Static task
static1
Behavioral task
behavioral1
Sample
stress.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
stress.exe
Resource
win10v2004-20240221-en
General
-
Target
Stress - zip password is stress.zip
-
Size
525KB
-
MD5
3ccebf61ba17e09205be6302df661d4f
-
SHA1
11265e495fcafb326394efd110fba431f93afd6a
-
SHA256
96942e02b566d531d4c498369cd4d1059bea137c0a6a560142550133b8bb92b7
-
SHA512
fe5817493a18cf5d0ae07c798cfcc1c1fe54157769dd1f30afca874905f61b5bcca5126e4e5170d33d73afa7f95ce14a27a88d274dca35bb450eb7896c7052d6
-
SSDEEP
12288:CGCvi7hb+MEKbqu+tXzByqY/c7dvLVuenAAelvGxOdVfXV+WnSS0J:lCvit+WZKcqWc7l0MxOdV9+WXW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/stress.exe
Files
-
Stress - zip password is stress.zip.zip
Password: stress
-
stress.exe.exe windows:4 windows x86 arch:x86
Password: stress
224b1cfc518d183461722fd32e949ad3
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
GetLocalTime
GetProcAddress
GetUserDefaultLangID
GetCommandLineA
GetModuleFileNameA
GetVersionExA
GetVersion
ExitProcess
GetExitCodeProcess
GetACP
WaitForSingleObject
SetCurrentDirectoryA
CreateProcessA
CreateDirectoryA
SetConsoleTitleA
HeapAlloc
HeapCreate
HeapDestroy
HeapFree
HeapReAlloc
HeapSize
GetWindowsDirectoryA
FindResourceA
SizeofResource
GetDiskFreeSpaceA
GetFullPathNameA
FreeConsole
SetVolumeLabelA
SetEndOfFile
SetLocalTime
WritePrivateProfileStringA
RemoveDirectoryA
FindClose
GetVolumeInformationA
GetLogicalDrives
FindFirstFileA
CopyFileA
MoveFileA
FileTimeToSystemTime
LocalFileTimeToFileTime
SystemTimeToFileTime
FileTimeToLocalFileTime
GetDriveTypeA
FindNextFileA
GetPrivateProfileStringA
LoadResource
LockResource
LoadLibraryA
SetFilePointer
SetFileAttributesA
GetFileAttributesA
SetFileTime
GetFileSize
ReadFile
GetStdHandle
lstrlenW
CompareStringA
CloseHandle
GetCurrentDirectoryA
GetTempPathA
GetTempFileNameA
MultiByteToWideChar
VirtualAlloc
VirtualFree
DeleteFileA
AllocConsole
WideCharToMultiByte
CreateFileA
lstrlenA
WriteFile
RaiseException
user32
GetDC
GetCursorPos
PostQuitMessage
DefWindowProcA
ReleaseDC
MessageBoxA
EnableWindow
DestroyWindow
CharToOemBuffA
OemToCharBuffA
IsIconic
EndPaint
BeginPaint
FillRect
SetKeyboardState
GetKeyboardState
PeekMessageA
DispatchMessageA
TranslateMessage
GetMessageA
KillTimer
SetTimer
SetWindowPlacement
GetWindowPlacement
SetCursor
GetWindow
LoadIconA
ShowWindow
InvalidateRect
IsWindow
LoadCursorA
RegisterClassA
CreateWindowExA
SetWindowLongA
AdjustWindowRectEx
GetClassNameA
SystemParametersInfoA
SetWindowPos
SetForegroundWindow
GetForegroundWindow
GetSystemMetrics
LoadKeyboardLayoutA
GetDlgItem
SetWindowTextA
GetWindowTextLengthA
GetWindowTextA
CharLowerA
CharUpperA
CreateCursor
DestroyIcon
DestroyCursor
GetWindowLongA
SetFocus
ScreenToClient
GetKeyState
GetAsyncKeyState
ClientToScreen
MoveWindow
SendMessageA
IsZoomed
GetClientRect
ShowCursor
EndDialog
UpdateWindow
DialogBoxParamA
GetWindowRect
GetSysColor
gdi32
CreateSolidBrush
CreatePalette
SetBkColor
SetTextColor
StretchDIBits
SetStretchBltMode
RealizePalette
SelectPalette
CreateFontA
GetStockObject
DeleteDC
GetDIBits
TextOutA
GetTextExtentPoint32A
SelectObject
CreateCompatibleDC
CreateBitmap
BitBlt
CreateCompatibleBitmap
GetDeviceCaps
CreateDCA
CreateHatchBrush
EnumFontFamiliesA
DeleteObject
msacm32
acmFormatSuggest
acmStreamOpen
acmStreamSize
acmStreamPrepareHeader
acmStreamConvert
acmStreamUnprepareHeader
acmStreamClose
winmm
waveOutGetPosition
waveOutWrite
waveOutPrepareHeader
waveOutUnprepareHeader
waveOutReset
waveOutRestart
waveOutPause
joyGetDevCapsA
joyGetPos
waveOutClose
waveOutOpen
mciSendCommandA
comdlg32
GetSaveFileNameA
GetOpenFileNameA
comctl32
ord6
advapi32
RegCloseKey
RegQueryValueExA
RegOpenKeyExA
shell32
ExtractIconA
Sections
.text Size: 184KB - Virtual size: 182KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.petprg Size: 1020KB - Virtual size: 1020KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ