Static task
static1
Behavioral task
behavioral1
Sample
Moo0 SystemMonitor v1.83 Installer.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
Moo0 SystemMonitor v1.83 Installer.exe
Resource
win10v2004-20230221-en
General
-
Target
Moo0 SystemMonitor v1.83 Installer.exe
-
Size
4.7MB
-
MD5
7beb63f8759fd5f95698ee0772c179cf
-
SHA1
92719e66aa36f36f18749f794242993a15dbcfc5
-
SHA256
40cde41dfc64353f23f09f8a08b7274033315fc7a0b41caeab223c0030c81b3e
-
SHA512
85e72508405a98b197fd25dc2cd027e7f9c48133fc8843990ed62cb30ea5dbcaa4bf068a04c42387226cb6e6421631716fe36eaddfa945c6e58a7a8b3856bfd5
-
SSDEEP
98304:mu8F55ZpVEsgcXgjrZClW2BXQVNMnbDfgZ0wkpngoXzMoHgWPW6R:muSLZzEsg3r0WeXeoDoSbpngCXHgWPWO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Moo0 SystemMonitor v1.83 Installer.exe
Files
-
Moo0 SystemMonitor v1.83 Installer.exe.exe windows x86
0ba57d5f6a182c51622c342938edb408
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ole32
OleFlushClipboard
CoRevokeClassObject
OleIsCurrentClipboard
CoRegisterMessageFilter
CoGetClassObject
OleGetClipboard
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
CoTaskMemAlloc
CLSIDFromProgID
CLSIDFromString
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CoCreateGuid
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
CoTaskMemFree
CoCreateInstance
CoUninitialize
CoInitialize
CoInitializeSecurity
user32
IsDialogMessageW
SetWindowTextW
MoveWindow
WinHelpW
LoadIconW
UnhookWindowsHookEx
GetTopWindow
GetClassNameW
GetClassLongW
EqualRect
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
GetScrollRange
GetScrollPos
SetScrollPos
EndPaint
BeginPaint
SetActiveWindow
GetMenuItemCount
GetMenuItemID
GetSubMenu
SetMenu
GetMenu
GetDlgCtrlID
GetDlgItem
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
DestroyWindow
IsChild
IsMenu
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
GetLastActivePopup
IsWindowEnabled
CallNextHookEx
SetWindowsHookExW
ValidateRect
GetKeyState
GetActiveWindow
IsWindowVisible
PeekMessageW
DispatchMessageW
TranslateMessage
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
GetFocus
MapDialogRect
GetWindow
SetWindowContextHelpId
SetWindowPos
PostQuitMessage
SetRectEmpty
SendDlgItemMessageA
CharUpperW
DestroyMenu
IsRectEmpty
GetWindowThreadProcessId
CopyRect
GetParent
GetMenuInfo
RegisterClassExW
IntersectRect
GetMonitorInfoW
GetSysColorBrush
CreateCursor
TabbedTextOutW
DrawTextW
DrawTextExW
GrayStringW
PostThreadMessageW
UpdateWindow
UnregisterHotKey
MessageBeep
GetNextDlgGroupItem
RegisterHotKey
SetWindowLongW
CreateWindowExW
PostMessageW
InvalidateRgn
IsZoomed
IsIconic
SetWindowRgn
WindowFromPoint
GetForegroundWindow
MonitorFromWindow
MonitorFromRect
GetSystemMetrics
SetRect
EnumDisplayMonitors
PtInRect
GetWindowLongW
LoadCursorW
SetCursor
GetCursorPos
GetAsyncKeyState
OffsetRect
SetTimer
KillTimer
ReleaseDC
GetDC
CopyAcceleratorTableW
CharNextW
ReleaseCapture
GetCapture
SystemParametersInfoW
DefWindowProcW
RedrawWindow
ClientToScreen
RegisterClipboardFormatW
GetWindowRect
RealChildWindowFromPoint
DrawIconEx
GetIconInfo
GetDesktopWindow
wsprintfW
MessageBoxW
DrawMenuBar
GetClientRect
SetCapture
DestroyIcon
SetClipboardViewer
ChangeClipboardChain
InvalidateRect
GetNextDlgTabItem
CreateIconFromResource
CreateIconFromResourceEx
EndDialog
CreateDialogIndirectParamW
InflateRect
GetWindowDC
SendMessageW
SetFocus
SetForegroundWindow
ShowWindow
IsWindow
CheckMenuItem
GetSysColor
EnableWindow
UnregisterClassW
GetMessageW
oleaut32
SystemTimeToVariantTime
VariantTimeToSystemTime
VariantCopy
SysAllocStringLen
VariantChangeType
SysStringLen
OleCreateFontIndirect
SafeArrayDestroy
VariantClear
VariantInit
SysFreeString
SysAllocString
shell32
ord162
SHGetDesktopFolder
ord155
ord716
ord190
SHChangeNotify
DragAcceptFiles
SHFileOperationW
SHGetFileInfoW
SHGetSpecialFolderLocation
ShellExecuteW
SHGetPathFromIDListW
SHGetMalloc
DragQueryFileW
DragFinish
Shell_NotifyIconW
SHBrowseForFolderW
ShellExecuteExW
advapi32
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyW
RegQueryValueW
GetUserNameW
AdjustTokenPrivileges
LookupPrivilegeValueW
RegEnumValueW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
RegCreateKeyExW
GetTokenInformation
OpenProcessToken
GetSidSubAuthority
GetSidSubAuthorityCount
GetSidIdentifierAuthority
IsValidSid
kernel32
GetLastError
HeapReAlloc
RaiseException
HeapAlloc
DecodePointer
DeleteCriticalSection
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
MultiByteToWideChar
GetOEMCP
CloseHandle
InterlockedDecrement
GetModuleFileNameW
GetCurrentProcessId
SetProcessWorkingSetSize
GetCurrentProcess
SetPriorityClass
CreateFileW
WriteFile
WaitForSingleObject
EnumResourceTypesW
EnumResourceNamesW
FindResourceExW
SizeofResource
EnumResourceLanguagesW
FreeLibrary
BeginUpdateResourceW
UpdateResourceW
EndUpdateResourceW
LoadLibraryW
LoadResource
LockResource
FreeResource
GetSystemTimeAsFileTime
FindResourceW
GetProcAddress
FormatMessageW
GetEnvironmentStringsW
SetLastError
lstrlenW
ExpandEnvironmentStringsW
SuspendThread
CreateThread
TerminateThread
ResumeThread
GetThreadPriority
SetThreadPriority
GetVolumeInformationW
GetFileAttributesExW
GetFileInformationByHandle
GetFileAttributesW
SetFileAttributesW
FindFirstFileW
FindNextFileW
FindClose
GetDiskFreeSpaceW
SetFileTime
MoveFileExW
VirtualAlloc
VirtualFree
DeleteFileW
RemoveDirectoryW
CopyFileW
GetTempPathW
GetTempFileNameW
EnumSystemCodePagesW
GetCPInfoExW
GetUserDefaultUILanguage
GetSystemDefaultLangID
GetTimeZoneInformation
FileTimeToLocalFileTime
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
LocalFileTimeToFileTime
GetModuleHandleW
GetVersionExW
lstrcpyW
GlobalAddAtomW
ReadFile
CreateToolhelp32Snapshot
Process32FirstW
OpenProcess
Process32NextW
SetFilePointerEx
FlushFileBuffers
SetEndOfFile
GlobalLock
GlobalUnlock
GetCurrentThreadId
TerminateProcess
GetFileSize
SetFilePointer
GetStdHandle
CreateDirectoryW
GetSystemDirectoryW
HeapSize
GetFullPathNameW
GetCurrentDirectoryW
GetSystemInfo
CreateEventW
SetEvent
ResetEvent
WaitForMultipleObjects
GetACP
OutputDebugStringA
GetModuleHandleA
GetCurrentThread
LoadLibraryExW
GlobalAlloc
GlobalDeleteAtom
lstrcmpA
lstrcmpW
CompareStringA
GetTickCount
GlobalFree
GetPrivateProfileIntW
GetPrivateProfileStringW
WritePrivateProfileStringW
EncodePointer
LoadLibraryA
GlobalFindAtomW
MulDiv
GetProfileIntW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalAlloc
LocalReAlloc
CompareStringW
GetLocaleInfoW
GetSystemDefaultUILanguage
GlobalFlags
GetThreadLocale
LockFile
UnlockFile
DuplicateHandle
VirtualProtect
SetErrorMode
GetFileSizeEx
GetFileTime
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetCPInfo
IsValidCodePage
FindFirstFileExW
FreeEnvironmentStringsW
ReadConsoleW
GetConsoleMode
GetConsoleCP
SetStdHandle
GetStringTypeW
LCMapStringW
ExitProcess
HeapQueryInformation
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
PeekNamedPipe
GetFileType
GetDriveTypeW
QueryPerformanceFrequency
VirtualQuery
RtlUnwind
OutputDebugStringW
InitializeCriticalSectionAndSpinCount
HeapFree
Sleep
InitializeCriticalSection
SetEnvironmentVariableA
LocalFree
WriteConsoleW
gdi32
EndDoc
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
CreateDCW
SetViewportOrgEx
SetViewportExtEx
GetBkColor
StartDocW
GetDeviceCaps
SetBkMode
GetStockObject
RestoreDC
SaveDC
ExtSelectClipRgn
CreateBitmap
SetBkColor
EndPage
SetMapMode
SetStretchBltMode
CreateSolidBrush
StretchBlt
GetStretchBltMode
GetTextExtentPoint32W
GetViewportExtEx
SetWindowExtEx
OffsetViewportOrgEx
StartPage
SetTextColor
CreateFontIndirectW
BitBlt
GetPaletteEntries
GetCurrentObject
DeleteDC
SetDIBColorTable
GetDIBColorTable
SelectObject
CreateCompatibleDC
CreateDIBSection
GetObjectW
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
GetMapMode
ExcludeClipRect
GetClipBox
GetRgnBox
GetWindowExtEx
GetTextColor
DeleteObject
DPtoLP
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
comctl32
InitCommonControlsEx
shlwapi
PathStripToRootW
PathIsUNCW
PathFindFileNameW
PathFindExtensionW
StrFormatByteSizeW
oledlg
OleUIBusyW
urlmon
URLDownloadToFileW
URLDownloadToCacheFileW
wininet
InternetGetConnectedState
InternetOpenW
InternetConnectW
HttpOpenRequestW
HttpSendRequestW
HttpQueryInfoW
InternetReadFile
InternetCloseHandle
oleacc
CreateStdAccessibleObject
LresultFromObject
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 348KB - Virtual size: 348KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 165KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.giats Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 83KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ