SilkwareApex.zip
- SHA256 81cee3587cda1ff019af2d3a7a5baf8dabcdbec36dc9e32033bb578b0c648040
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
SilkwareApex.zip
Resource
win10-20240221-en
windows10-1703-x64
0 signatures
600 seconds
Behavioral task
behavioral2
Sample
SilkwareApex.zip
Resource
win10v2004-20240226-en
windows10-2004-x64
0 signatures
600 seconds
Behavioral task
behavioral3
Sample
SilkwareApex/Xenos64.exe
Resource
win10-20240221-en
windows10-1703-x64
8 signatures
600 seconds
Behavioral task
behavioral4
Sample
SilkwareApex/Xenos64.exe
Resource
win10v2004-20240226-en
windows10-2004-x64
7 signatures
600 seconds
Behavioral task
behavioral5
Sample
SilkwareApex/silkware.v3.dll
Resource
win10-20240221-en
windows10-1703-x64
5 signatures
600 seconds
Behavioral task
behavioral6
Sample
SilkwareApex/silkware.v3.dll
Resource
win10v2004-20240226-en
windows10-2004-x64
4 signatures
600 seconds
General
- Target SilkwareApex.zip
- Size 6.8MB
- Sample240304-qhtxnacb99
- SHA256 81cee3587cda1ff019af2d3a7a5baf8dabcdbec36dc9e32033bb578b0c648040
- MD5 672b3024c648fcd0d0147048b21c78d3
- SHA1 c8ecb017a0ad3e8cfe11b995874385164115e281
- SHA512 37677c5804ceaac09cc4942a90dc5accfdcfc3ad4ac631b745223b0162719a26ad7f596199b7a2f93f1fdd7c717ad431f5f52a0b4aa7fb6ffe99741de3ef12b4
- SSDEEP 98304:BfH3ZvnKaZ6N1h5THuBRY3gbqLIpP4V3+SdqR6/SAsSM:5p/KaMOBigb8IuV3+SdqR6dsP
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/SilkwareApex/Xenos64.exe unpack001/SilkwareApex/silkware.v3.dll
File Explorer
-
SilkwareApex.zip.zip 6.8MB
-
SilkwareApex/Xenos64.exe.exe 1.6MB
-
SilkwareApex/silkware.v3.dll.dll 5.3MB
SilkwareApex/Xenos64.exe
- IMPHASH 9222d372923baed7aa9dfa28449a94ea
- SHA256 1506ffb2ebd0b2ebf87875da6f93535c80119202a536a9bff0f3d4635068c61e
- MD5 91e92810b13cef03ea8fe2d30b51272c
- SHA1 3f3f74b2ce54bacd3c5a3e53515b8da4b5ddf533
- SHA512 15d71040db02a8e1459af2de87971df5ec7d16fb6a59b7510970e16a548b7548699ec3e376ab0a4231b0ab757e0d522b27fbe4625336b4e59bc3d553e2ea90c8
- SSDEEP 49152:h+SBsvPTMlLqR6N4waDWSVE3tMx3FE1S0WTS:h+SdqR6/SAsS
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
1
Major OS version
5
Entry point
12872
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Users\DarkCoderSc\Desktop\Celesty Binder\Stub\STATIC\Stub.pdb
kernel32
CreateFileA
FindResourceA
FreeLibrary
LoadResource
WriteFile
SizeofResource
GetProcAddress
LoadLibraryA
LockResource
EnumResourceNamesA
CloseHandle
FreeResource
GetWindowsDirectoryA
OutputDebugStringA
GetTempPathA
GetModuleHandleW
ExitProcess
DecodePointer
EncodePointer
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RaiseException
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapAlloc
GetLastError
HeapFree
IsProcessorFeaturePresent
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
GetStdHandle
GetModuleFileNameW
Sleep
HeapSize
GetModuleFileNameA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
HeapCreate
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapReAlloc
LCMapStringW
MultiByteToWideChar
GetStringTypeW
shell32
ShellExecuteA
SHGetSpecialFolderPathA
Name
.text
Size
30KB
Virtual Size
30KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
12KB
Virtual Size
12KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
3KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.rsrc
Size
1.5MB
Virtual Size
1.5MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
5KB
Virtual Size
4KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=16, id=158, productName=VS2010 build 30319, version=30319,
count=68, id=170, productName=VS2010 build 30319, version=30319,
count=29, id=171, productName=VS2010 build 30319, version=30319,
count=5, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=84, id=1, productName=Unmarked objects,
count=3, id=175, version=30319,
count=1, id=157, productName=VS2010 build 30319, version=30319,
SilkwareApex/silkware.v3.dll
- IMPHASH 36a0a42912c32856902ed2b8987bf4da
- SHA256 c8fe3fda54ec6fa4a36fe76d4f3ec8e6f2b8bb88b7faa822e87e16a76b91e107
- MD5 7736b89a2eca2da1ffd335c6e406e4bd
- SHA1 d13640f406c47d66c48ee332032f9e8360f0c8fd
- SHA512 07d8f3edb097ab1154e7dd31d632b497c3a63c0195a054771690767b9acd78ed5d0cea6e3d4403e9ba13566672e6d31413c2e140fa6118fb2c2f02028a57b00d
- SSDEEP 49152:7f0emfcZUAoAbnsHX0zQaNX0A2OA1h5THdau+5ppzJRYs2j4MkbGIHqpp80GpPrO:7fH3ZvnKaZ6N1h5THuBRY3gbqLIpP4V
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
6
Entry point
4941
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_CUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB paths
d3d11
D3D11CreateDeviceAndSwapChain
kernel32
GetProcAddress
Sleep
CreateThread
OpenProcess
ReadProcessMemory
WriteProcessMemory
CreateToolhelp32Snapshot
Process32FirstW
Process32NextW
Module32FirstW
Module32NextW
GetTempPathW
AllocConsole
GlobalAlloc
GlobalUnlock
GlobalLock
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
VerSetConditionMask
QueryPerformanceCounter
QueryPerformanceFrequency
VerifyVersionInfoW
GetLastError
GetStdHandle
SetConsoleTextAttribute
SetConsoleTitleA
SetCurrentConsoleFontEx
GetConsoleWindow
LoadLibraryA
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetModuleHandleA
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
HeapReAlloc
SetConsoleCtrlHandler
GetTimeZoneInformation
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
ReadConsoleW
GetFileSizeEx
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
GetFileType
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
HeapAlloc
HeapFree
GetCurrentThread
GetModuleFileNameW
VirtualFree
VirtualAlloc
GetCurrentThreadId
GetCurrentProcessId
ExitProcess
ReadFile
DeviceIoControl
CloseHandle
CreateFileW
GetProcessHeap
SetStdHandle
HeapSize
GetModuleHandleExW
FreeLibraryAndExitThread
ResumeThread
WriteConsoleW
OutputDebugStringW
GetCommandLineW
GetFileAttributesExW
ExitThread
DeleteFileW
LoadLibraryExW
FreeLibrary
TlsFree
FormatMessageA
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
TryEnterCriticalSection
DeleteCriticalSection
WaitForSingleObjectEx
SwitchToThread
GetExitCodeThread
GetNativeSystemInfo
LocalFree
SetCurrentDirectoryW
GetCurrentDirectoryW
CreateDirectoryW
FindClose
FindFirstFileExW
FindNextFileW
GetDiskFreeSpaceExW
GetFileAttributesW
RtlUnwind
GetFileInformationByHandle
GetFinalPathNameByHandleW
GetFullPathNameW
SetEndOfFile
SetFileAttributesW
SetFileInformationByHandle
SetFilePointerEx
SetFileTime
AreFileApisANSI
CreateDirectoryExW
CopyFileW
MoveFileExW
CreateHardLinkW
GetFileInformationByHandleEx
CreateSymbolicLinkW
EncodePointer
DecodePointer
LCMapStringEx
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
InitOnceExecuteOnce
InitializeConditionVariable
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableCS
SleepConditionVariableSRW
CreateEventExW
CreateSemaphoreExW
FlushProcessWriteBuffers
GetCurrentProcessorNumber
GetSystemTimeAsFileTime
GetTickCount64
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
GetModuleHandleW
GetLocaleInfoEx
GetStringTypeW
CompareStringEx
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
RtlPcToFileHeader
RaiseException
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
user32
EmptyClipboard
OpenClipboard
CloseClipboard
SetClipboardData
GetKeyState
GetAsyncKeyState
LoadCursorA
ToAscii
GetWindowRect
MoveWindow
LoadIconA
UpdateWindow
GetSystemMetrics
SetLayeredWindowAttributes
ShowWindow
CreateWindowExW
RegisterClassExW
PostQuitMessage
DefWindowProcA
MapVirtualKeyW
GetKeyNameTextA
GetCapture
ScreenToClient
ClientToScreen
GetCursorPos
SetCursor
SetCursorPos
GetClientRect
ReleaseCapture
SetCapture
GetClipboardData
gdi32
DeleteObject
CreateRectRgn
CreateSolidBrush
shell32
SHGetFolderPathA
advapi32
RegDeleteKeyW
RegCreateKeyW
RegOpenKeyW
RegSetKeyValueW
RegCloseKey
ntdll
RtlInitUnicodeString
NtQuerySystemInformation
imm32
ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext
dwmapi
DwmGetColorizationColor
DwmEnableBlurBehindWindow
DwmIsCompositionEnabled
DwmExtendFrameIntoClientArea
Name
.text
Size
1.8MB
Virtual Size
1.8MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
289KB
Virtual Size
288KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
51KB
Virtual Size
89KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
88KB
Virtual Size
88KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.idata
Size
12KB
Virtual Size
11KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.tls
Size
1024B
Virtual Size
777B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.00cfg
Size
512B
Virtual Size
337B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
_RDATA
Size
1024B
Virtual Size
546B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.Nl'
Size
3.0MB
Virtual Size
3.0MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.reloc
Size
4KB
Virtual Size
3KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
512B
Virtual Size
494B
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ