Static task
static1
General
-
Target
SMM_WE.exe
-
Size
62.2MB
-
MD5
1efe3f70ae005bb89407552749007971
-
SHA1
0bf45c2db01140540eb23661b8fd89a50c4ccb9f
-
SHA256
dc91ed2e6d71b83453d2be4b64a42d629173718629a24350261f6998c07575a2
-
SHA512
29e8342cc5663a4b1d93165db78e6a24a396269d92cc97af190e80625220dbe51e9bbcbe91509331a524a5e4e1b77aaf9f9e5d61442284665ceee0c34ad91b12
-
SSDEEP
1572864:6i2N2A73xbuRqcXOKVpd0twGONYt+PzklC/ZLN:y2AFbuRrOSpu154PYlC/R
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SMM_WE.exe
Files
-
SMM_WE.exe.exe windows:5 windows x86 arch:x86
2a380984738e7745692144a27d9e7e99
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
wininet
InternetConnectA
HttpOpenRequestA
HttpSendRequestA
InternetCanonicalizeUrlA
InternetCrackUrlA
InternetOpenA
HttpQueryInfoA
InternetReadFile
InternetCloseHandle
InternetGetConnectedState
d3dx9_43
D3DXGetPixelShaderProfile
D3DXGetImageInfoFromFileInMemory
D3DXCreateTextureFromFileInMemoryEx
D3DXCreateTextureFromFileW
D3DXGetVertexShaderProfile
D3DXCompileShader
dbghelp
SymFromAddr
SymInitialize
winmm
joyGetPos
joyGetDevCapsA
joyGetPosEx
mciSendStringA
mciGetErrorStringA
ws2_32
ntohs
htonl
htons
getpeername
__WSAFDIsSet
select
freeaddrinfo
WSAGetLastError
closesocket
sendto
connect
inet_addr
shutdown
WSAStartup
getsockopt
setsockopt
ioctlsocket
socket
bind
getaddrinfo
send
recvfrom
inet_ntoa
recv
accept
listen
gdiplus
GdiplusStartup
GdiplusShutdown
comctl32
InitCommonControlsEx
kernel32
GetTempPathA
FindFirstFileExW
HeapWalk
HeapValidate
SetFileAttributesW
GetFileAttributesExW
ReadFile
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetTimeZoneInformation
FindFirstFileExA
LoadLibraryExA
GetDriveTypeW
SetEnvironmentVariableW
SetEnvironmentVariableA
GetFileInformationByHandle
PeekNamedPipe
ReadConsoleW
SetFilePointer
MoveFileExW
FindNextFileA
FileTimeToLocalFileTime
lstrlenA
GlobalAlloc
GlobalLock
GlobalUnlock
SetPriorityClass
GetCurrentDirectoryA
SetCurrentDirectoryA
SetThreadPriority
TlsSetValue
TlsAlloc
CreateWaitableTimerW
SetWaitableTimer
WaitForSingleObject
QueryPerformanceFrequency
GetTickCount
GetConsoleWindow
CreateDirectoryW
GetFileAttributesW
FindFirstFileW
RemoveDirectoryW
FindNextFileW
FindClose
SetEndOfFile
GlobalMemoryStatusEx
EncodePointer
DecodePointer
GetCommandLineA
GetLastError
HeapFree
InterlockedDecrement
ExitProcess
GetModuleHandleExW
GetProcAddress
AreFileApisANSI
MultiByteToWideChar
HeapSize
Sleep
IsProcessorFeaturePresent
SetLastError
InterlockedIncrement
GetCurrentThread
GetCurrentThreadId
GetStdHandle
WriteFile
GetModuleFileNameW
GetProcessHeap
GetFileType
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
InitOnceExecuteOnce
GetStartupInfoW
GetModuleFileNameA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTickCount64
GetEnvironmentStringsW
FreeEnvironmentStringsW
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
GetCurrentProcess
TerminateProcess
GetModuleHandleW
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
InterlockedExchange
FreeLibrary
LoadLibraryExW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapAlloc
HeapReAlloc
RtlUnwind
OutputDebugStringW
LoadLibraryW
GetTimeFormatEx
GetDateFormatEx
CompareStringEx
GetLocaleInfoEx
GetUserDefaultLocaleName
LCMapStringEx
IsValidLocaleName
EnumSystemLocalesEx
GetStringTypeW
RaiseException
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetStdHandle
SetFilePointerEx
WriteConsoleW
CloseHandle
CreateFileW
ExpandEnvironmentStringsW
MoveFileA
GetFullPathNameW
SetErrorMode
GetCommandLineW
GetCurrentProcessId
RtlCaptureStackBackTrace
GetEnvironmentVariableW
GetVersionExW
GetUserDefaultLCID
GetLocaleInfoW
GetSystemInfo
GetCurrentDirectoryW
LocalFree
FormatMessageW
CreateThread
GetExitCodeThread
DeleteFileW
GetExitCodeProcess
CreateProcessW
user32
DialogBoxParamW
GetDlgItem
DrawTextW
ScreenToClient
keybd_event
EndDialog
GetDlgItemTextW
SetDlgItemTextW
MapWindowPoints
GetMonitorInfoW
GetAsyncKeyState
SetDlgItemTextA
EnumDisplayDevicesA
GetRawInputDeviceInfoA
GetRawInputDeviceList
CreateDialogParamW
MoveWindow
MessageBoxA
PostMessageW
IsDialogMessageW
DispatchMessageW
TranslateMessage
PeekMessageW
SetFocus
ReleaseDC
GetDC
MessageBoxW
wsprintfW
GetSystemMetrics
EnumDisplaySettingsW
ChangeDisplaySettingsW
GetCursorPos
SetCursorPos
SetWindowPos
AdjustWindowRectEx
GetWindowRect
SendMessageW
SetWindowLongW
ShowWindow
UpdateWindow
GetClientRect
EnumDisplaySettingsExW
GetKeyState
SetCapture
ReleaseCapture
DefWindowProcW
SetCursor
CreateWindowExW
RegisterClassExW
LoadCursorW
LoadImageW
SetForegroundWindow
BringWindowToTop
DestroyWindow
GetActiveWindow
SetWindowTextA
IsClipboardFormatAvailable
CloseClipboard
GetClipboardData
OpenClipboard
SetClipboardData
EmptyClipboard
GetFocus
SetWindowTextW
ClientToScreen
GetForegroundWindow
gdi32
GetDeviceCaps
SelectObject
comdlg32
GetOpenFileNameW
GetSaveFileNameW
advapi32
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
shell32
SHGetFolderPathW
ShellExecuteW
ole32
CoUninitialize
CoCreateInstance
CoInitialize
oleaut32
SysAllocString
SysFreeString
VariantClear
version
GetFileVersionInfoW
GetFileVersionInfoSizeW
VerQueryValueW
Sections
.text Size: 17.3MB - Virtual size: 17.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 42.9MB - Virtual size: 45.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.mydata Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 780KB - Virtual size: 780KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ