Static task
static1
Behavioral task
behavioral1
Sample
155绿色软件站.url
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
155绿色软件站.url
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
CPUTempWatch.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
CPUTempWatch.exe
Resource
win10v2004-20231215-en
General
-
Target
59ac69bdec16fde08404e64df94b5ea9
-
Size
122KB
-
MD5
59ac69bdec16fde08404e64df94b5ea9
-
SHA1
67d41d2856bfc3e0cc3d3b7d2e7f1965288f5978
-
SHA256
07a0677e9c97d5c00fb4f66d26d45f73fdfe63ce89a079cbaab7208b2cc09630
-
SHA512
10c2c263d58f8beb6dcfd825e35520159264d46cf329580a300741d5d3ace5cf1c0d6d10769a7801d83abf8b06a51b57579eb38c7000f1f3661b42038bda4efb
-
SSDEEP
3072:Ge+iYIkYPV6sRxqrfQHt1X98BTYMdhAz+za5LIXk5pvNlS8UK:57xzwsTqroHrUPaNl+8UK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/CPUTempWatch.exe
Files
-
59ac69bdec16fde08404e64df94b5ea9.rar
-
155绿色软件站.url.url
-
CPUTempWatch.exe.exe windows:4 windows x86 arch:x86
16a4e9153ca7d5a23234c962afebb0f0
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
Imports
kernel32
Beep
GetSystemDefaultLangID
GetUserDefaultLangID
ExitProcess
GetEnvironmentStrings
GetStartupInfoA
GetCommandLineA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
VirtualFree
HeapAlloc
GetProcessHeap
HeapFree
HeapSize
CreateEventA
CreateSemaphoreA
GetCurrentThreadId
SetPriorityClass
OpenProcess
ResumeThread
CreateThread
GetFullPathNameA
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFileAttributesA
SetFileAttributesA
CreateFileA
ReadFile
DeviceIoControl
FindClose
FindFirstFileA
GetFileTime
SetFileTime
MoveFileA
GetLargestConsoleWindowSize
SetLastError
GetFileSize
SetEndOfFile
DeleteFileA
GetExitCodeProcess
CreateProcessA
FreeEnvironmentStringsA
CreateDirectoryA
GetSystemDirectoryA
GetWindowsDirectoryA
CopyFileA
GetTempPathA
GetTempFileNameA
SetConsoleTitleA
GetConsoleTitleA
ReadConsoleInputA
PeekConsoleInputA
GetSystemTime
GetLocalTime
GetTimeZoneInformation
FindNextFileA
ExpandEnvironmentStringsA
SetErrorMode
MultiByteToWideChar
SetConsoleScreenBufferSize
SetConsoleWindowInfo
GetConsoleScreenBufferInfo
CreateFileMappingA
MapViewOfFile
GetSystemInfo
IsBadReadPtr
GetStdHandle
WriteFile
WaitForSingleObject
GetCurrentProcessId
SetEvent
CloseHandle
UnmapViewOfFile
OutputDebugStringA
GetVersion
GetModuleFileNameA
Sleep
GetTickCount
GetEnvironmentVariableA
GetCurrentProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
FreeLibrary
GetLastError
SetFilePointer
MulDiv
user32
SetCursor
FindWindowA
wsprintfA
DestroyWindow
UpdateWindow
CreateDialogIndirectParamA
SystemParametersInfoA
ScreenToClient
DispatchMessageA
TranslateMessage
TranslateAcceleratorA
TranslateMDISysAccel
GetClassInfoA
FillRect
DefWindowProcA
DefMDIChildProcA
ReleaseCapture
SetCapture
GetParent
WindowFromPoint
GetCursorPos
DrawTextA
GetClassLongA
PtInRect
GetWindowRect
GetWindow
IsWindow
EnumChildWindows
GetMessageA
LoadBitmapA
LoadAcceleratorsA
InsertMenuA
CreateMenu
DestroyMenu
GetSubMenu
WinHelpA
DialogBoxIndirectParamA
EndDialog
MessageBoxA
GetSystemMetrics
SetWindowPos
SetTimer
LoadCursorA
RegisterClassA
GetWindowLongA
SetWindowLongA
SetActiveWindow
SetFocus
InvalidateRect
LoadIconA
GetKeyState
IsIconic
ShowWindow
KillTimer
PostQuitMessage
SetWindowPlacement
CreateWindowExA
MoveWindow
SendMessageA
GetWindowPlacement
BeginPaint
GetClientRect
EndPaint
GetDesktopWindow
GetDC
ReleaseDC
gdi32
GetObjectA
CreateBrushIndirect
TextOutA
SetTextColor
DeleteDC
BitBlt
SetBkColor
CreateFontA
MoveToEx
LineTo
CreatePen
SelectObject
GetTextExtentPointA
DeleteObject
GetDeviceCaps
CreateFontIndirectA
CreateCompatibleDC
GetStockObject
advapi32
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
Sections
.text Size: 220KB - Virtual size: 219KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 24KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ