Static task
static1
Behavioral task
behavioral1
Sample
meow.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
meow.exe
Resource
win10v2004-20231215-en
General
-
Target
meow.exe
-
Size
913KB
-
MD5
e9f6b7fa4d06910170758eb2181f5993
-
SHA1
00705e26f9f3fe718c37cbb0129b4d20cf46509c
-
SHA256
5a3992caad42cac48f371dc6157db86e7fd2ea49fe67fe97cede35025b4dcc67
-
SHA512
41ddc8cec241b3341bb02418fab9d89ded9eab06a67f4d497e89264760411e2a70aeb36c41c26c0aca72cd31d5a4ecf70343ffd6c8661e3cbf0f559395faaa10
-
SSDEEP
12288:Oxav1AVHL4i+u35DWVEogz69eUvkR8sgLLyTzvXrkveB1lvctx0OjQgoyCnramAR:Oav1AVvKVNj9eUvknfvnvcD0Ojl7Cnu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource meow.exe
Files
-
meow.exe.exe windows:6 windows x64 arch:x64
48ea5580192fd1f09633f4bedc115042
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
QueryPerformanceCounter
SetPriorityClass
GetCurrentProcess
Sleep
CreateThread
Beep
SetEndOfFile
HeapSize
CreateFileW
HeapReAlloc
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
FindClose
CreateDirectoryW
GetFileAttributesExW
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
OutputDebugStringW
GetFileSizeEx
GetConsoleOutputCP
VerifyVersionInfoW
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
HeapFree
HeapAlloc
ReadConsoleW
GetConsoleMode
SetFilePointerEx
WriteFile
ExitProcess
WriteConsoleW
GetModuleHandleExW
GetModuleFileNameW
GetFileType
GetStdHandle
ReadFile
LoadLibraryExW
FreeLibrary
TlsFree
VerSetConditionMask
GetProcAddress
QueryPerformanceFrequency
LoadLibraryA
GetModuleHandleA
GlobalUnlock
WideCharToMultiByte
GlobalLock
TlsSetValue
TlsGetValue
TlsAlloc
SetLastError
GetLastError
GlobalFree
GlobalAlloc
FlushFileBuffers
MultiByteToWideChar
RaiseException
RtlPcToFileHeader
RtlUnwindEx
GetCPInfo
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
RtlUnwind
user32
EmptyClipboard
GetClipboardData
SetClipboardData
CloseClipboard
DispatchMessageA
keybd_event
GetSystemMetrics
GetAsyncKeyState
GetCursorInfo
GetWindowTextA
MessageBoxA
TranslateMessage
SendMessageA
mouse_event
PeekMessageA
PostQuitMessage
FindWindowA
GetWindowLongW
AdjustWindowRectEx
GetKeyState
LoadCursorA
DestroyWindow
GetDC
SetWindowPos
MonitorFromWindow
EnumDisplayMonitors
WindowFromPoint
SetWindowTextW
ScreenToClient
ShowWindow
GetCapture
SetWindowLongA
ClientToScreen
IsChild
GetMonitorInfoA
GetForegroundWindow
DefWindowProcA
CreateWindowExA
SetLayeredWindowAttributes
SetFocus
BringWindowToTop
SetCapture
SetCursor
SetWindowLongW
GetClientRect
UnregisterClassA
RegisterClassExA
ReleaseCapture
SetForegroundWindow
IsIconic
SetCursorPos
ReleaseDC
GetCursorPos
OpenClipboard
gdi32
GetDeviceCaps
advapi32
RegOpenKeyExA
GetUserNameA
RegQueryValueExA
RegCloseKey
RegDeleteKeyA
shell32
ShellExecuteA
xinput1_3
ord4
ord2
imm32
ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow
d3d9
Direct3DCreate9
shlwapi
SHDeleteValueW
magnification
MagSetFullscreenTransform
MagSetFullscreenColorEffect
Sections
.text Size: 712KB - Virtual size: 711KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 169KB - Virtual size: 168KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ