fx-991ES PLUS C Emulator Ver[.]4[.]00[.]exe

General

Target
fx-991ES PLUS C Emulator Ver.4.00.exe
Size 13.5MB
Sample261002-ert38stfjd
SHA256 78a5b28f586fe097571973b9adb73194f51af87d9d7f6bb51338688dcb1e3984
MD5 ac2c297ab76fdba5b06c8974fc8320b6
SHA1 6a2faee501b614291322a2c8886028adbb121692
SHA512 7c240883266b58a8629e3948ba7f4584f26526de7b14e1f5b3ff63bcf4d4c6c9fe0ee652ce3e20469b87da0a17678664bf6020b39c3a367b596a71b2b51f53d2
SSDEEP 196608:JONHUhctE3On+Go2YqAP1WNBEuhp576gT/b1Uw3WjhE7RW0G0k3GYi2CIL:JgHUH2YqAP1ut357t/1t3eC/kWYes
TLSH
T16FE612023649C2EAD5261530DE29B7F4B6B96C21DA7400477AE67F293BF0745E608FCE
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
fx-991ES PLUS C Emulator Ver.4.00.exe

File Explorer

fx-991ES PLUS C Emulator Ver.4.00.exe

.exe 13.5MB

fx-991ES PLUS C Emulator Ver.4.00.exe

IMPHASH 0f7d0ed8477bf9ca9b4b2ce07e02a90e
SHA256 78a5b28f586fe097571973b9adb73194f51af87d9d7f6bb51338688dcb1e3984
MD5 ac2c297ab76fdba5b06c8974fc8320b6
SHA1 6a2faee501b614291322a2c8886028adbb121692
SHA512 7c240883266b58a8629e3948ba7f4584f26526de7b14e1f5b3ff63bcf4d4c6c9fe0ee652ce3e20469b87da0a17678664bf6020b39c3a367b596a71b2b51f53d2
SSDEEP 196608:JONHUhctE3On+Go2YqAP1WNBEuhp576gT/b1Uw3WjhE7RW0G0k3GYi2CIL:JgHUH2YqAP1ut357t/1t3eC/kWYes
TLSH
T16FE612023649C2EAD5261530DE29B7F4B6B96C21DA7400477AE67F293BF0745E608FCE
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

8020

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

e:\Develope\msi2exe\release\msi2exestub.pdb

kernel32

GetTempPathW GetTempFileNameW FindResourceW SizeofResource LoadResource LockResource CreateThread CreateFileW DeleteFileW CreateFileA GetStringTypeW GetStringTypeA LCMapStringW LCMapStringA WriteConsoleW GetConsoleOutputCP WriteConsoleA ExitProcess CreateProcessW GetLastError WriteFile FlushFileBuffers CloseHandle GetProcAddress GetModuleHandleA HeapFree GetVersionExA HeapAlloc GetProcessHeap GetStartupInfoW TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent TlsGetValue TlsAlloc TlsSetValue TlsFree InterlockedIncrement SetLastError GetCurrentThreadId InterlockedDecrement GetStdHandle GetModuleFileNameA DeleteCriticalSection LeaveCriticalSection EnterCriticalSection LoadLibraryA InitializeCriticalSection GetModuleFileNameW FreeEnvironmentStringsA MultiByteToWideChar GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineA GetCommandLineW SetHandleCount GetFileType GetStartupInfoA HeapDestroy HeapCreate VirtualFree QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime SetFilePointer WideCharToMultiByte GetConsoleCP GetConsoleMode GetCPInfo GetACP GetOEMCP IsValidCodePage Sleep HeapSize RtlUnwind GetLocaleInfoA VirtualAlloc HeapReAlloc SetStdHandle RaiseException

user32

DefWindowProcW PostQuitMessage EndPaint BeginPaint UpdateWindow ShowWindow CreateWindowExW GetSystemMetrics RegisterClassExW GetSysColorBrush LoadCursorW PostMessageW DispatchMessageW TranslateMessage GetMessageW MessageBoxW InvalidateRect

gdi32

TextOutW SetBkMode SelectObject GetStockObject DeleteObject

Sharing