Static task
static1
Behavioral task
behavioral1
Sample
155绿色软件站.url
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
155绿色软件站.url
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
Core2MaxPerf.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
Core2MaxPerf.exe
Resource
win10v2004-20231222-en
General
-
Target
7c629234749cad41785e56d937f58de7
-
Size
104KB
-
MD5
7c629234749cad41785e56d937f58de7
-
SHA1
66e8aec8f53455b8c8b3290b531ceb9cf3056897
-
SHA256
933abbdc3c44e7e404d8d6d1a69ac81022545671dab4302fef153ca6cef2266b
-
SHA512
a2bddc7d82452b543afa2d59c60b77c654b99586f3399a089b1450f1e70732050a667f0b337f03953ff2a70d30a35df78b2fe2fa67d0f251ceed15cd9b2ffb52
-
SSDEEP
3072:ckKAJPXk6hs4suY+sDJQHNSvh70+KgFsyK1YpWuUZ:ckKA1XtbtYdCHNAh4+KgFsHV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Core2MaxPerf.exe
Files
-
7c629234749cad41785e56d937f58de7.rar
-
155绿色软件站.url.url
-
Core2MaxPerf.exe.exe windows:4 windows x86 arch:x86
6ec8eab2a371eb7787a49273ae48f72f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_REMOVABLE_RUN_FROM_SWAP
IMAGE_FILE_NET_RUN_FROM_SWAP
Imports
kernel32
GetConsoleScreenBufferInfo
SetConsoleWindowInfo
SetConsoleScreenBufferSize
GetLargestConsoleWindowSize
Beep
GetSystemDefaultLangID
GetUserDefaultLangID
ExitProcess
GetEnvironmentStrings
GetStartupInfoA
GetCommandLineA
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
VirtualAlloc
VirtualFree
HeapAlloc
GetProcessHeap
HeapFree
HeapSize
InterlockedIncrement
GetCurrentThreadId
TerminateThread
SetPriorityClass
OpenProcess
ResumeThread
CreateThread
GetFullPathNameA
FileTimeToSystemTime
FileTimeToLocalFileTime
GetCurrentDirectoryA
SetCurrentDirectoryA
GetFileAttributesA
SetFileAttributesA
CreateFileA
ReadFile
FindClose
FindFirstFileA
MoveFileA
SetFilePointer
SetLastError
GetFileSize
SetEndOfFile
DeleteFileA
GetExitCodeProcess
CreateProcessA
FreeEnvironmentStringsA
GetSystemDirectoryA
GetWindowsDirectoryA
GetTempPathA
GetTempFileNameA
SetConsoleTitleA
GetConsoleTitleA
ReadConsoleInputA
PeekConsoleInputA
GetSystemTime
GetLocalTime
GetTimeZoneInformation
FindNextFileA
ExpandEnvironmentStringsA
MulDiv
CreateFileMappingA
MapViewOfFile
GetSystemInfo
IsBadReadPtr
GetStdHandle
WriteFile
GetLastError
WaitForSingleObject
GetCurrentProcessId
CloseHandle
UnmapViewOfFile
OutputDebugStringA
GetVersion
GetModuleFileNameA
Sleep
GetTickCount
GetEnvironmentVariableA
GetCurrentProcess
GetModuleHandleA
LoadLibraryA
GetProcAddress
DeviceIoControl
FreeLibrary
user32
ShowWindow
DestroyWindow
GetDesktopWindow
CreateDialogIndirectParamA
SystemParametersInfoA
FindWindowA
DialogBoxIndirectParamA
GetWindowLongA
EndDialog
GetDC
ReleaseDC
CreateWindowExA
SendMessageA
SetWindowLongA
GetWindowPlacement
SetWindowPos
MessageBoxA
MoveWindow
GetSystemMetrics
GetKeyState
SetTimer
KillTimer
SetFocus
LoadCursorA
SetCursor
wsprintfA
gdi32
GetDeviceCaps
SelectObject
GetStockObject
CreateFontIndirectA
GetTextExtentPointA
advapi32
RegOpenKeyExA
RegCloseKey
RegQueryValueExA
Sections
.text Size: 196KB - Virtual size: 194KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.CRT Size: 4KB - Virtual size: 4B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ