ahkPause
ahkPostFunction
ahkPostfunction
ahkassign
ahkexec
ahkexecuteLine
ahkexecuteline
ahkfindFunc
ahkfindLabel
ahkfindfunc
ahkfindlabel
ahkfunction
ahkgetVar
ahkgetvar
ahkisUnicode
ahkisunicode
ahklabel
ahkpause
ahkpostFunction
ahkpostfunction

Sections

.text
Size: 814KB - Virtual size: 813KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 167KB - Virtual size: 167KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 9KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.3MB - Virtual size: 2.3MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fb19af9d41b2e8d1021e146306725709

Headers

File Characteristics

Imports

wsock32

winmm

version

comctl32

shlwapi

crypt32

psapi

wininet

kernel32

user32

gdi32

comdlg32

advapi32

shell32

ole32

oleaut32

vcruntime140

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

Exports

Exports

Sections

.text Size: 814KB - Virtual size: 813KB

.rdata Size: 167KB - Virtual size: 167KB

.data Size: 9KB - Virtual size: 28KB

.rsrc Size: 2.3MB - Virtual size: 2.3MB

.text
Size: 814KB - Virtual size: 813KB

.rdata
Size: 167KB - Virtual size: 167KB

.data
Size: 9KB - Virtual size: 28KB

.rsrc
Size: 2.3MB - Virtual size: 2.3MB