Static task
static1
Behavioral task
behavioral1
Sample
winamp261.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
winamp261.exe
Resource
win10v2004-20230221-en
General
-
Target
winamp261.exe
-
Size
2.0MB
-
MD5
f65be73a529ff4e106d73be0b3f53cf9
-
SHA1
a3c13c4e3b904d1756a8359ab69a639c9f28515c
-
SHA256
8deaee7587801d01780eef974565bd9a4585b14c9f8c1f084f99b9d86253c500
-
SHA512
35ae8f26078705cb9a6a6f72f42bda4247dc8f6b1f030f4b52567946fe254c795d1c032ee7b81613152083d416940381d1b0d73493aa7b1344039fff6224d84b
-
SSDEEP
49152:SCRieae6fQVxpgmv0hIYJeqD1vkkTouf/qpoIJzTgg+xp69SY:iPe6fQVxpguPYJeqtkkXNCYwMY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource winamp261.exe
Files
-
winamp261.exe.exe windows x86
5c1476f92ec3b6ded439c7175ddd3d2a
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
ReadFile
GetModuleFileNameA
GetDiskFreeSpaceA
CreateThread
ExitProcess
WriteFile
GetModuleHandleA
MultiByteToWideChar
SetFilePointer
CreateProcessA
GetWindowsDirectoryA
GetPrivateProfileStringA
WaitForSingleObject
LoadLibraryA
GetProcAddress
FreeLibrary
WritePrivateProfileStringA
Sleep
GlobalFree
GetFileAttributesA
SetFileAttributesA
CreateFileA
CloseHandle
DeleteFileA
GetTempPathA
GlobalAlloc
GetSystemDirectoryA
CreateDirectoryA
FindClose
FindFirstFileA
user32
GetParent
GetAsyncKeyState
IsDlgButtonChecked
GetDlgItemTextA
SetDlgItemTextA
LoadBitmapA
SendDlgItemMessageA
SetClassLongA
DestroyWindow
CreateDialogParamA
SetWindowTextA
EndDialog
LoadIconA
GetWindowRect
SetWindowPos
EnableWindow
wsprintfA
MessageBoxA
ShowWindow
InvalidateRect
UpdateWindow
PeekMessageA
DispatchMessageA
FindWindowA
SendMessageA
GetDlgItem
DialogBoxParamA
GetDesktopWindow
ScreenToClient
gdi32
TextOutA
DeleteObject
GetStockObject
SetBkColor
SetTextColor
SelectObject
BitBlt
GetNearestColor
CreateCompatibleDC
GetTextMetricsA
advapi32
RegSetValueExA
RegCreateKeyA
RegCloseKey
RegQueryValueExA
RegEnumKeyExA
RegOpenKeyExA
shell32
SHGetPathFromIDListA
SHBrowseForFolderA
SHGetMalloc
ole32
OleInitialize
CoUninitialize
CoCreateInstance
CoInitialize
OleUninitialize
Sections
.text Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ