Static task
static1
Behavioral task
behavioral1
Sample
goog1e_meccanica_evoluzione.exe
Resource
win10v2004-20231222-en
General
-
Target
goog1e_meccanica_evoluzione.exe
-
Size
664KB
-
MD5
31488136df835f7e4db602866edca4ce
-
SHA1
eb8747c8ac2cf2e15f4f3dd5ab2a574cf4812a3b
-
SHA256
a32eac46006b095ddefcef4eb2f680d48c43dece22fc0a5d80dd816be45abcf4
-
SHA512
c2493bcc037b7f70678dbecdd10a5f81ad0d18e13981a69404366e46bfd1a830e1ab53dd28d5efdb99da82e909b39b34ca892b7c5a15237ff17a8a46415556e2
-
SSDEEP
12288:Qia4CX5LAQa9QGC0CZVxtqNNe6Pb2FQInmqqMW6fX/jUK0Z:SXu0yOkb23LXbU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource goog1e_meccanica_evoluzione.exe
Files
-
goog1e_meccanica_evoluzione.exe.exe windows:4 windows x86 arch:x86
2cb0594c631cb69d157301feab20823c
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ImageList_Create
DestroyPropertySheetPage
ImageList_ReplaceIcon
ord6
ord17
InitCommonControlsEx
CreateToolbarEx
CreatePropertySheetPageA
ImageList_AddMasked
ImageList_Draw
CreatePropertySheetPageW
ImageList_Destroy
PropertySheetA
kernel32
GetHandleInformation
GlobalAlloc
GlobalReAlloc
FileTimeToLocalFileTime
GlobalLock
GetConsoleCP
lstrcmpW
CloseHandle
CreateEventW
GetSystemTimeAsFileTime
lstrcmpA
GlobalFree
LocalFree
GetTempPathA
MapViewOfFile
InterlockedIncrement
IsBadReadPtr
SetFilePointer
CopyFileA
ExitThread
FreeLibrary
GetThreadLocale
GetStringTypeA
CreateProcessA
GetTempFileNameA
GetModuleFileNameA
ResetEvent
LCMapStringA
IsBadWritePtr
FindResourceW
ReleaseMutex
LeaveCriticalSection
CreateDirectoryW
HeapSize
GetShortPathNameA
GetVersionExW
HeapDestroy
GetModuleHandleW
SetEvent
FindResourceExW
GetCPInfo
GetLocalTime
CreateMutexA
CreateFileW
IsValidCodePage
GetCurrentThreadId
GetStartupInfoW
UnmapViewOfFile
HeapAlloc
GetStdHandle
GetLocaleInfoA
HeapFree
CompareStringW
SetStdHandle
WriteConsoleW
VirtualFree
SearchPathW
SearchPathA
CompareStringA
InterlockedCompareExchange
CreateMutexW
FindResourceA
GetFileTime
GetVersionExA
InitializeCriticalSection
QueryPerformanceCounter
GetModuleFileNameW
DeleteCriticalSection
GetModuleHandleA
SetEnvironmentVariableA
GetTempPathW
ExitProcess
lstrcatA
LCMapStringW
LocalAlloc
SetEndOfFile
GetStartupInfoA
SetHandleCount
HeapCreate
GetCurrentProcessId
WideCharToMultiByte
ReadFile
GetThreadTimes
VirtualQuery
InterlockedExchange
CopyFileW
VirtualAlloc
GetStringTypeW
SetPriorityClass
SystemTimeToFileTime
GetTickCount
WaitForSingleObject
CreateProcessW
GetSystemTime
WriteFile
RaiseException
GetLastError
GetCurrentThread
GetTimeFormatA
GetVersion
GetConsoleMode
IsValidLocale
GetShortPathNameW
GetTempFileNameW
GetCurrentDirectoryW
WriteConsoleA
GlobalHandle
FormatMessageA
SizeofResource
CreateEventA
GlobalUnlock
LoadLibraryA
CreateDirectoryA
LoadLibraryExW
Sleep
GetProcessHeap
LoadResource
ExpandEnvironmentStringsA
HeapReAlloc
LockResource
SuspendThread
GetFileType
CreateFileMappingW
SetCurrentDirectoryA
GetCurrentDirectoryA
IsBadStringPtrW
CreateFileMappingA
CreateFileA
CreateThread
SetErrorMode
SetThreadPriority
GetFileSize
EnumSystemLocalesA
GetSystemInfo
SetLastError
LoadLibraryW
ResumeThread
SetCurrentDirectoryW
InterlockedDecrement
GetACP
GetLocaleInfoW
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
RtlUnwind
MultiByteToWideChar
FlushFileBuffers
GetOEMCP
GetProcAddress
Sections
.text Size: 120KB - Virtual size: 116KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 532KB - Virtual size: 536KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE