9fbf061258d813065b5ce20f5a74ebf7ab3ec18e8f3678b3f7538c16b5223eb2

Sharing

Copy URL

Twitter E-mail

General

Target

9fbf061258d813065b5ce20f5a74ebf7ab3ec18e8f3678b3f7538c16b5223eb2
Size

1.1MB
MD5

2ffb5b5442751f6e606ee02bedf13419
SHA1

18dcb7c39892acd8adb60521fcfa583ca88d30c5
SHA256

9fbf061258d813065b5ce20f5a74ebf7ab3ec18e8f3678b3f7538c16b5223eb2
SHA512

223136d73051133f8b442914d40487679f14e351fcda7f47c65937fecf8f86b8c2175af28c828a9687ccec8ffccbeabbaeb07ced3503d08ebe584d576afc69d2
SSDEEP

24576:F/X9JBFxYh2vE0uYGStpKBUXkPZ1usa+UHvBz+nBvWDzY/:tdYhS9GStpKBUXxHvAnkPK

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9fbf061258d813065b5ce20f5a74ebf7ab3ec18e8f3678b3f7538c16b5223eb2

Files

9fbf061258d813065b5ce20f5a74ebf7ab3ec18e8f3678b3f7538c16b5223eb2
.exe windows:5 windows x86 arch:x86

038a744e8cc8c0761839f87ad634c7ef

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

D:\DiamondRingScanner_Task_1.1\build\Release\Win32\TrendMicroLauncher.pdb

Imports

version

VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW

winhttp

WinHttpCloseHandle
WinHttpSetStatusCallback
WinHttpOpen
WinHttpGetIEProxyConfigForCurrentUser
WinHttpGetProxyForUrl
WinHttpConnect
WinHttpOpenRequest
WinHttpSetOption
WinHttpAddRequestHeaders
WinHttpSetTimeouts
WinHttpSendRequest
WinHttpReceiveResponse
WinHttpQueryHeaders
WinHttpReadData
WinHttpWriteData
WinHttpQueryDataAvailable
WinHttpCrackUrl

kernel32

ReleaseSemaphore
CreateSemaphoreA
HeapFree
GetProcessHeap
SetUnhandledExceptionFilter
IsBadCodePtr
CreateFileW
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
GetVersionExW
FreeLibrary
GetModuleFileNameW
GetModuleHandleW
GetModuleHandleExW
GetCurrentThread
SetErrorMode
OpenProcess
OpenEventW
TerminateProcess
GetSystemTimeAsFileTime
WaitForMultipleObjectsEx
SetLastError
lstrcmpiW
LeaveCriticalSection
RaiseException
EnterCriticalSection
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
DeleteCriticalSection
InterlockedDecrement
InterlockedIncrement
CreateSemaphoreW
FlushInstructionCache
CreateProcessW
SetCurrentDirectoryW
CreateThread
LocalFree
SetFilePointer
ReadFile
WriteFile
FlushFileBuffers
GetFileSize
GetPrivateProfileStringW
SetEndOfFile
GetACP
HeapAlloc
EncodePointer
GetStringTypeW
HeapSize
HeapReAlloc
HeapDestroy
DecodePointer
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
InterlockedCompareExchange
ExitProcess
CompareStringW
AreFileApisANSI
IsDebuggerPresent
ExitThread
GetCommandLineW
RtlUnwind
GetCPInfo
UnhandledExceptionFilter
TlsAlloc
TlsGetValue
WaitForSingleObject
CreateEventW
OutputDebugStringW
CloseHandle
GetLocalTime
SetEvent
CreateEventA
WaitForSingleObjectEx
InitializeCriticalSectionAndSpinCount
TlsSetValue
TlsFree
GetStartupInfoW
Sleep
GlobalFree
DeleteFileA
GetTempFileNameA
GetTempPathA
LoadLibraryA
lstrlenA
GetWindowsDirectoryW
GetProcAddress
LoadLibraryW
GetLocaleInfoW
CreateDirectoryW
DeleteFileW
RemoveDirectoryW
SetFileAttributesW
GetFileAttributesW
FindClose
FindNextFileW
FindFirstFileW
GetLastError
GetEnvironmentVariableW
MultiByteToWideChar
WideCharToMultiByte
GetStdHandle
IsValidCodePage
GetOEMCP
GetFileType
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
SetFilePointerEx
ReadConsoleW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
WriteConsoleW
SetEnvironmentVariableA
LCMapStringW
IsValidLocale
GetUserDefaultLCID
FormatMessageA
EnumSystemLocalesW

user32

LoadImageW
GetSystemMetrics
RemovePropW
SetWindowTextW
SetPropW
MoveWindow
PostMessageW
EndDialog
MonitorFromWindow
GetMonitorInfoW
GetWindowRect
GetParent
MapWindowPoints
SetWindowPos
CallWindowProcW
GetWindowLongW
SendMessageW
GetDlgItem
FillRect
InvalidateRect
SetWindowLongW
LoadBitmapW
DestroyWindow
GetActiveWindow
DefWindowProcW
SetForegroundWindow
ShowWindow
IsIconic
GetPropW
IsWindow
GetDesktopWindow
GetWindow
CharNextW
GetClientRect
wsprintfW
UnregisterClassW
DialogBoxParamW

gdi32

SelectObject
SetBkMode
DeleteObject
DeleteDC
BitBlt
CreateCompatibleDC
GetStockObject
CreateSolidBrush

advapi32

InitializeSecurityDescriptor
MakeAbsoluteSD
SetSecurityDescriptorDacl
GetAclInformation
AddAce
InitializeAcl
IsValidSid
GetLengthSid
CopySid
GetSidSubAuthority
InitializeSid
GetSidLengthRequired
RegEnumValueW
RegFlushKey
GetSecurityDescriptorControl
GetSecurityDescriptorLength
MakeSelfRelativeSD
GetSecurityDescriptorSacl
GetSecurityDescriptorDacl
GetSecurityDescriptorGroup
GetSecurityDescriptorOwner
RegDeleteValueW
RegEnumKeyExW
RegQueryInfoKeyW
RegDeleteKeyW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW

shell32

ord165
SHGetFolderPathW
CommandLineToArgvW

ole32

CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoCreateGuid
CoInitialize

oleaut32

VariantClear
VarUI4FromStr
SysAllocString

shlwapi

PathFindFileNameA
PathStripPathW
PathAppendW
PathFileExistsW

comctl32

InitCommonControlsEx
_TrackMouseEvent

userenv

GetAllUsersProfileDirectoryW

ws2_32

inet_addr
gethostname
getnameinfo
freeaddrinfo
getaddrinfo
WSAStartup

urlmon

URLDownloadToFileA

rpcrt4

RpcStringFreeW
UuidToStringW

Sections

.text
Size: 421KB - Virtual size: 424KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 90KB - Virtual size: 92KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 615KB - Virtual size: 615KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

038a744e8cc8c0761839f87ad634c7ef

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

version

winhttp

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

comctl32

userenv

ws2_32

urlmon

rpcrt4

Sections

.text Size: 421KB - Virtual size: 424KB

.rdata Size: 90KB - Virtual size: 92KB

.data Size: 12KB - Virtual size: 24KB

.rsrc Size: 615KB - Virtual size: 615KB

.text
Size: 421KB - Virtual size: 424KB

.rdata
Size: 90KB - Virtual size: 92KB

.data
Size: 12KB - Virtual size: 24KB

.rsrc
Size: 615KB - Virtual size: 615KB