SEPack[.]exe | Triage

Resubmissions

03/11/2023, 20:50

231103-zm4gbscc57 3

03/11/2023, 19:20

03/11/2023, 18:31

03/11/2023, 18:21

03/11/2023, 18:17

03/11/2023, 18:12

Sharing

Copy URL Twitter E-mail

General

Target

SEPack.exe
Size

80KB
MD5

284c9ca0a852a8f729924747daf5828e
SHA1

bfc45dca8228ae8e26c0aa06da00076ac388ccc5
SHA256

8b56c935f20796eb2b3d748101b88864c17285bb9dac6e5fd6b969814f735275
SHA512

dad9379c5a7f25da7391727072441700df579904ff7fae7fbc10a975b2dd23deda5a2f3aa0122126f395831bdfdd613f78b1c6b7cdfbb6d8616509aab07e3a81
SSDEEP

1536:+jlq8PbXtzC66g6C2vlKlk5GiXzUuPVwIOWbB:+Hse6CmluiXghWb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SEPack.exe

Files

SEPack.exe
.exe windows:6 windows x86

ca53d625df2573f97c6c9f25399faa63

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

vcruntime140

memmove
strchr
memset
_except_handler4_common
memcpy

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func
fclose
__stdio_common_vsscanf
_set_fmode
__p__commode
feof
ferror
_fileno
fopen
_setmode
fread
__stdio_common_vsprintf
__stdio_common_vfprintf
fwrite
ftell
fseek

api-ms-win-crt-string-l1-1-0

strncpy
isspace
_stricmp
strtok

api-ms-win-crt-heap-l1-1-0

realloc
malloc
free
calloc
_set_new_mode

api-ms-win-crt-runtime-l1-1-0

_set_app_type
_configure_narrow_argv
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_errno
exit
_exit
terminate
__p___argc
__p___argv
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
_seh_filter_exe
_initterm_e
_controlfp_s
_initialize_onexit_table
_register_onexit_function
_crt_atexit

api-ms-win-crt-convert-l1-1-0

atol

api-ms-win-crt-filesystem-l1-1-0

_mkdir
_stat64i32

api-ms-win-crt-time-l1-1-0

_time64

api-ms-win-crt-environment-l1-1-0

getenv

api-ms-win-crt-math-l1-1-0

__setusermatherr

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

kernel32

InitializeSListHead
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetModuleHandleW
IsDebuggerPresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId

Sections

.text
Size: 53KB - Virtual size: 52KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 22KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

ca53d625df2573f97c6c9f25399faa63

Headers

DLL Characteristics

File Characteristics

Imports

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-filesystem-l1-1-0

api-ms-win-crt-time-l1-1-0

api-ms-win-crt-environment-l1-1-0

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-locale-l1-1-0

kernel32

Sections

.text Size: 53KB - Virtual size: 52KB

.rdata Size: 22KB - Virtual size: 21KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 53KB - Virtual size: 52KB

.rdata
Size: 22KB - Virtual size: 21KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 2KB - Virtual size: 1KB