0e62b43cfa9531fd391d097faf093eddd3902fdd6ed6b2953f3dd368e509972dN[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

0e62b43cfa9531fd391d097faf093eddd3902fdd6ed6b2953f3dd368e509972dN.exe
Size

3.0MB
MD5

e499ff1a61778f2d517d521fcd373b80
SHA1

48d83dbc6790c859f8b8648f5e37a8dbd1addbb8
SHA256

0e62b43cfa9531fd391d097faf093eddd3902fdd6ed6b2953f3dd368e509972d
SHA512

10080748cf6340db7cd9f7be8e0240f0eeec858408cc48bc9943883b573ceb057377b9477101197026842ff280b82f8ec0c441c454f6d60b26b7a9fd25b8ab73
SSDEEP

98304:ffXEXFBUOCxyoQThlu9SYVqelj2vSVcLK8X+AnmTVhkXXXXBPT:nXEXFB3AHJlva5uAnmTVh4PT

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
0e62b43cfa9531fd391d097faf093eddd3902fdd6ed6b2953f3dd368e509972dN.exe

Files

0e62b43cfa9531fd391d097faf093eddd3902fdd6ed6b2953f3dd368e509972dN.exe
.exe windows:5 windows x86 arch:x86

3d153ecd14b4ceac9ff01081c9fb9fac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

PlaySoundA

user32

IsWindowVisible
FindWindowExA
GetWindowThreadProcessId
GetSystemMenu
DrawMenuBar
EnableScrollBar
SetScrollInfo
EndPaint
BeginPaint
PostQuitMessage
DestroyMenu
DestroyWindow
DefWindowProcA
MessageBoxA
EnableMenuItem
GetWindowTextLengthA
SetFocus
RemovePropA
GetPropA
SetPropA
GetClassNameA
ClientToScreen
GetWindowTextA
PostMessageA
GetWindowRgn
DestroyCursor
SubtractRect
MapVirtualKeyExA
IsCharLowerA
GetDoubleClickTime
CharUpperBuffA
CopyIcon
LoadImageW
EmptyClipboard
CloseClipboard
SetClipboardData
OpenClipboard
GetUpdateRect
FrameRect
IsClipboardFormatAvailable
SetMenuDefaultItem
WaitMessage
IsMenu
UpdateLayeredWindow
UnionRect
MonitorFromPoint
TranslateMDISysAccel
DefMDIChildProcA
DefFrameProcA
UnpackDDElParam
ReuseDDElParam
LoadMenuA
LoadAcceleratorsA
InsertMenuItemA
TranslateAcceleratorA
GetNextDlgGroupItem
CopyImage
GetIconInfo
HideCaret
InvertRect
GetMenuDefaultItem
LockWindowUpdate
BringWindowToTop
SetCursorPos
SetRect
CreateAcceleratorTableA
LoadAcceleratorsW
GetKeyboardState
GetKeyboardLayout
ToAsciiEx
CopyAcceleratorTableA
DrawFrameControl
DrawEdge
DrawIconEx
DrawStateA
MessageBeep
ReleaseCapture
SetCapture
LoadMenuW
WindowFromPoint
DestroyAcceleratorTable
SetParent
RedrawWindow
SetWindowRgn
IsZoomed
OffsetRect
IsRectEmpty
CharUpperA
UnregisterClassA
PostThreadMessageA
LoadCursorW
ModifyMenuA
GetMenu
DispatchMessageA
TranslateMessage
GetMessageA
SetClassLongA
CreateWindowExA
SetMenu
AppendMenuA
CreateMenu
RegisterClassA
LoadIconA
LoadBitmapW
SetWindowPos
wsprintfA
GetClassLongA
LoadCursorA
SetCursor
CloseDesktop
OpenDesktopA
SetWindowLongA
UpdateWindow
SetWindowTextW
GetWindowLongA
DestroyIcon
FindWindowA
KillTimer
GetActiveWindow
IsWindow
DeleteMenu
GetMenuItemCount
InsertMenuA
SystemParametersInfoA
SetForegroundWindow
GetCursorPos
ShowWindow
InvalidateRect
GetSysColor
DrawIcon
GetSystemMetrics
IsIconic
GetClientRect
SetLayeredWindowAttributes
EnumDisplayMonitors
GetForegroundWindow
BeginDeferWindowPos
EndDeferWindowPos
GetTopWindow
GetWindowRect
ReleaseDC
GetDC
SetTimer
SetRectEmpty
RealChildWindowFromPoint
GetSysColorBrush
MapVirtualKeyA
GetKeyNameTextA
NotifyWinEvent
DrawFocusRect
IntersectRect
MapDialogRect
GetAsyncKeyState
MoveWindow
SetWindowTextA
IsDialogMessageA
GetMessageTime
CheckDlgButton
SendDlgItemMessageA
WinHelpA
IsChild
GetCapture
GetDesktopWindow
CreatePopupMenu
LoadImageA
SendMessageA
LoadIconW
EnableWindow
RegisterWindowMessageA
ValidateRect
PeekMessageA
GetKeyState
CallNextHookEx
SetWindowsHookExA
RemoveMenu
GetSubMenu
GetMenuItemID
GetMenuStringA
GetMenuState
RegisterClipboardFormatA
IsWindowEnabled
GetLastActivePopup
GetParent
UnhookWindowsHookEx
EndDialog
GetNextDlgTabItem
GetDlgItem
CreateDialogIndirectParamA
SetActiveWindow
FillRect
TabbedTextOutA
DrawTextA
DrawTextExA
GrayStringA
ScreenToClient
GetWindowDC
CopyRect
InflateRect
GetMenuItemInfoA
CheckMenuItem
GetFocus
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
ShowOwnedPopups
GetWindow
CallWindowProcA
GetDlgCtrlID
GetWindowPlacement
SetWindowPlacement
PtInRect
GetScrollInfo
DeferWindowPos
EqualRect
AdjustWindowRectEx
GetClassInfoA
GetClassInfoExA
ShowScrollBar
GetScrollPos
SetScrollPos
GetScrollRange
SetScrollRange
TrackPopupMenu
ScrollWindow
MapWindowPoints
GetMonitorInfoA
MonitorFromWindow
GetMessagePos

kernel32

SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetVolumeInformationA
GetFullPathNameA
GetCPInfo
GetOEMCP
FindResourceExW
GetFileAttributesExA
GetFileSizeEx
GetFileTime
SetErrorMode
GetTempFileNameA
GetWindowsDirectoryA
GetNumberFormatA
InitializeCriticalSectionAndSpinCount
GetProfileIntA
SearchPathA
lstrcmpiA
HeapFree
DecodePointer
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
HeapAlloc
ExitThread
CreateThread
HeapSetInformation
GetStartupInfoW
RtlUnwind
HeapReAlloc
RaiseException
VirtualAlloc
VirtualQuery
ExitProcess
SetStdHandle
GetFileType
HeapSize
HeapQueryInformation
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
IsValidCodePage
EncodePointer
HeapCreate
IsProcessorFeaturePresent
GetTimeZoneInformation
LCMapStringW
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
QueryPerformanceCounter
GetDriveTypeW
GetConsoleCP
GetConsoleMode
CompareStringW
GetCurrentDirectoryW
WriteConsoleW
CreateFileW
SetEnvironmentVariableA
GetACP
GlobalFlags
GetCurrentDirectoryA
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
FileTimeToLocalFileTime
FindFirstFileA
WriteFile
FileTimeToSystemTime
VirtualProtect
GlobalGetAtomNameA
LoadLibraryW
lstrcmpW
GlobalAddAtomA
FindResourceA
FreeResource
GetModuleFileNameW
ReleaseActCtx
CreateActCtxW
GetTickCount
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
CompareStringA
ActivateActCtx
DeactivateActCtx
InterlockedExchange
lstrcmpA
GetModuleHandleW
SetLastError
GlobalSize
FormatMessageA
lstrlenW
MulDiv
SuspendThread
GetCurrentThreadId
SetThreadPriority
ExpandEnvironmentStringsA
OpenEventA
GetLocalTime
GetPrivateProfileSectionA
WritePrivateProfileStringA
GetPrivateProfileSectionNamesA
GetGeoInfoA
GetUserDefaultLCID
GetUserGeoID
GetCurrentProcessId
GlobalFree
ReleaseSemaphore
CreateSemaphoreA
GlobalAlloc
GlobalUnlock
GlobalLock
RemoveDirectoryA
WaitForSingleObject
CopyFileA
CreateDirectoryA
DeleteFileA
GetTempPathA
GetFileAttributesA
GetSystemInfo
GetProcAddress
GetModuleHandleA
GetPrivateProfileStringW
GetCurrentProcess
GetCurrentThread
LocalAlloc
lstrlenA
LocalFree
GetPrivateProfileSectionW
GetLocaleInfoA
OutputDebugStringA
GetPrivateProfileIntA
FindClose
FindFirstFileW
GetVersionExA
GlobalDeleteAtom
lstrcpyA
GetExitCodeThread
GetModuleFileNameA
SetEvent
CreateEventA
Sleep
InterlockedDecrement
FreeLibrary
LoadLibraryA
CloseHandle
ReleaseMutex
CreateMutexA
GetCommandLineA
MultiByteToWideChar
GlobalFindAtomA
GetPrivateProfileStringA
GetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
WideCharToMultiByte
ResetEvent
WaitForMultipleObjects
ResumeThread
ReadFile
FindNextFileA
CreateFileA
GetStringTypeW

gdi32

ExtFloodFill
GetBoundsRect
FrameRgn
FillRgn
SetPixelV
GetTextFaceA
PtInRegion
GetViewportOrgEx
GetWindowOrgEx
LPtoDP
Rectangle
SetPixel
SetDIBColorTable
GetRgnBox
OffsetRgn
GetSystemPaletteEntries
RealizePalette
GetNearestPaletteIndex
GetPaletteEntries
CreatePalette
Polygon
Ellipse
Polyline
CreateEllipticRgn
GetTextColor
GetBkColor
CreatePolygonRgn
CreateRoundRectRgn
CreateDIBSection
EnumFontFamiliesExA
GetTextCharsetInfo
EnumFontFamiliesA
CreateCompatibleBitmap
CreateDIBitmap
DPtoLP
CombineRgn
SetRectRgn
CreateRectRgnIndirect
CreateHatchBrush
CreateSolidBrush
GetObjectType
SelectPalette
CreateBitmap
CreatePatternBrush
DeleteDC
ExtSelectClipRgn
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutA
RectVisible
PtVisible
GetPixel
GetWindowExtEx
GetViewportExtEx
CreateRectRgn
SelectClipRgn
SetLayout
GetLayout
SetTextAlign
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetROP2
SetPolyFillMode
SetBkColor
RestoreDC
SaveDC
CreateDCA
CopyMetaFileA
StretchBlt
TextOutA
PatBlt
LineTo
MoveToEx
SelectObject
SetTextColor
SetBkMode
GetTextMetricsA
GetStockObject
BitBlt
CreateCompatibleDC
GetObjectA
GetTextExtentPoint32A
DeleteObject
CreatePen
GetDeviceCaps
CreateFontIndirectA
SetPaletteEntries

comdlg32

GetSaveFileNameA
GetFileTitleA

winspool.drv

OpenPrinterA
ClosePrinter
GetPrinterA
DocumentPropertiesA

advapi32

RegDeleteValueA
RegEnumValueA
RegCreateKeyExA
FreeSid
AllocateAndInitializeSid
OpenProcessToken
OpenThreadToken
RegSetValueExA
RegQueryValueExW
RegOpenKeyExW
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
GetTokenInformation
EqualSid
RegDeleteKeyA
RegEnumKeyExA
RegEnumKeyA
RegQueryValueA

shell32

DragFinish
SHGetDesktopFolder
SHGetFileInfoA
Shell_NotifyIconA
SHGetFolderPathA
SHGetPathFromIDListA
SHBrowseForFolderA
SHAppBarMessage
DoEnvironmentSubstA
ShellExecuteA
ShellExecuteW
SHGetMalloc
SHGetSpecialFolderLocation
DragQueryFileA

comctl32

InitCommonControlsEx
ImageList_GetIconSize

shlwapi

PathFindExtensionA
PathFindFileNameA
PathStripToRootA
PathIsUNCA
PathRemoveFileSpecW
PathFileExistsA

ole32

RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
OleGetClipboard
CoInitialize
DoDragDrop
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoInitializeEx
CreateStreamOnHGlobal
CoRegisterMessageFilter
OleFlushClipboard
OleIsCurrentClipboard
CoRevokeClassObject
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
CoCreateGuid
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
OleRun
CoCreateInstance
CoUninitialize

oleaut32

SafeArrayGetLBound
SafeArrayGetUBound
VariantChangeType
SysAllocString
VariantCopy
SafeArrayGetElement
SystemTimeToVariantTime
SysStringLen
VarBstrFromDate
SysFreeString
SysAllocStringLen
VariantClear
VariantInit
VariantTimeToSystemTime
GetErrorInfo
SafeArrayGetDim

oledlg

ord8

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

oleacc

AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject

gdiplus

GdipDrawImageI
GdipGetImageGraphicsContext
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipCloneImage
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromHBITMAP
GdipDisposeImage
GdipDeleteGraphics
GdipAlloc
GdipFree

imm32

ImmGetOpenStatus
ImmReleaseContext
ImmGetContext

msimg32

AlphaBlend
TransparentBlt

Sections

.text
Size: 1.6MB - Virtual size: 1.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 343KB - Virtual size: 342KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 25KB - Virtual size: 56KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 893KB - Virtual size: 892KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 193KB - Virtual size: 193KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

3d153ecd14b4ceac9ff01081c9fb9fac

Headers

DLL Characteristics

File Characteristics

Imports

winmm

user32

kernel32

gdi32

comdlg32

winspool.drv

advapi32

shell32

comctl32

shlwapi

ole32

oleaut32

oledlg

version

oleacc

gdiplus

imm32

msimg32

Sections

.text Size: 1.6MB - Virtual size: 1.6MB

.rdata Size: 343KB - Virtual size: 342KB

.data Size: 25KB - Virtual size: 56KB

.rsrc Size: 893KB - Virtual size: 892KB

.reloc Size: 193KB - Virtual size: 193KB

.text
Size: 1.6MB - Virtual size: 1.6MB

.rdata
Size: 343KB - Virtual size: 342KB

.data
Size: 25KB - Virtual size: 56KB

.rsrc
Size: 893KB - Virtual size: 892KB

.reloc
Size: 193KB - Virtual size: 193KB