32e30647244f7abc9464344fbc29e115060a7be9272f97d9f1bce7ec71d98f5a[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

32e30647244f7abc9464344fbc29e115060a7be9272f97d9f1bce7ec71d98f5a.exe
Size

4.7MB
MD5

fd2fff6baa5bfa57dc149249c455f24a
SHA1

f122eb4081b65b8cb8d0986440cc0d9ee48a8e50
SHA256

32e30647244f7abc9464344fbc29e115060a7be9272f97d9f1bce7ec71d98f5a
SHA512

967c409d3bd2c5d22d25c4790ad50707ee0ef4ae690cd000e6fb98eec5cac131b664d2739b68754f4a0820390607454354eba9e673a85a3a34a6b5eb9ecc64fd
SSDEEP

98304:GN1JdX+qCT2SQBLlpi1uUnJj2f9J1CW/2pjcr5G5ob:+pX+dei7oV2pGy

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
32e30647244f7abc9464344fbc29e115060a7be9272f97d9f1bce7ec71d98f5a.exe

Files

32e30647244f7abc9464344fbc29e115060a7be9272f97d9f1bce7ec71d98f5a.exe
.exe windows:4 windows x86 arch:x86

bb803fbbee588c5df962ace5f438e3a8

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

advapi32

RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyA
RegCloseKey

ddraw

DirectDrawCreate

dinput8

DirectInput8Create

dsound

ord1

gdi32

SetTextColor
CreateCompatibleDC
CreateFontA
CreateBitmap
SetBkMode
DeleteDC
ExtTextOutA
SetBkColor
GetPixel
DeleteObject
SelectObject
BitBlt

kernel32

VirtualQuery
IsBadCodePtr
GetCurrentProcessId
SetEndOfFile
SetStdHandle
FlushFileBuffers
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
CompareStringA
CompareStringW
SetEnvironmentVariableA
IsDebuggerPresent
DebugBreak
GetLocaleInfoW
GetExitCodeThread
GetLocaleInfoA
GetUserDefaultLCID
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
GetCPInfo
GetOEMCP
GetACP
HeapSize
HeapReAlloc
HeapCreate
HeapDestroy
TlsAlloc
SetLastError
TlsFree
GetStartupInfoA
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
IsBadWritePtr
IsBadReadPtr
GetLastError
QueryPerformanceFrequency
QueryPerformanceCounter
FindClose
FindNextFileA
FindFirstFileA
CreateDirectoryA
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleA
GetLongPathNameA
SetErrorMode
CloseHandle
Process32Next
Process32First
Sleep
CreateToolhelp32Snapshot
SuspendThread
ResumeThread
GetDriveTypeA
GetLogicalDrives
GetVersionExA
OutputDebugStringA
SetProcessAffinityMask
SetThreadPriority
SetPriorityClass
GetProcessAffinityMask
GetThreadPriority
GetPriorityClass
GetCurrentThread
GetCurrentProcess
FreeLibrary
GetProcAddress
LoadLibraryA
WideCharToMultiByte
GetSystemInfo
IsProcessorFeaturePresent
EnterCriticalSection
InterlockedExchange
InitializeCriticalSection
InterlockedCompareExchange
DeleteCriticalSection
LeaveCriticalSection
GetFullPathNameA
MapViewOfFile
GetFileSize
CreateFileMappingA
CreateFileA
CreateFileW
UnmapViewOfFile
LockResource
LoadResource
SizeofResource
FindResourceA
FindResourceW
VirtualFree
VirtualAlloc
lstrcmpiA
DuplicateHandle
GetCurrentThreadId
TerminateThread
SleepEx
GetTickCount
CreateEventA
SetEvent
WaitForSingleObject
ResetEvent
GetCurrentDirectoryA
WriteFile
SetFilePointer
DeleteFileA
MoveFileA
ReadFile
GetDiskFreeSpaceExA
GlobalAlloc
GlobalFree
VirtualProtect
CreateThread
CreateMutexA
ReleaseMutex
HeapFree
GetProcessHeap
HeapAlloc
WaitCommEvent
GetOverlappedResult
SetCommMask
WaitForMultipleObjects
PurgeComm
SetCommState
GetCommState
SetCommConfig
GetCommConfig
SetCommTimeouts
SetupComm
GetCommandLineA
RtlUnwind
ExitProcess
TerminateProcess
GetTimeZoneInformation
GetSystemTimeAsFileTime
RaiseException
ExitThread
TlsSetValue
TlsGetValue
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDiskFreeSpaceA
GetFileType
RemoveDirectoryA

netapi32

Netbios

shell32

ShellExecuteA

shfolder

SHGetFolderPathA

tapi32

lineAnswer
lineMakeCall
lineGetID
lineClose
lineNegotiateAPIVersion
lineOpen
lineGetDevCaps
lineInitialize
lineShutdown

user32

ShowCursor
GetCursorPos
wvsprintfA
MessageBoxA
GetSystemMetrics
DefWindowProcA
ReleaseCapture
GetMessageA
DispatchMessageA
PeekMessageA
TranslateMessage
LoadIconA
LoadCursorA
RegisterClassExA
AdjustWindowRect
GetDesktopWindow
CreateWindowExA
UpdateWindow
SetCursor
SetFocus
SetForegroundWindow
ShowWindow
SetWindowLongA
DestroyWindow
BeginPaint
EndPaint
PostMessageA
PostThreadMessageA
PostQuitMessage
SetCapture
GetClientRect
GetWindowRect
SetRect
UnregisterClassA
SetActiveWindow
GetForegroundWindow
wsprintfA
IsIconic

winmm

timeSetEvent
timeKillEvent
timeBeginPeriod
timeGetDevCaps
timeGetTime
timeEndPeriod

ws2_32

WSAGetLastError
WSAStartup
setsockopt
ioctlsocket
socket
closesocket
shutdown
bind
connect
listen
accept
sendto
send
recvfrom
recv
select
getpeername
getsockname
gethostbyname
gethostname
WSAIoctl
WSACleanup

d3d9

Direct3DCreate9

Sections

.text
Size: 3.5MB - Virtual size: 3.5MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rdata
Size: 404KB - Virtual size: 400KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data
Size: 212KB - Virtual size: 1.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 236KB - Virtual size: 235KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

Size: 8KB - Virtual size: 8KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 376KB - Virtual size: 374KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

bb803fbbee588c5df962ace5f438e3a8

Headers

File Characteristics

Imports

advapi32

ddraw

dinput8

dsound

gdi32

kernel32

netapi32

shell32

shfolder

tapi32

user32

winmm

ws2_32

d3d9

Sections

.text Size: 3.5MB - Virtual size: 3.5MB

.rdata Size: 404KB - Virtual size: 400KB

.data Size: 212KB - Virtual size: 1.0MB

Size: 236KB - Virtual size: 235KB

Size: 8KB - Virtual size: 8KB

.rsrc Size: 376KB - Virtual size: 374KB

.text
Size: 3.5MB - Virtual size: 3.5MB

.rdata
Size: 404KB - Virtual size: 400KB

.data
Size: 212KB - Virtual size: 1.0MB

.rsrc
Size: 376KB - Virtual size: 374KB