idkikdikdikdikdidkdiddi[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
idkikdikdikdikdidkdiddi.exe
Size 365KB
Sample260807-rm2nqsxcmd
SHA256 94e8627d2a07a705a2b929bbc60cf9af7a7dd64ddc8212e3f5acb83ac124cc2b
MD5 b57663d4282dd34892b668950cdc1be6
SHA1 9117da6ef79b5cf2cf93e34e6ae88d2382d81b3b
SHA512 5ce8ea71a7aad9301c450580d72ac45b9f1abdf7bcddc779f9e7834350a0fa49c8c658474fdef3a78e562c541e19e667b6954670d0f02c4caf4bb2fd20044343
SSDEEP 6144:DE8oZJPp/ePUo49OWNfybcBP1UtfZZy7lXs0yRnbtQr:4THQcBPK9Z07G0u
TLSH
T1E0848D19FBA404F9E1B7D17CC9664506EB727C9A47B0ABCF23904A961F236D08E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
idkikdikdikdikdidkdiddi.exe

File Explorer

idkikdikdikdikdidkdiddi.exe

.exe 365KB

idkikdikdikdikdidkdiddi.exe

IMPHASH 25e4b7b792aa504816ebcbe00bbd6529
SHA256 94e8627d2a07a705a2b929bbc60cf9af7a7dd64ddc8212e3f5acb83ac124cc2b
MD5 b57663d4282dd34892b668950cdc1be6
SHA1 9117da6ef79b5cf2cf93e34e6ae88d2382d81b3b
SHA512 5ce8ea71a7aad9301c450580d72ac45b9f1abdf7bcddc779f9e7834350a0fa49c8c658474fdef3a78e562c541e19e667b6954670d0f02c4caf4bb2fd20044343
SSDEEP 6144:DE8oZJPp/ePUo49OWNfybcBP1UtfZZy7lXs0yRnbtQr:4THQcBPK9Z07G0u
TLSH
T1E0848D19FBA404F9E1B7D17CC9664506EB727C9A47B0ABCF23904A961F236D08E3E711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

108112

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

D:\no\HELL NO\Exec\x64\Release\idkikdikdikdikdidkdiddi.pdb

kernel32

HeapReAlloc GetOEMCP GetACP IsValidCodePage ReadConsoleW ReadFile EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetLocaleInfoW LCMapStringW GetCommandLineA CreateProcessW VirtualProtect GetConsoleMode GetConsoleOutputCP FlushFileBuffers HeapAlloc HeapFree GetFileType SetFilePointerEx GetFileSizeEx UnhandledExceptionFilter GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetStdHandle HeapSize WriteConsoleW SetEndOfFile GetSystemTimeAsFileTime WideCharToMultiByte CopyFileW GetComputerNameW ExitProcess MoveFileExW LocalFree GetLocalTime CloseHandle DeleteFileW GetLastError MultiByteToWideChar SetFileAttributesW GetFileAttributesW CreateFileW GetTempPathW GetModuleFileNameW IsDebuggerPresent RtlVirtualUnwind RtlCaptureContext WriteFile GetStdHandle LoadLibraryExW GetCurrentProcess TerminateProcess IsProcessorFeaturePresent GetModuleHandleExW FreeLibraryAndExitThread FreeLibrary ExitThread CreateThread FlsFree FlsSetValue FlsGetValue FormatMessageA GetLocaleInfoEx GetStringTypeW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW GetFileInformationByHandle SetFileInformationByHandle CreateFile2 GetModuleHandleW GetProcAddress GetFileInformationByHandleEx GetCurrentThreadId EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable QueryPerformanceCounter GetCPInfo SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcessId InitializeSListHead RtlLookupFunctionEntry RtlUnwindEx RtlPcToFileHeader RaiseException SetLastError FlsAlloc RtlUnwind

user32

GetCursorPos ReleaseDC InvalidateRect EndPaint PtInRect SetProcessDPIAware SystemParametersInfoW PostQuitMessage BeginPaint GetWindowTextW UpdateWindow KillTimer GetMessageW DefWindowProcW GetWindowRect DestroyWindow GetDC SetWindowPos MessageBoxW FillRect CreateWindowExW SendMessageW GetSystemMetrics SetWindowTextW GetWindowLongPtrW RegisterClassExW ShowWindow DispatchMessageW SetTimer IsDialogMessageW TrackMouseEvent FrameRect SetFocus TranslateMessage LoadCursorW GetClientRect GetDlgItem DrawTextW

gdi32

CreateCompatibleBitmap SelectObject CreateCompatibleDC CreateFontW GetDIBits DeleteDC SetTextColor SetBkMode GetObjectW SetBkColor Ellipse DeleteObject CreateSolidBrush

advapi32

RegCreateKeyExW ConvertStringSecurityDescriptorToSecurityDescriptorW LookupPrivilegeValueW SetSecurityDescriptorDacl AdjustTokenPrivileges RegCloseKey SetFileSecurityW RegQueryValueExW RegSetValueExW OpenProcessToken InitializeSecurityDescriptor RegOpenKeyExW RegDeleteValueW

shell32

SHGetKnownFolderPath SHGetFolderPathW

ole32

CoTaskMemFree

comctl32

InitCommonControlsEx

winhttp

WinHttpReceiveResponse WinHttpOpen WinHttpQueryDataAvailable WinHttpCrackUrl WinHttpConnect WinHttpSetTimeouts WinHttpSendRequest WinHttpCloseHandle WinHttpOpenRequest WinHttpReadData

Name

.text

Size

245KB

Virtual Size

244KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

96KB

Virtual Size

96KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

6KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

13KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

idkikdikdikdikdidkdiddi.exe

kernel32

user32

gdi32

advapi32

shell32

ole32

comctl32

winhttp

generic