2fc349d8f74929942a8f332565cbce9ad5a69e18e4e62e97e7734ca2f794179eN[.]exe

Sharing

Copy URL

Twitter E-mail

General

Target

2fc349d8f74929942a8f332565cbce9ad5a69e18e4e62e97e7734ca2f794179eN.exe
Size

138KB
MD5

c482ab5f7a8759ad0c70fbceeb068bc0
SHA1

b3b73ffaf614b3e90aced2f6b3b4def10b85993e
SHA256

2fc349d8f74929942a8f332565cbce9ad5a69e18e4e62e97e7734ca2f794179e
SHA512

10fafc3c1ce7fe436945592c1719141874f5718c03cc8c0e0032f51c2828998c06683e3c2696ea0668f53ee10909977403aaf329790093902164d600e05630fa
SSDEEP

3072:vXUWMX+tKtxzIuHc+zQk2lQBV+UdE+rECWp7hK/GmK:vkWMOtNCBV+UdvrEFp7hK/Gt

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2fc349d8f74929942a8f332565cbce9ad5a69e18e4e62e97e7734ca2f794179eN.exe

Files

2fc349d8f74929942a8f332565cbce9ad5a69e18e4e62e97e7734ca2f794179eN.exe
.dll windows:5 windows x86 arch:x86

694519fde616a1e0224ae859b5f89c0f

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

h:\work\gemini\pciports\objfre_wnet_x86\i386\PciPorts.pdb

Imports

ntdll

RtlUnwind

setupapi

SetupDiGetDeviceInfoListDetailW
SetupDiOpenDevRegKey
SetupDiSetDeviceInstallParamsW
SetupDiGetDeviceInstallParamsW
SetupDiSetDeviceRegistryPropertyW
SetupDiGetDeviceRegistryPropertyW
SetupCloseInfFile
SetupInstallFromInfSectionW
SetupDiGetActualSectionToInstallW
SetupOpenInfFileW
SetupDiGetDriverInfoDetailW
SetupDiGetSelectedDriverW
SetupDiCreateDevRegKeyW
CM_Free_Log_Conf_Handle
CM_Free_Res_Des_Handle
CM_Get_Res_Des_Data
CM_Get_Next_Res_Des
CM_Get_First_Log_Conf
SetupDiInstallDevice
CM_Get_DevNode_Status
SetupDiRemoveDevice
SetupDiGetDeviceInstanceIdW
CM_Reenumerate_DevNode
SetupDiCallClassInstaller

user32

LoadStringW
GetDlgItem
WinHelpW
SendDlgItemMessageW
GetParent
EndDialog
GetWindowLongW
EnableWindow
SetWindowLongW
GetFocus
wsprintfW
SetWindowTextW
GetWindowTextW
GetWindowTextLengthW
ShowWindow
DialogBoxParamW
CharPrevW
MessageBoxW
wvsprintfW
SendMessageTimeoutW
CharNextW
CheckRadioButton
CheckDlgButton
IsDlgButtonChecked
SetDlgItemTextW
GetDlgItemTextW
SendMessageW

advapi32

RegOpenKeyExW
RegEnumValueW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegCreateKeyExW

kernel32

InterlockedExchange
GetStringTypeW
GetStringTypeA
GetCPInfo
GetLocaleInfoA
VirtualQuery
GetSystemInfo
GetModuleHandleA
GetProcAddress
VirtualProtect
HeapReAlloc
VirtualAlloc
HeapAlloc
VirtualFree
LCMapStringW
GetProfileStringW
Sleep
HeapFree
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
OutputDebugStringW
MultiByteToWideChar
WideCharToMultiByte
DisableThreadLibraryCalls
lstrcmpiW
lstrcatW
GetLastError
DefineDosDeviceW
CloseHandle
CreateFileW
LCMapStringA
GetLocaleInfoW
SetLastError
LocalAlloc
LocalFree
lstrcpyW
lstrlenW
GetUserDefaultLCID
lstrcmpW
WriteProfileStringW
QueryDosDeviceW

comctl32

DestroyPropertySheetPage
CreatePropertySheetPageW

msports

ComDBClaimPort
ComDBReleasePort
ComDBClose
ComDBOpen
ComDBClaimNextFreePort
ComDBGetCurrentPortUsage

Exports

Exports

LibMain
ParallelPortPropPageProvider
PortsClassInstaller
SerialPortPropPageProvider

Sections

.text
Size: 39KB - Virtual size: 39KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 14KB - Virtual size: 14KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 3KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

694519fde616a1e0224ae859b5f89c0f

Headers

File Characteristics

PDB Paths

Imports

ntdll

setupapi

user32

advapi32

kernel32

comctl32

msports

Exports

Exports

Sections

.text Size: 39KB - Virtual size: 39KB

.data Size: 3KB - Virtual size: 4KB

.rsrc Size: 14KB - Virtual size: 14KB

.reloc Size: 3KB - Virtual size: 3KB

.text
Size: 39KB - Virtual size: 39KB

.data
Size: 3KB - Virtual size: 4KB

.rsrc
Size: 14KB - Virtual size: 14KB

.reloc
Size: 3KB - Virtual size: 3KB