sm1302[.]zip | Triage

Sharing

Copy URL Twitter E-mail

General

Target

sm1302.zip
Size

148KB
MD5

b7f173720a612cdfd99db3f205084ab4
SHA1

382ff4da0926c6c191ba76f577e61844204f6bcc
SHA256

e296c290128f335916efd7fc0e96af1271d0dd10c0e625c25222b5ea27a48146
SHA512

555f08b48da737be1346679b845f8b318f7ff2c369199f27f424e4a2bef127a05e1c4eddbda76ce51f357317ff04aaa763d4d2f18eb878bf2e82123602bc7e30
SSDEEP

3072:AjqxxIdfOUIdBj5a+v9ycKnOBmeG41yNynKakuzb4XcfwXcICLIi/c8ZCk1KBmv:AjqxxId25x5tFycGOBmw1tKDW4XcI3MN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/fvcat.exe

Files

sm1302.zip
.zip
fvcat.exe
.exe windows x86

2c771abbd388435a4acc7f0163ff55d9

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

GetPrivateProfileIntA
HeapAlloc
GetCurrentDirectoryA
SetEnvironmentVariableA
CompareStringW
HeapReAlloc
CloseHandle
FlushFileBuffers
CompareStringA
LoadLibraryA
GetProcAddress
SetStdHandle
GetLastError
WriteFile
SetFilePointer
GetFileType
GetStdHandle
RtlUnwind
GetOEMCP
GetACP
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
GetCPInfo
FreeEnvironmentStringsA
UnhandledExceptionFilter
FreeEnvironmentStringsW
GetStringTypeA
LCMapStringW
GetStringTypeW
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
TerminateProcess
ExitProcess
GetCurrentProcess
VirtualFree
HeapCreate
VirtualAlloc
GetModuleFileNameA
WritePrivateProfileStringA
GetFullPathNameA
GetDriveTypeA
GetVersion
GetCommandLineA
HeapDestroy
HeapFree
GetSystemTime
GetTimeZoneInformation
GetModuleHandleA
GetStartupInfoA
GetLocalTime

user32

SetWindowPos
SetWindowRgn
GetMessageA
DispatchMessageA
TranslateMessage
SetTimer
UpdateWindow
ShowWindow
CreateWindowExA
GetClientRect
GetWindowRect
RegisterClassExA
AdjustWindowRect
GetSystemMetrics
SetCapture
ReleaseCapture
MessageBoxA
SetCursor
GetDlgItemTextA
SendMessageA
SendDlgItemMessageA
GetDlgItem
CreateDialogParamA
SetDlgItemTextA
IsDialogMessageA
MoveWindow
InvalidateRect
InvalidateRgn
ReleaseDC
GetWindowDC
LoadBitmapA
KillTimer
LoadMenuA
GetSubMenu
EndPaint
PostQuitMessage
BeginPaint
DestroyWindow
ClientToScreen
TrackPopupMenu
LoadCursorA
DefWindowProcA
LoadIconA

gdi32

CreateBitmap
CreateCompatibleBitmap
CreateDCA
SelectObject
CombineRgn
DeleteObject
DeleteDC
CreateCompatibleDC
BitBlt
GetObjectA
GetDIBits
StretchBlt
SetBkColor
SetTextColor
CreateRectRgn

Sections

.text
Size: 39KB - Virtual size: 38KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 1023B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 157KB - Virtual size: 156KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

2c771abbd388435a4acc7f0163ff55d9

Headers

File Characteristics

Imports

kernel32

user32

gdi32

Sections

.text Size: 39KB - Virtual size: 38KB

.rdata Size: 1024B - Virtual size: 1023B

.data Size: 17KB - Virtual size: 23KB

.idata Size: 3KB - Virtual size: 2KB

.rsrc Size: 157KB - Virtual size: 156KB

.text
Size: 39KB - Virtual size: 38KB

.rdata
Size: 1024B - Virtual size: 1023B

.data
Size: 17KB - Virtual size: 23KB

.idata
Size: 3KB - Virtual size: 2KB

.rsrc
Size: 157KB - Virtual size: 156KB