Static task
static1
Behavioral task
behavioral1
Sample
structdestr.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
structdestr.exe
Resource
win10v2004-20230220-en
General
-
Target
structdestr.zip
-
Size
635KB
-
MD5
22d7cc1a9e0a14cb0a71840aa7566849
-
SHA1
e720ecb646d0cba2868c27bea263dfb26a6bff2d
-
SHA256
07983362190055ad7117c86b14ee663ff728db6b07158868ac7fef7122803ed2
-
SHA512
19f5f7ceabc31c818ca31f2cf1423ad190410cbad030130809043bd719b9ca23edd27c1b4d16a6c0a88797ad07821d8aea4c1b65e743277082f283f86f7bc27a
-
SSDEEP
12288:C5/g19JBok1lLDJ86vBWYq+GQX+tZyp00kHQU1yCx70jbBvlx94h+IPif/6NG:C5/gPJuk1lXq6vBWr97SkQibx7m5lPIo
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/structdestr.exe
Files
-
structdestr.zip.zip
-
readme.txt
-
sound5.wav
-
sound6.wav
-
structdestr.exe.exe windows x86
be9f0088f4f94ba350179e1812f275c3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
Imports
gdi32
BitBlt
CreateBitmap
CreateCompatibleDC
CreateSolidBrush
DeleteDC
DeleteObject
GetBitmapBits
PatBlt
SelectObject
SetBitmapBits
SetBkColor
SetStretchBltMode
SetTextColor
StretchBlt
TextOutW
kernel32
CloseHandle
CreateFileW
CreateThread
DeleteCriticalSection
EnterCriticalSection
ExitProcess
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetLastError
GetStartupInfoA
GetSystemTimeAsFileTime
GetTickCount
InitializeCriticalSection
LeaveCriticalSection
QueryPerformanceCounter
SetUnhandledExceptionFilter
Sleep
TerminateProcess
TerminateThread
TlsGetValue
UnhandledExceptionFilter
VirtualAlloc
VirtualProtect
VirtualQuery
WriteFile
ntdll
NtRaiseHardError
RtlAdjustPrivilege
memcpy
memset
sin
strlen
wcslen
winmm
PlaySoundW
waveOutClose
waveOutOpen
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutWrite
msvcrt
__dllonexit
__getmainargs
__initenv
__lconv_init
__set_app_type
__setusermatherr
_acmdln
_amsg_exit
_cexit
_fmode
_initterm
_iob
_lock
_onexit
_unlock
abort
calloc
exit
fprintf
free
fwrite
malloc
rand
signal
strncmp
system
vfprintf
user32
GetDC
GetDesktopWindow
GetSystemMetrics
GetWindowDC
InvalidateRect
MessageBoxW
ReleaseDC
Sections
.text Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 35KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 512B - Virtual size: 52B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 32B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE