Static task
static1
Behavioral task
behavioral1
Sample
彩虹0730C.sfx.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
彩虹0730C.sfx.exe
Resource
win10v2004-20230703-en
General
-
Target
彩虹0730C.sfx.exe
-
Size
13.8MB
-
MD5
9cbc05c6069f0736b378a785c79e423e
-
SHA1
0ffec27bd488388dad62a32e0b72daeb02d0dd07
-
SHA256
0b13fcb8410343de936b07686d64047dcafed27e3a999eef5971dbf32b22fd0b
-
SHA512
3992a0312b6276bbb988b51ef0204a809ed7bfe576b137c0beadab11c304191674332b835b667928807b9307edc9f575e7764f315403611568ce4fc15cef43b8
-
SSDEEP
393216:AXdCPsjliAKbq3hSm206PVJXVc28h1KRvuNu4s:AXAsjBKbq4PPycGo4s
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 彩虹0730C.sfx.exe
Files
-
彩虹0730C.sfx.exe.exe windows x86
a905f82ec2fcfd8c784de9b012d64305
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
InitCommonControlsEx
shell32
SHGetPathFromIDListW
SHGetFileInfoW
CommandLineToArgvW
ShellExecuteW
ShellExecuteExW
SHGetMalloc
SHBrowseForFolderW
SHGetSpecialFolderLocation
kernel32
CreateFileA
FreeLibrary
GetProcessHeap
HeapAlloc
GetLastError
GetProcAddress
HeapFree
LoadLibraryW
GetModuleFileNameW
LocalFree
WaitForSingleObject
CreateProcessW
SetCurrentDirectoryW
GetCurrentDirectoryW
CloseHandle
SetFileApisToOEM
GetCurrentProcess
GetCurrentThread
SetPriorityClass
GetEnvironmentVariableW
SetThreadPriority
GetVersionExW
GetModuleHandleW
ExpandEnvironmentStringsW
CreateFileW
GetCommandLineW
DeleteFileW
GetFileAttributesW
RemoveDirectoryW
CreateDirectoryW
FindClose
FindNextFileW
FindFirstFileW
FormatMessageW
InterlockedExchangeAdd
SetEndOfFile
SetFileTime
WriteFile
SetFilePointer
GetFileSize
ReadFile
MultiByteToWideChar
WideCharToMultiByte
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
MoveFileW
lstrlenW
GetTempPathW
GetFullPathNameW
GetWindowsDirectoryW
GetTempFileNameW
SetFileAttributesW
GetLongPathNameW
ResetEvent
CreateEventW
SetEvent
FindResourceW
FileTimeToSystemTime
SetStdHandle
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetStringTypeW
GetStringTypeA
GetLocaleInfoA
LoadLibraryA
HeapReAlloc
VirtualAlloc
FlushFileBuffers
GetConsoleMode
GetConsoleCP
LCMapStringW
LCMapStringA
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
HeapDestroy
GetStartupInfoA
GetACP
WaitForMultipleObjects
ResumeThread
GetFileType
SetHandleCount
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
IsValidCodePage
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetSystemTimeAsFileTime
GetVersionExA
GetStartupInfoW
ExitThread
GetCurrentThreadId
CreateThread
RaiseException
RtlUnwind
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
HeapSize
ExitProcess
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetOEMCP
user32
TranslateMessage
IsWindowVisible
EnableWindow
GetMessageW
KillTimer
DispatchMessageW
PostQuitMessage
CreateDialogParamW
ScreenToClient
DestroyIcon
IsWindow
ShowWindow
MessageBoxW
PostMessageW
DialogBoxParamW
SetWindowPos
GetWindowRect
GetSystemMetrics
GetWindowTextW
SetWindowTextW
GetDlgItem
SendMessageW
EndDialog
SetFocus
LoadIconW
GetDesktopWindow
LoadStringW
SetTimer
IsDialogMessageW
gdi32
DeleteObject
CreateSolidBrush
ole32
CoUninitialize
CoTaskMemFree
CoInitializeEx
CoCreateInstance
CoInitialize
Sections
.text Size: 257KB - Virtual size: 257KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 78KB - Virtual size: 77KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ