Static task
static1
Behavioral task
behavioral1
Sample
StartMenu.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
StartMenu.exe
Resource
win10v2004-20231215-en
General
-
Target
StartMenu.exe
-
Size
240KB
-
MD5
2709046ed9b3f730c9df45e23a063594
-
SHA1
1db06ed18e6c02dc496d7f7c3c2b5fbbfad3de2c
-
SHA256
607c701046237bad3dd708e5ec28c33076884f5a69b768927e8efb4e0b4c546d
-
SHA512
3b633a8cf0ed6a0a7def147639ef38093c6205d16dd6da5d57aef36e9124cd1241bb44912c7280799bccb036dac2bb5e13c738ee4a6ab90d1400ca130e3c3b06
-
SSDEEP
3072:WVc6JTddfD5inAsNChbD/9T5bU+9E3lKQUpWTBf1NMFXeLWtps5P:MT2EhbD/NFU+HWTBdQXNu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource StartMenu.exe
Files
-
StartMenu.exe.exe windows:4 windows x86 arch:x86
404b72415e9d567b12707fc0c6346ae7
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleFileNameW
FreeLibrary
SetCurrentDirectoryW
CreateMutexW
CloseHandle
GetLastError
Sleep
LoadLibraryW
MulDiv
FormatMessageW
LocalFree
GetProcAddress
CreateProcessW
GetFileAttributesW
CreateFileW
WideCharToMultiByte
MultiByteToWideChar
ExitProcess
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
InterlockedDecrement
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
GetStartupInfoW
ReadFile
RaiseException
RtlUnwind
EnterCriticalSection
LeaveCriticalSection
GetModuleHandleA
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
HeapSize
DeleteCriticalSection
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
GetConsoleCP
GetConsoleMode
SetFilePointer
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
VirtualAlloc
HeapReAlloc
LoadLibraryA
InitializeCriticalSection
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
GetStringTypeA
GetStringTypeW
SetStdHandle
FlushFileBuffers
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetLocaleInfoW
LCMapStringA
LCMapStringW
SetEndOfFile
CreateFileA
user32
MonitorFromPoint
GetMonitorInfoW
AdjustWindowRectEx
GetWindowTextW
SystemParametersInfoW
SetWindowTextW
CreateWindowExW
SendMessageW
DestroyWindow
GetPropW
InvalidateRect
GetWindowLongW
UpdateWindow
DefWindowProcW
CallWindowProcW
SetPropW
SetWindowLongW
RemovePropW
PostQuitMessage
GetCursorPos
GetWindowRect
SetWindowPos
GetClientRect
GetDlgItem
GetMenu
CreateDialogParamW
LoadCursorW
LoadImageW
SetCursor
GetKeyState
ReleaseCapture
SetCapture
MessageBoxW
PeekMessageW
GetMessageW
IsDialogMessageW
TranslateMessage
DispatchMessageW
DestroyIcon
SetClassLongW
IsWindowEnabled
EnableWindow
ShowWindow
ScreenToClient
GetSystemMetrics
EndPaint
GetDC
GetCursor
BeginPaint
gdi32
GdiFlush
SetDIBitsToDevice
GetStockObject
CreateDIBSection
GetObjectW
DeleteObject
shell32
SHGetSpecialFolderPathW
SHGetFolderPathW
FindExecutableW
ShellExecuteExW
ole32
CoInitialize
CoCreateInstance
CoUninitialize
comctl32
InitCommonControlsEx
Sections
.text Size: 168KB - Virtual size: 164KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 48KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ