Static task
static1
General
-
Target
CoD2MP_s.exe
-
Size
1.6MB
-
MD5
b1f67a562f3877da8e38b8d1a09a1ec5
-
SHA1
1be5557a5052fe4e54846dd041ac14dc2bb0c6d8
-
SHA256
df3642d578e6802826bb4a2e71abfa98c37104d72e4597f2e1c077b1d6c23d7f
-
SHA512
e9515c8cd1ec52b9ab401950d464653d5c2090f596a89915f9b818f7d95f35ec203d04796af8396882c89b75537c29f93a5f8ce1d29d41ee19ea8c1eb147a4ee
-
SSDEEP
49152:VtsiK3z7ZZge6ZP6SGh3CoRDsLkrHxL2LDmT+j/EBlDQC38zivs/:VtsimztsIrRL2D0+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource CoD2MP_s.exe
Files
-
CoD2MP_s.exe.exe windows x86
385de2a0aaed2597565c2710457975a5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
mixerOpen
timeBeginPeriod
timeGetTime
timeEndPeriod
waveInGetNumDevs
mixerGetLineControlsA
mixerGetLineInfoA
mixerClose
mixerSetControlDetails
mixerGetControlDetailsA
mixerGetNumDevs
wsock32
send
gethostbyname
closesocket
socket
bind
recv
WSACleanup
setsockopt
htons
WSAGetLastError
ioctlsocket
ntohl
recvfrom
WSAStartup
connect
gethostname
inet_ntoa
sendto
mss32
_AIL_set_preference@8
_AIL_stream_volume_levels@12
_AIL_set_sample_ms_position@8
_AIL_end_sample@4
_AIL_enumerate_3D_providers@12
_AIL_set_sample_adpcm_block_size@8
_AIL_set_3D_position@16
_AIL_allocate_3D_sample_handle@4
_AIL_set_3D_sample_offset@8
_AIL_open_stream@12
_AIL_set_3D_sample_playback_rate@8
_AIL_end_3D_sample@4
_AIL_set_3D_sample_volume@8
_AIL_stop_3D_sample@4
_AIL_set_stream_ms_position@8
_AIL_open_3D_provider@4
_AIL_resume_3D_sample@4
_AIL_3D_position@16
_AIL_stream_status@4
_AIL_sample_playback_rate@4
_AIL_load_sample_buffer@16
_AIL_set_sample_volume_levels@12
_AIL_sample_volume_pan@12
_AIL_minimum_sample_buffer_size@12
_AIL_sample_ms_position@12
_AIL_release_sample_handle@4
_AIL_set_DirectSound_HWND@8
_AIL_3D_sample_length@4
_AIL_set_redist_directory@4
_AIL_sample_buffer_ready@4
_AIL_3D_sample_playback_rate@4
_AIL_close_3D_provider@4
_AIL_stream_playback_rate@4
_AIL_set_stream_volume_levels@12
_AIL_set_3D_rolloff_factor@8
_AIL_set_file_callbacks@16
_AIL_stream_volume_pan@12
_AIL_set_sample_type@12
_AIL_last_error@0
_AIL_set_3D_distance_factor@8
_AIL_3D_sample_volume@4
_AIL_pause_stream@8
_AIL_set_sample_address@12
_AIL_set_3D_sample_info@8
_AIL_process_digital_audio@24
_AIL_WAV_info@8
_AIL_set_stream_loop_count@8
_AIL_set_sample_playback_rate@8
_AIL_set_3D_room_type@8
_AIL_stream_ms_position@12
_AIL_stop_sample@4
_AIL_init_sample@4
_AIL_stream_info@20
_AIL_sample_volume_levels@12
_AIL_allocate_sample_handle@4
_AIL_3D_sample_status@4
_AIL_resume_sample@4
_AIL_set_sample_reverb_levels@12
_AIL_3D_sample_offset@4
_AIL_shutdown@0
_AIL_close_stream@4
_AIL_set_3D_sample_loop_count@8
_AIL_set_stream_playback_rate@8
_AIL_3D_provider_attribute@12
_AIL_sample_status@4
_AIL_set_digital_master_reverb_levels@12
_AIL_size_processed_digital_audio@16
_AIL_set_stream_reverb_levels@12
_AIL_set_3D_sample_distances@12
_AIL_open_digital_driver@16
_AIL_startup@0
_AIL_digital_CPU_percent@4
_AIL_set_3D_sample_effects_level@8
_AIL_set_digital_master_room_type@8
_AIL_sample_position@4
_AIL_set_sample_loop_count@8
d3d9
Direct3DCreate9
dsound
ord11
ord6
kernel32
VirtualProtect
RaiseException
GetOEMCP
GetACP
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetCPInfo
GetDateFormatA
GetTimeFormatA
GetStringTypeW
GetStringTypeA
HeapSize
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
RtlUnwind
GetTimeZoneInformation
GetFileType
GetStdHandle
SetHandleCount
FlushFileBuffers
IsBadWritePtr
HeapCreate
HeapDestroy
SetFilePointer
FatalAppExitA
DeleteCriticalSection
SetConsoleCtrlHandler
LCMapStringW
GetSystemInfo
WideCharToMultiByte
LCMapStringA
TlsGetValue
TlsSetValue
TlsFree
GetCurrentThread
SetEnvironmentVariableA
TlsAlloc
GetCommandLineA
GetStartupInfoA
HeapReAlloc
LeaveCriticalSection
EnterCriticalSection
TerminateProcess
ExitProcess
GetFullPathNameA
RemoveDirectoryA
CreateDirectoryA
FindNextFileA
FindFirstFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
FindClose
GetSystemTimeAsFileTime
HeapAlloc
HeapFree
MoveFileA
InitializeCriticalSection
SetStdHandle
GetTickCount
SetEndOfFile
GetLocaleInfoW
SetEnvironmentVariableW
SetUnhandledExceptionFilter
VirtualQuery
InterlockedExchange
CompareStringA
MultiByteToWideChar
CompareStringW
GetCurrentProcess
SetPriorityClass
MulDiv
IsBadCodePtr
GetCurrentProcessId
CloseHandle
GetVersionExA
Module32Next
CreateToolhelp32Snapshot
GetCurrentDirectoryA
GetModuleFileNameA
LoadLibraryA
GetLastError
Module32First
GlobalUnlock
ReadFile
CreateProcessA
GlobalAlloc
OpenProcess
GetDriveTypeA
IsBadReadPtr
SetLastError
DeleteFileA
GetCurrentThreadId
GetFileAttributesA
SetFileAttributesA
VirtualFree
VirtualAlloc
GlobalMemoryStatus
QueryPerformanceCounter
Sleep
GetProcAddress
GetModuleHandleA
QueryPerformanceFrequency
CreateFileA
SetErrorMode
FreeLibrary
GlobalSize
GlobalLock
SetThreadExecutionState
FormatMessageA
WriteFile
user32
RegisterWindowMessageA
GetMonitorInfoA
MapVirtualKeyA
MonitorFromWindow
MoveWindow
PostQuitMessage
SetWindowTextA
CloseWindow
CallWindowProcA
DestroyWindow
SendMessageA
CreateWindowExA
DefWindowProcA
SetWindowPos
GetSystemMetrics
LoadImageA
UpdateWindow
AdjustWindowRect
EnumThreadWindows
ChangeDisplaySettingsA
GetDesktopWindow
ReleaseDC
GetWindowLongA
SetWindowLongA
GetWindowTextA
GetDC
MessageBoxA
ReleaseCapture
PostMessageA
GetCursorPos
SetCursorPos
GetForegroundWindow
ShowCursor
SetFocus
SetForegroundWindow
SetCapture
GetWindowRect
LoadCursorA
SetClipboardData
OpenClipboard
DispatchMessageA
ShowWindow
EmptyClipboard
PeekMessageA
GetClipboardData
TranslateMessage
LoadIconA
RegisterClassExA
CloseClipboard
GetMessageA
RegisterClassA
gdi32
SetDeviceGammaRamp
GetDeviceCaps
CreateFontA
CreateSolidBrush
advapi32
RegCreateKeyA
GetUserNameA
RegSetValueExA
RegQueryValueExA
RegOpenKeyA
RegCloseKey
shell32
ShellExecuteA
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 196KB - Virtual size: 194KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 18.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ