wxpost10[.]EXE | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
wxpost10.EXE
Size 299KB
Sample260622-pt81aact5v
SHA256 1bf9260fbccbf8ef3268193ae6a08b6df759c0d48a3816c94f388266ff509b7f
MD5 75b9d74175842775d68c5b15b1cf22c2
SHA1 4ca0bec82fc1cba3434622e6a5a2bfb5cc05bfc6
SHA512 64eed81cd72a7eb31d62881d04ebf34bc8d9f0f181d3676b12b4af3a3c201f93a358cd2528d183cf6649d3626b2fdc4b0e57016615d7b3f0c304815ec60b697f
SSDEEP 6144:Cr6qqt9E/+QIMO1Rr+BFN5zn7YI1MVT/kgOkEH:KsOmQIMOaBFN5zsI1MVa
TLSH
T1F5544A12F8A1C137C0A202B85ABAE7B0D978A6B01714A0D3F7DC3DA56F795C2863575F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
wxpost10.EXE

File Explorer

wxpost10.EXE

.exe 299KB

wxpost10.EXE

IMPHASH 988df8bde4e3213906ed9a124ebd5afd
SHA256 1bf9260fbccbf8ef3268193ae6a08b6df759c0d48a3816c94f388266ff509b7f
MD5 75b9d74175842775d68c5b15b1cf22c2
SHA1 4ca0bec82fc1cba3434622e6a5a2bfb5cc05bfc6
SHA512 64eed81cd72a7eb31d62881d04ebf34bc8d9f0f181d3676b12b4af3a3c201f93a358cd2528d183cf6649d3626b2fdc4b0e57016615d7b3f0c304815ec60b697f
SSDEEP 6144:Cr6qqt9E/+QIMO1Rr+BFN5zn7YI1MVT/kgOkEH:KsOmQIMOaBFN5zsI1MVa
TLSH
T1F5544A12F8A1C137C0A202B85ABAE7B0D978A6B01714A0D3F7DC3DA56F795C2863575F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:1 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

141488

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

user32

DeferWindowPos EqualRect ScreenToClient AdjustWindowRect BeginDeferWindowPos SendDlgItemMessageA DestroyCursor IsChild OffsetRect SetRect PtInRect InvalidateRect LoadCursorA GetCursorPos SetWindowTextA SetDlgItemTextA IsIconic LoadAcceleratorsA TranslateAcceleratorA LoadMenuA PostMessageA SetActiveWindow ReuseDDElParam UnpackDDElParam CharPrevA GetWindowTextA SetMenu BringWindowToTop GetWindowDC BeginPaint EndPaint TabbedTextOutA DrawTextA GrayStringA IsDlgButtonChecked CharUpperA CharToOemA OemToCharA LoadStringA GetClassNameA RegisterClipboardFormatA GetDesktopWindow DestroyMenu RegisterWindowMessageA ScrollWindow IsRectEmpty UpdateWindow GetTabbedTextExtentA CopyRect SetRectEmpty GetSubMenu EndDeferWindowPos GetDlgCtrlID GetMenuItemID TrackPopupMenu DefWindowProcA DestroyWindow SetWindowLongA CallWindowProcA ReleaseDC PostQuitMessage ModifyMenuA SetMenuItemBitmaps CheckMenuItem EnableMenuItem GetFocus GetNextDlgTabItem SetFocus EnableWindow UnhookWindowsHookEx SetWindowsHookExA LoadIconA RegisterClassA ValidateRect CallNextHookEx GetKeyState GetMessageA TranslateMessage DispatchMessageA PostThreadMessageA GetCapture WinHelpA SetWindowPos GetSysColor GetDlgItem DialogBoxParamA DialogBoxIndirectParamA CreateDialogIndirectParamA CreateDialogParamA GetWindow IsDialogMessageA EndDialog DeleteMenu InsertMenuA GetMenuItemCount MessageBoxA GetParent GetLastActivePopup SetCursor wsprintfA SendMessageA IsWindowVisible GetScrollRange GetScrollPos InflateRect GetTopWindow GetMenu GetWindowRect GetDC SetScrollPos EnableScrollBar ShowScrollBar SetScrollRange GetMessageTime GetClientRect CreateWindowExA GetWindowPlacement GetWindowLongA GetSystemMetrics ShowWindow SetWindowPlacement FillRect PeekMessageA GetMessagePos LoadBitmapA GetMenuCheckMarkDimensions GetClassInfoA

gdi32

CreateDCA GetWindowOrgEx GetTextExtentPointA GetTextMetricsA GetDeviceCaps DPtoLP GetBkColor GetTextFaceA GetWindowExtEx GetCharWidthA CreateFontIndirectA GetROP2 GetViewportExtEx GetTextAlign GetPolyFillMode GetBkMode SetTextColor GetStretchBltMode GetTextColor GetNearestColor LPtoDP Escape GetObjectA DeleteObject SetViewportOrgEx CreateBitmap CreateSolidBrush PatBlt GetCurrentPositionEx Rectangle CreatePen GetViewportOrgEx DeleteDC StartDocA StartPage EndPage SetAbortProc AbortDoc EndDoc SaveDC RestoreDC SelectObject GetStockObject SelectPalette SetBkMode SetPolyFillMode SetROP2 SetStretchBltMode SetMapMode SetBkColor OffsetViewportOrgEx SetViewportExtEx ScaleViewportExtEx SetWindowOrgEx OffsetWindowOrgEx SetWindowExtEx ScaleWindowExtEx GetClipBox SelectClipRgn ExcludeClipRect IntersectClipRect OffsetClipRgn MoveToEx LineTo SetTextAlign SetTextJustification SetTextCharacterExtra SetMapperFlags CreateHatchBrush CreatePatternBrush PtVisible RectVisible TextOutA ExtTextOutA

advapi32

RegSetValueA RegQueryValueA RegConnectRegistryA RegCreateKeyExA RegSetValueExA RegOpenKeyExA RegQueryValueExA RegCloseKey

wsock32

gethostbyaddr WSAStartup gethostname gethostbyname WSACleanup

netapi32

Netbios

mpr

WNetGetConnectionA

kernel32

VirtualAlloc GetFileType RtlUnwind VirtualFree WriteFile Sleep SetStdHandle GetCurrentProcessId WideCharToMultiByte LCMapStringW GetFileAttributesA GetCommandLineA GetEnvironmentStrings GetStartupInfoA GetModuleHandleA MultiByteToWideChar GetStringTypeW ExitProcess GetLocalTime GetVersion GetFullPathNameA DeleteFileA MoveFileA SetEndOfFile UnlockFile LockFile CloseHandle FlushFileBuffers SetFilePointer RaiseException ReadFile CreateFileA GetCurrentProcess DuplicateHandle GetLastError lstrcmpA GlobalUnlock GlobalGetAtomNameA GlobalLock MulDiv FindResourceA LoadResource LockResource FreeResource GetProcAddress SetErrorMode GlobalFree GlobalDeleteAtom GetCurrentThreadId WritePrivateProfileStringA GetPrivateProfileStringA GetPrivateProfileIntA lstrcpyA lstrcmpiA GetModuleFileNameA lstrcatA lstrlenA CreateProcessA GetExitCodeProcess GlobalAddAtomA GetVolumeInformationA UnhandledExceptionFilter SetConsoleCtrlHandler GetStdHandle WaitForSingleObject

comdlg32

CommDlgExtendedError PrintDlgA GetOpenFileNameA GetSaveFileNameA GetFileTitleA

shell32

DragQueryFileA DragFinish

Name

.text

Size

175KB

Virtual Size

174KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

AFX_COR2

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

AFX_COR1

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

AFX_COR3

Size

6KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

AFX_INIT

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

AFX_PRIN

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

AFX_COL1

Size

1024B

Virtual Size

566B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

AFX_AUX_

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

AFX_COL2

Size

1024B

Virtual Size

769B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

74KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

1024B

Virtual Size

592B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

34KB

Virtual Size

34KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

7KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

22KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

wxpost10.EXE

user32

gdi32

advapi32

wsock32

netapi32

mpr

kernel32

comdlg32

shell32

generic