Static task
static1
Behavioral task
behavioral1
Sample
mongoose-free-6.3.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
mongoose-free-6.3.exe
Resource
win10v2004-20230915-en
General
-
Target
mongoose-free-6.3.exe
-
Size
180KB
-
MD5
47067ef27ac43d3848f84db691ec2174
-
SHA1
23476e8351194635a29cca8daa60cbbbae1c82ad
-
SHA256
2f76cd1a1f52fe78b007f2d9cf0716b4488ecb430fa5703d45fcbabd61696675
-
SHA512
e4688c3b1532b25122af9655a6b901f972aa7d7f84e1bfae37dcecf95ce9c171760d0775cba6c33f8559c2bc68cc27051a6a822a65caf5f2935cab9ea07c5476
-
SSDEEP
3072:uucXmxaw3Q30OP5PK4WmmYyGegTFNPTv5VdgYMHccReGMmMFQXKn06p:uucRw3Q3+4yHQNPDrMHccRxdXXz6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource mongoose-free-6.3.exe
Files
-
mongoose-free-6.3.exe.exe windows:4 windows x86
e421ef60b119a1e06dc5472039cdfda5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
DispatchMessageA
TranslateMessage
GetMessageA
LoadImageA
ShowWindow
CreateWindowExA
RegisterClassA
LoadIconA
DefWindowProcA
PostQuitMessage
DestroyMenu
PostMessageA
TrackPopupMenu
SetForegroundWindow
GetCursorPos
CreatePopupMenu
MessageBoxA
SetMenuItemInfoA
AppendMenuW
shell32
Shell_NotifyIconA
CommandLineToArgvW
ShellExecuteA
SHGetPathFromIDListA
SHBrowseForFolderA
ws2_32
ntohl
htonl
WSAGetLastError
send
recv
htons
ntohs
WSAStartup
closesocket
inet_ntoa
gethostbyname
ioctlsocket
connect
socket
getsockname
listen
bind
setsockopt
getsockopt
accept
sendto
recvfrom
getpeername
__WSAFDIsSet
select
shutdown
gethostname
advapi32
RegisterServiceCtrlHandlerW
SetServiceStatus
StartServiceCtrlDispatcherA
CloseServiceHandle
DeleteService
OpenServiceW
ChangeServiceConfig2A
CreateServiceW
OpenSCManagerA
msvcrt
calloc
free
memcmp
memcpy
fclose
_pctype
_isctype
__mb_cur_max
strchr
fgets
fopen
strcmp
realloc
srand
rand
abort
memset
malloc
memmove
time
fprintf
_iob
strlen
tolower
fflush
fputc
vfprintf
wcscat
strncpy
_snprintf
_ftol
strncmp
strerror
_errno
sscanf
atoi
memchr
_atoi64
fwrite
fread
fseek
fgetc
strrchr
_pclose
_popen
strftime
gmtime
strtoul
localtime
_mkdir
rename
remove
_rmdir
_endthread
wcslen
toupper
getenv
_vsnprintf
strcpy
_wstati64
_wfopen
_beginthread
exit
freopen
signal
printf
_fullpath
strncat
wcsncat
_exit
_XcptFilter
_acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_strdup
_chdir
kernel32
FindFirstFileW
GetFileAttributesW
SetLastError
FindClose
FindNextFileW
WideCharToMultiByte
GetTickCount
MultiByteToWideChar
CloseHandle
CreateProcessW
DuplicateHandle
CreatePipe
GetStdHandle
GetCurrentProcess
WriteFile
GetLastError
ReadFile
GetFullPathNameW
SetHandleInformation
Sleep
GetModuleHandleA
LocalFree
GetCommandLineW
TerminateThread
GetCurrentDirectoryW
GetModuleFileNameW
FormatMessageA
GetStartupInfoA
Sections
.text Size: 84KB - Virtual size: 80KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 64KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ