Static task
static1
General
-
Target
SPEED2.EXE
-
Size
4.6MB
-
MD5
6445adbf4e8d64be51e96a69bba168a4
-
SHA1
c92e5c568a42dbf2d733e0d9b9dc9ca09794a36c
-
SHA256
f9dd86c054878ce6276beb07c1fd61874f7a1e4bf1f241b084c65b73e24168a7
-
SHA512
5fc6ddcd92a8a6dd94a3ccb52d8ef0b6816f5098d7b38fef7a9c5950454dd6a8ba2779d75f6bbd5270666e830fbd4e47134c4afab42dfc668ead08247263a760
-
SSDEEP
98304:6N1JdX+qCT2SQBLlpi1uUnJj2f9J1CW/2pjcr7G5ob:6pX+dei7oV2pGY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SPEED2.EXE
Files
-
SPEED2.EXE.exe windows x86
bb803fbbee588c5df962ace5f438e3a8
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegSetValueExA
RegQueryValueExA
RegOpenKeyExA
RegOpenKeyA
RegCreateKeyA
RegCloseKey
ddraw
DirectDrawCreate
dinput8
DirectInput8Create
dsound
ord1
gdi32
SetTextColor
CreateCompatibleDC
CreateFontA
CreateBitmap
SetBkMode
DeleteDC
ExtTextOutA
SetBkColor
GetPixel
DeleteObject
SelectObject
BitBlt
kernel32
VirtualQuery
IsBadCodePtr
GetCurrentProcessId
SetEndOfFile
SetStdHandle
FlushFileBuffers
GetStringTypeW
GetStringTypeA
IsValidCodePage
IsValidLocale
EnumSystemLocalesA
CompareStringA
CompareStringW
SetEnvironmentVariableA
IsDebuggerPresent
DebugBreak
GetLocaleInfoW
GetExitCodeThread
GetLocaleInfoA
GetUserDefaultLCID
LCMapStringW
LCMapStringA
SetUnhandledExceptionFilter
GetCPInfo
GetOEMCP
GetACP
HeapSize
HeapReAlloc
HeapCreate
HeapDestroy
TlsAlloc
SetLastError
TlsFree
GetStartupInfoA
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetStdHandle
IsBadWritePtr
IsBadReadPtr
GetLastError
QueryPerformanceFrequency
QueryPerformanceCounter
FindClose
FindNextFileA
FindFirstFileA
CreateDirectoryA
MultiByteToWideChar
GetModuleFileNameA
GetModuleHandleA
GetLongPathNameA
SetErrorMode
CloseHandle
Process32Next
Process32First
Sleep
CreateToolhelp32Snapshot
SuspendThread
ResumeThread
GetDriveTypeA
GetLogicalDrives
GetVersionExA
OutputDebugStringA
SetProcessAffinityMask
SetThreadPriority
SetPriorityClass
GetProcessAffinityMask
GetThreadPriority
GetPriorityClass
GetCurrentThread
GetCurrentProcess
FreeLibrary
GetProcAddress
LoadLibraryA
WideCharToMultiByte
GetSystemInfo
IsProcessorFeaturePresent
EnterCriticalSection
InterlockedExchange
InitializeCriticalSection
InterlockedCompareExchange
DeleteCriticalSection
LeaveCriticalSection
GetFullPathNameA
MapViewOfFile
GetFileSize
CreateFileMappingA
CreateFileA
CreateFileW
UnmapViewOfFile
LockResource
LoadResource
SizeofResource
FindResourceA
FindResourceW
VirtualFree
VirtualAlloc
lstrcmpiA
DuplicateHandle
GetCurrentThreadId
TerminateThread
SleepEx
GetTickCount
CreateEventA
SetEvent
WaitForSingleObject
ResetEvent
GetCurrentDirectoryA
WriteFile
SetFilePointer
DeleteFileA
MoveFileA
ReadFile
GetDiskFreeSpaceExA
GlobalAlloc
GlobalFree
VirtualProtect
CreateThread
CreateMutexA
ReleaseMutex
HeapFree
GetProcessHeap
HeapAlloc
WaitCommEvent
GetOverlappedResult
SetCommMask
WaitForMultipleObjects
PurgeComm
SetCommState
GetCommState
SetCommConfig
GetCommConfig
SetCommTimeouts
SetupComm
GetCommandLineA
RtlUnwind
ExitProcess
TerminateProcess
GetTimeZoneInformation
GetSystemTimeAsFileTime
RaiseException
ExitThread
TlsSetValue
TlsGetValue
FileTimeToSystemTime
FileTimeToLocalFileTime
GetDiskFreeSpaceA
GetFileType
RemoveDirectoryA
netapi32
Netbios
shell32
ShellExecuteA
shfolder
SHGetFolderPathA
tapi32
lineAnswer
lineMakeCall
lineGetID
lineClose
lineNegotiateAPIVersion
lineOpen
lineGetDevCaps
lineInitialize
lineShutdown
user32
ShowCursor
GetCursorPos
wvsprintfA
MessageBoxA
GetSystemMetrics
DefWindowProcA
ReleaseCapture
GetMessageA
DispatchMessageA
PeekMessageA
TranslateMessage
LoadIconA
LoadCursorA
RegisterClassExA
AdjustWindowRect
GetDesktopWindow
CreateWindowExA
UpdateWindow
SetCursor
SetFocus
SetForegroundWindow
ShowWindow
SetWindowLongA
DestroyWindow
BeginPaint
EndPaint
PostMessageA
PostThreadMessageA
PostQuitMessage
SetCapture
GetClientRect
GetWindowRect
SetRect
UnregisterClassA
SetActiveWindow
GetForegroundWindow
wsprintfA
IsIconic
winmm
timeSetEvent
timeKillEvent
timeBeginPeriod
timeGetDevCaps
timeGetTime
timeEndPeriod
ws2_32
WSAGetLastError
WSAStartup
setsockopt
ioctlsocket
socket
closesocket
shutdown
bind
connect
listen
accept
sendto
send
recvfrom
recv
select
getpeername
getsockname
gethostbyname
gethostname
WSAIoctl
WSACleanup
d3d9
Direct3DCreate9
Sections
.text Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 404KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 212KB - Virtual size: 845KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 228KB - Virtual size: 225KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 236KB - Virtual size: 235KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE