Static task
static1
Behavioral task
behavioral1
Sample
pscp.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
pscp.exe
Resource
win10v2004-20230703-en
General
-
Target
pscp.exe
-
Size
344KB
-
MD5
b9735750b270236fb5228f4a344b22ef
-
SHA1
ec11523186a2cbba7bc3f68cba1a5ae36065fd4a
-
SHA256
65f7b617255bc92efbf462a394128d408d8adbf8a9dbe1f4413d9f5e57b724ee
-
SHA512
429de39ed470195541b5d3009954a64a9d5aa6964d4831a16ded48ff31877f2fc73cab29a6dbc4b074d5a970d5df97994ce4f9d8dde56a5848bf539147c63e86
-
SSDEEP
6144:WiWINiu5uPX6lQwzcpyesgMRX73nECOZGekdr9MzLvlAb3K+Ax/JaovZa/:WiWIQTpy9gMZEC7Wvvls3HUZa
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource pscp.exe
Files
-
pscp.exe.exe windows x86
c069e39981d1aa25c55950e58977d58d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyA
GetUserNameA
EqualSid
CopySid
GetLengthSid
SetSecurityDescriptorDacl
SetSecurityDescriptorOwner
InitializeSecurityDescriptor
AllocateAndInitializeSid
RegCreateKeyA
RegSetValueExA
user32
SendMessageA
FindWindowA
GetForegroundWindow
GetCapture
GetClipboardOwner
GetQueueStatus
GetCursorPos
kernel32
SetEndOfFile
SetEnvironmentVariableA
CompareStringW
CompareStringA
HeapSize
GetLocaleInfoA
InterlockedExchange
RtlUnwind
GetTickCount
ReadFile
SetConsoleMode
GetConsoleMode
GetStdHandle
WriteFile
FreeLibrary
LoadLibraryA
GetProcAddress
CloseHandle
SetEvent
GetOverlappedResult
WaitForSingleObject
GetLastError
CreateEventA
CreateThread
GetVersionExA
GetSystemDirectoryA
FormatMessageA
GetSystemTimeAdjustment
GetSystemTime
GetProcessTimes
GetCurrentProcess
GetThreadTimes
GetCurrentThread
GlobalMemoryStatus
QueryPerformanceCounter
GetCurrentProcessId
FindClose
FindNextFileA
FindFirstFileA
GetWindowsDirectoryA
LocalFree
WaitNamedPipeA
CreateFileA
CreateNamedPipeA
ConnectNamedPipe
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
LocalAlloc
GetCurrentThreadId
CreateProcessA
SetHandleInformation
CreatePipe
OpenProcess
GetFileTime
GetFileSize
SetFileTime
SetFilePointer
GetFileAttributesA
CreateDirectoryA
WaitForMultipleObjects
ReleaseMutex
CreateMutexA
DeleteFileA
GetEnvironmentVariableA
GetLocalTime
GetModuleFileNameA
GetTimeFormatA
GetDateFormatA
HeapAlloc
HeapReAlloc
HeapFree
GetSystemTimeAsFileTime
ExitProcess
GetModuleHandleA
TerminateProcess
GetCommandLineA
FlushFileBuffers
WideCharToMultiByte
GetTimeZoneInformation
VirtualProtect
VirtualAlloc
GetSystemInfo
VirtualQuery
LCMapStringA
MultiByteToWideChar
LCMapStringW
SetHandleCount
GetFileType
GetStartupInfoA
GetStringTypeA
GetStringTypeW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetStdHandle
GetACP
GetOEMCP
GetCPInfo
Sections
.text Size: 248KB - Virtual size: 246KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 76KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ