Static task
static1
General
-
Target
sai2.exe
-
Size
5.0MB
-
MD5
39eb84cce9ea24cf63dbb0a1394e0a14
-
SHA1
6727534b3527b0ed08e2abcbc123b6efda46220a
-
SHA256
91299335de089176ab9671d7b652e5055ee6a2dca5d2946b215193aa51b3c6fe
-
SHA512
27bf5af31370b5d55995b8b5ab1f121b22eb1f3369e3032e84a5e558ad4a3f5dc373bef662d9a6f190b089aaf9fa570d2004f5fe23da27da5bd5e605fda0ae88
-
SSDEEP
49152:mleQiqoPNWhaLzIbPlX+4T2dtd5Zn4hxdb8vT/9c:mleQiNPNWha3IbPlXhT2Zszb8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource sai2.exe
Files
-
sai2.exe.exe windows x86
Password: infectado
433766f122bdaafefc3b590c234453f7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SystemTimeToFileTime
FlushFileBuffers
WriteFile
SetFilePointerEx
ReadFile
GetFileSizeEx
DeleteFileW
CreateFileW
Sleep
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
FileTimeToSystemTime
GetFileAttributesW
CompareFileTime
CompareStringW
GetPrivateProfileIntW
ReleaseSemaphore
GlobalAlloc
GlobalFree
LocalAlloc
LocalFree
FileTimeToLocalFileTime
SwitchToThread
CopyFileW
GetPrivateProfileStringW
CreateMutexW
GetLastError
GetProcAddress
CloseHandle
GetDiskFreeSpaceExW
lstrlenA
GetSystemTime
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
LoadLibraryA
GetCurrentProcess
SetPriorityClass
GlobalLock
GlobalUnlock
GetTickCount
GetCurrentThread
SetThreadPriority
GetCurrentThreadId
WaitForSingleObject
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapSize
GetFileType
SetHandleCount
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
WaitForMultipleObjects
ResetEvent
SetEvent
EnterCriticalSection
LeaveCriticalSection
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetModuleFileNameA
GetStdHandle
ExitProcess
VirtualAlloc
VirtualFree
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
VirtualQuery
FreeLibrary
SetFilePointer
GetFileSize
FormatMessageW
LoadLibraryW
RaiseException
Module32NextW
Module32FirstW
CreateToolhelp32Snapshot
GetCurrentProcessId
GlobalMemoryStatusEx
SetThreadAffinityMask
GetProcessAffinityMask
ResumeThread
CreateEventW
CreateSemaphoreW
GetModuleFileNameW
GetCommandLineW
GetModuleHandleW
DeviceIoControl
SetFileTime
SetEndOfFile
FlushViewOfFile
SetLastError
MoveFileExW
CreateDirectoryW
RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileW
GetEnvironmentVariableW
GetDriveTypeW
DebugBreak
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetVersionExW
GetCPInfo
GetSystemInfo
HeapFree
RtlUnwind
HeapAlloc
GetCommandLineA
GetStartupInfoA
VirtualProtect
ExitThread
CreateThread
InterlockedIncrement
InterlockedDecrement
GetACP
GetOEMCP
IsValidCodePage
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
LCMapStringA
LCMapStringW
GetModuleHandleA
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
HeapReAlloc
user32
GetAncestor
ReleaseCapture
WaitMessage
GetMessageW
GetDlgCtrlID
SetCapture
DefWindowProcW
SetWindowLongW
GetSystemMenu
MoveWindow
SystemParametersInfoW
GetWindowRect
AdjustWindowRectEx
CreateWindowExW
GetSystemMetrics
DrawTextW
FillRect
GetWindowLongW
EnableWindow
RegisterClassExW
GetSysColor
RedrawWindow
MapWindowPoints
SetLayeredWindowAttributes
FrameRect
GetClientRect
GetPropW
SetPropW
MonitorFromWindow
CreatePopupMenu
SetMenuInfo
CreateMenu
GetScrollPos
SetScrollInfo
SetScrollRange
SetScrollPos
GetMenuItemInfoW
GetMenuItemCount
EnableMenuItem
CheckMenuItem
ClientToScreen
SetWindowRgn
GetMonitorInfoW
MonitorFromRect
IsZoomed
GetWindowTextW
SetWindowTextW
IsWindowEnabled
GetWindowThreadProcessId
GetCursorPos
WindowFromPoint
GetDC
EnumChildWindows
SetWindowPlacement
SetParent
GetClassLongW
ScrollWindowEx
LoadCursorW
SendInput
PostThreadMessageW
mouse_event
MessageBoxW
DeferWindowPos
EndDeferWindowPos
BeginDeferWindowPos
SetCaretPos
ShowCaret
CreateCaret
DestroyCaret
HideCaret
IsChild
GetKeyState
GetNextDlgTabItem
DestroyMenu
GetWindowDC
ReleaseDC
GetWindowPlacement
SetCursor
SetWindowPos
MessageBeep
GetParent
SetActiveWindow
BeginPaint
EndPaint
RegisterClipboardFormatW
SetFocus
ShowWindow
ReplyMessage
SetForegroundWindow
GetMenuInfo
IsIconic
DestroyWindow
PostQuitMessage
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
IsClipboardFormatAvailable
DeleteMenu
AppendMenuW
InsertMenuItemW
GetCapture
GetFocus
SendMessageW
GetAsyncKeyState
SetTimer
KillTimer
PeekMessageW
TranslateMessage
DispatchMessageW
EnumThreadWindows
UpdateWindow
PostMessageW
MsgWaitForMultipleObjects
DestroyIcon
DrawIconEx
LoadIconW
ScreenToClient
ChildWindowFromPointEx
GetDlgItem
gdi32
CreateRectRgn
BitBlt
ExtSelectClipRgn
OffsetClipRgn
SelectClipRgn
DeleteDC
DeleteObject
CreateSolidBrush
SelectObject
GetTextExtentExPointW
CreateDIBSection
CreateCompatibleBitmap
GetCurrentObject
CreateCompatibleDC
SetTextColor
GetDeviceCaps
GetCharacterPlacementW
GetGlyphOutlineW
GetTextExtentPoint32W
ExtTextOutW
GetTextMetricsW
CreateFontIndirectW
CreateRectRgnIndirect
ExtCreateRegion
CombineRgn
GetRegionData
CreateDIBitmap
EnumFontFamiliesExW
GetStockObject
RectVisible
SetBkMode
SetBkColor
SetDIBitsToDevice
comdlg32
GetOpenFileNameW
GetSaveFileNameW
shell32
SHGetSpecialFolderLocation
SHGetDataFromIDListW
SHGetPathFromIDListW
ord21
CommandLineToArgvW
SHGetSettings
SHGetFileInfoW
DragQueryFileW
DragFinish
DragAcceptFiles
SHFileOperationW
SHGetSpecialFolderPathW
SHGetDesktopFolder
SHBrowseForFolderW
ole32
CoTaskMemFree
StringFromIID
CoCreateInstance
OleUninitialize
OleInitialize
CoTaskMemAlloc
CoUninitialize
CoSetProxyBlanket
CoInitializeSecurity
CoInitializeEx
ReleaseStgMedium
OleDuplicateData
RegisterDragDrop
RevokeDragDrop
DoDragDrop
imm32
ImmNotifyIME
ImmGetCompositionStringW
ImmGetContext
ImmSetCompositionFontW
ImmSetCompositionWindow
ImmReleaseContext
ImmAssociateContext
ImmAssociateContextEx
comctl32
ImageList_GetIconSize
ImageList_GetIcon
shlwapi
PathCanonicalizeW
PathIsRelativeW
StrRetToBufW
rpcrt4
UuidCreate
advapi32
EqualSid
RegOpenKeyExW
RegCloseKey
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
FreeSid
RegQueryValueExW
oleaut32
SysFreeString
VariantInit
VariantClear
SysAllocString
Sections
.text Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 455KB - Virtual size: 454KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.shared Size: 512B - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.appskin Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.srclibs Size: 437KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 553KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ