be2ae6d2ada3e1325e4408af2912cbc4

Sharing

Copy URL Twitter E-mail

General

Target

be2ae6d2ada3e1325e4408af2912cbc4
Size

742KB
MD5

be2ae6d2ada3e1325e4408af2912cbc4
SHA1

d4cb955f0231bd71ea32458706399f9953cf4935
SHA256

e3b24702d5ad6974b49fddd0e1a099877812231b24ca2457c37f017f80da9c17
SHA512

68d4729299c8518a548f0b84826e11878b6ff195935cd474460d07c3336cabffad0d215b49480b4270b5da27c3a836dca393d1eeedab561265f5a60e519af704
SSDEEP

12288:+0OpXIw9kYjE89kk0EhJ4/ybBnpOBkHudDR+t/CbhVEAMSOSdhyatLsaHII2Ymfw:+FeekME89D02J4AnpOBkTh+z9MrwyalN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/SkyProg_DEMO.exe

Files

be2ae6d2ada3e1325e4408af2912cbc4
.zip
SkyProg_DEMO.exe
.exe windows:4 windows x86 arch:x86

709a082f6f7b74a8398db1e8e5c980de

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

memset
strcspn
strncat
malloc
free
strncpy
memmove
_strnicmp
strncmp
_strdup
atof
strlen
strcpy
strcat
strstr
memcpy
strcmp
memcmp
_stricmp
tolower
fread
_setjmp3
longjmp
fseek
ftell
sprintf
localtime
mktime
gmtime
atan2
fmod
fabs
ceil
floor
fclose
_snprintf
abort
_CIpow
__p__iob
fprintf
strtod
exit
getenv
sscanf
sin
cos
printf
abs

kernel32

GetModuleHandleA
HeapCreate
HeapDestroy
ExitProcess
CreateFileA
SetupComm
GetCommState
BuildCommDCBA
SetCommState
SetCommTimeouts
CloseHandle
WriteFile
ReadFile
ClearCommError
EscapeCommFunction
GetCommModemStatus
HeapFree
HeapAlloc
HeapReAlloc
GetProcessHeap
GetVersionExA
GetUserDefaultLCID
QueryPerformanceFrequency
QueryPerformanceCounter
GetCurrentThreadId
GetCurrentProcessId
InitializeCriticalSection
GetCurrentProcess
DuplicateHandle
CreatePipe
GetStdHandle
CreateProcessA
WaitForSingleObject
EnterCriticalSection
LeaveCriticalSection
PeekNamedPipe
GetExitCodeProcess
GetModuleFileNameA
SetFilePointer
SetEndOfFile
GetFileSize
GetTickCount
Sleep
HeapSize
WideCharToMultiByte
MultiByteToWideChar
FreeLibrary
LoadLibraryA
GetProcAddress
IsBadReadPtr
MulDiv
GetCurrentDirectoryA
GetDriveTypeA
FindFirstFileA
FindClose
GetFileAttributesA
SetCurrentDirectoryA
CreateDirectoryA
GetTempPathA
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
GlobalFree
SetLastError
GetLocalTime
TlsAlloc
TlsSetValue

comctl32

InitCommonControls
ImageList_SetBkColor
InitCommonControlsEx
ImageList_Destroy
ImageList_GetIcon
ImageList_ReplaceIcon
CreateStatusWindowA
ImageList_Remove
ImageList_AddMasked
ImageList_Create
ImageList_Add

user32

GetSysColor
LoadCursorA
ActivateKeyboardLayout
GetWindowLongA
SetWindowLongA
IsWindowVisible
ClientToScreen
SendMessageA
SetCursor
AnimateWindow
GetParent
PostMessageA
CallWindowProcA
GetCursor
SetLayeredWindowAttributes
FillRect
SetClassLongA
GetWindow
RedrawWindow
GetSysColorBrush
GetClassNameA
IsWindow
DrawTextA
GetDlgCtrlID
InvalidateRect
GetClientRect
IsWindowEnabled
DestroyWindow
CreateWindowExA
ShowWindow
DestroyIcon
SetParent
SetWindowPos
GetSystemMenu
GetMenuItemCount
GetMenuItemID
GetMenuItemInfoA
SetMenuItemInfoA
CharUpperA
GetPropA
RemovePropA
GetIconInfo
DrawStateA
SetPropA
IsZoomed
MoveWindow
MessageBoxA
GetWindowThreadProcessId
GetForegroundWindow
EnableWindow
EnumWindows
SetMenu
DestroyMenu
GetMenu
CreateMenu
AppendMenuA
EnableMenuItem
CreatePopupMenu
ModifyMenuA
SetForegroundWindow
TrackPopupMenu
GetActiveWindow
WinHelpA
GetDC
DrawFocusRect
ReleaseDC
ScreenToClient
UpdateWindow
GetFocus
FrameRect
GetWindowRect
ValidateRect
DefWindowProcA
RegisterClassExA
MapWindowPoints
ReleaseCapture
BeginPaint
EndPaint
SetCapture
GetSystemMetrics
SetWindowTextA
GetWindowTextLengthA
GetWindowTextA
SetFocus
GetUpdateRect
IntersectRect
GetCapture
EnumPropsExA
SetActiveWindow
UnregisterClassA
DestroyAcceleratorTable
LoadIconA
RegisterClassA
AdjustWindowRectEx
CreateAcceleratorTableA
SetTimer
PeekMessageA
MsgWaitForMultipleObjects
GetMessageA
TranslateAcceleratorA
TranslateMessage
DispatchMessageA
IsIconic
GetCursorPos
EnumChildWindows
DefFrameProcA
SetCursorPos
LoadImageA
SystemParametersInfoA
GetKeyState
IsChild
OpenClipboard
EmptyClipboard
CloseClipboard
SetClipboardData
CreateIconFromResourceEx
CreateIconFromResource
DrawIconEx

gdi32

CreatePatternBrush
DeleteObject
GetStockObject
CreateSolidBrush
SetBkMode
SetTextColor
SetBkColor
SelectObject
SetTextAlign
SetMapMode
GetTextMetricsA
DeleteDC
GetObjectType
GetObjectA
IntersectClipRect
CreateDCA
GetDeviceCaps
CreateFontA
CreateRectRgn
SelectClipRgn
CreateCompatibleDC
CreateCompatibleBitmap
BitBlt
CreateBrushIndirect
CreateRectRgnIndirect
TextOutA
GetTextExtentPoint32A
CreatePen
MoveToEx
LineTo
StretchBlt
SetDIBits
SetStretchBltMode
SetBrushOrgEx
CreateDIBSection
GdiSetBatchLimit
GdiGetBatchLimit
GetDIBits
CreateBitmap
SetPixel
GetPixel
CreateFontIndirectA

comdlg32

GetSaveFileNameA
GetOpenFileNameA

advapi32

RegOpenKeyA
RegConnectRegistryA
RegQueryValueExA
RegCloseKey
RegEnumValueA

oleaut32

SysAllocString

ole32

CoInitialize
CoCreateInstance
CoUninitialize
CoInitializeEx
CoInitializeSecurity
CoSetProxyBlanket
OleInitialize
OleUninitialize
ReleaseStgMedium
RevokeDragDrop
RegisterDragDrop

shell32

SHGetFileInfoA
ShellExecuteExA
DragQueryFileA

wsock32

closesocket
WSACleanup
WSAStartup

Sections

.code
Size: 218KB - Virtual size: 217KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.text
Size: 294KB - Virtual size: 293KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 32KB - Virtual size: 32KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 534KB - Virtual size: 753KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 10KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

709a082f6f7b74a8398db1e8e5c980de

Headers

File Characteristics

Imports

msvcrt

kernel32

comctl32

user32

gdi32

comdlg32

advapi32

oleaut32

ole32

shell32

wsock32

Sections

.code Size: 218KB - Virtual size: 217KB

.text Size: 294KB - Virtual size: 293KB

.rdata Size: 32KB - Virtual size: 32KB

.data Size: 534KB - Virtual size: 753KB

.rsrc Size: 10KB - Virtual size: 10KB

.code
Size: 218KB - Virtual size: 217KB

.text
Size: 294KB - Virtual size: 293KB

.rdata
Size: 32KB - Virtual size: 32KB

.data
Size: 534KB - Virtual size: 753KB

.rsrc
Size: 10KB - Virtual size: 10KB