Static task
static1
Behavioral task
behavioral1
Sample
Project 1.0.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
Project 1.0.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
Project 1.0.exe
Resource
win7-20231215-en
Behavioral task
behavioral4
Sample
Project 1.0.exe
Resource
win10v2004-20231215-en
General
-
Target
95c470015f10243d7986940bde2188c1
-
Size
79KB
-
MD5
95c470015f10243d7986940bde2188c1
-
SHA1
bd33b1ded46517b1723f391c09d7a9638f5b780c
-
SHA256
e4fb7c33e04c0624242cf0de974c6606a55c844903e4c036cf864a64817910f6
-
SHA512
034f2f3733cd7d84d7f86fe12fbd3a7014a39193a9eb0a5e8e039e70cb0d11acb2263a77150e09e8c23a15b8ef18ebb95824e81de043314f94d2d2e502fcba11
-
SSDEEP
1536:Ix64fAny4NMciaRCPi6ByrtW+5ZjkahvufUoJ/MSi9ywRD++R5:y6hyuiDi1rtW+BucOvi9Ho+R5
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/Project 1.0.dll unpack001/Project 1.0.exe
Files
-
95c470015f10243d7986940bde2188c1.rar
-
Project 1.0.dll.dll windows:4 windows x86 arch:x86
e0aa01b30dd2e31e6689d75b3c04258d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
WriteProcessMemory
VirtualProtectEx
ReadProcessMemory
GetModuleHandleA
Sleep
WritePrivateProfileStringA
GetPrivateProfileIntA
GetTickCount
GetCurrentProcess
IsBadReadPtr
FreeLibrary
FlushInstructionCache
VirtualProtect
SetEnvironmentVariableA
CompareStringW
CompareStringA
GetTimeFormatA
DisableThreadLibraryCalls
SetEndOfFile
LCMapStringW
LCMapStringA
EnterCriticalSection
InitializeCriticalSection
InterlockedExchange
DeleteCriticalSection
LeaveCriticalSection
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
RtlUnwind
GetTimeZoneInformation
GetSystemTime
GetLocalTime
GetCommandLineA
GetVersion
HeapFree
RaiseException
ExitProcess
HeapAlloc
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
GetLastError
GetProcAddress
TerminateProcess
HeapReAlloc
HeapSize
CloseHandle
WideCharToMultiByte
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
WriteFile
VirtualAlloc
IsBadWritePtr
SetFilePointer
FlushFileBuffers
SetUnhandledExceptionFilter
GetCPInfo
IsBadCodePtr
SetStdHandle
CreateFileA
GetACP
GetOEMCP
LoadLibraryA
ReadFile
GetStringTypeA
GetStringTypeW
user32
GetAsyncKeyState
wsprintfA
GetDC
GetClientRect
GetForegroundWindow
gdi32
GetPixel
d3dx9_39
D3DXCreateFontIndirectA
D3DXCreateLine
D3DXCreateTextureFromFileInMemory
Sections
.text Size: 112KB - Virtual size: 111KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 16KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 12KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
Project 1.0.exe.exe windows:4 windows x86 arch:x86
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Sections
Size: - Virtual size: 44KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Size: 19KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
-
Project 1.0.ini
-
Read Me.txt