Static task
static1
Behavioral task
behavioral1
Sample
sitecraftstudio.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
sitecraftstudio.exe
Resource
win10v2004-20240226-en
General
-
Target
sitecraftstudio
-
Size
6.5MB
-
MD5
a9003fc49b675e19a6009e605771c814
-
SHA1
2143fb9eff3b69b51a73b97224cdd2a166b9bb52
-
SHA256
6e7bf7091d0b1e4e47ee2f58e5e6219a09d7cc2f58ac7f5baa39509433682fb2
-
SHA512
e789396b3b86dc93042071c3c671e0be41b6ae639da3f8dfcaabeb44586d7063ce047806e7aa39af688739914a28b1b41cd4b6f1397e5fba43db58a2ac9878df
-
SSDEEP
98304:AWgA7Jx9S3WohK2czZnBo91yxnYmrOCtK3KBg7XJWUosSU1pZso:Z9y42wnBoMwIK97bSUpZb
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource sitecraftstudio
Files
-
sitecraftstudio.exe windows:4 windows x86 arch:x86
c5338922b42add5264b07e051681b7ff
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeGetTime
mpr
WNetCloseEnum
comctl32
ImageList_LoadImageW
ImageList_Read
ImageList_Remove
ImageList_Replace
ImageList_ReplaceIcon
ImageList_SetBkColor
ImageList_SetIconSize
ImageList_SetImageCount
ImageList_SetOverlayImage
ImageList_Write
ord17
InitializeFlatSB
FlatSB_GetScrollInfo
FlatSB_GetScrollPos
FlatSB_SetScrollInfo
FlatSB_SetScrollPos
FlatSB_SetScrollProp
ImageList_Add
ImageList_BeginDrag
ImageList_Copy
ImageList_Create
ImageList_Destroy
ImageList_DragEnter
ImageList_DragLeave
ImageList_DragMove
ImageList_DragShowNolock
ImageList_DrawEx
ImageList_DrawIndirect
ImageList_EndDrag
ImageList_GetBkColor
ImageList_GetDragImage
ImageList_GetIconSize
ImageList_GetImageCount
_TrackMouseEvent
ImageList_GetImageInfo
version
GetFileVersionInfoSizeW
GetFileVersionInfoW
VerQueryValueW
kernel32
SetEvent
SetFileAttributesW
SetFilePointer
SetFileTime
SetLastError
SetThreadLocale
SetThreadPriority
SetUnhandledExceptionFilter
SizeofResource
Sleep
SuspendThread
TerminateProcess
TerminateThread
TlsGetValue
TlsSetValue
UnhandledExceptionFilter
UnmapViewOfFile
VirtualAlloc
VirtualFree
VirtualProtect
VirtualQuery
VirtualQueryEx
WaitForMultipleObjectsEx
WaitForSingleObject
WideCharToMultiByte
WriteConsoleW
WriteFile
WritePrivateProfileStringW
SetErrorMode
SetEndOfFile
SetCurrentDirectoryW
ResumeThread
ResetEvent
RemoveDirectoryW
ReleaseMutex
ReadFile
RaiseException
QueryDosDeviceW
OutputDebugStringW
OutputDebugStringA
OpenProcess
OpenMutexW
OpenFileMappingW
MultiByteToWideChar
MulDiv
MoveFileW
MapViewOfFile
lstrlenW
lstrlenA
lstrcmpW
lstrcatA
LockResource
LocalFree
LocalFileTimeToFileTime
LocalAlloc
LoadResource
LoadLibraryW
LoadLibraryExW
IsValidLocale
IsDBCSLeadByteEx
InterlockedIncrement
InterlockedExchange
InterlockedDecrement
InterlockedCompareExchange
HeapSize
HeapReAlloc
HeapFree
HeapDestroy
HeapCreate
HeapAlloc
GlobalUnlock
GlobalSize
GlobalMemoryStatus
GlobalLock
GlobalFree
GlobalFindAtomW
GlobalDeleteAtom
GlobalAlloc
GlobalAddAtomW
GetWindowsDirectoryW
GetWindowsDirectoryA
GetVolumeInformationW
GetVersionExW
GetVersion
GetUserDefaultLCID
GetTimeZoneInformation
GetThreadSelectorEntry
GetThreadPriority
GetThreadLocale
GetThreadContext
GetTempPathW
GetTempFileNameW
GetSystemInfo
GetSystemDirectoryW
GetSystemDefaultLangID
GetStdHandle
GetShortPathNameW
GetPrivateProfileStringW
GetPriorityClass
GetModuleHandleW
GetModuleFileNameW
GetLocalTime
GetLocaleInfoW
GetLocaleInfoA
GetFullPathNameW
GetFileType
GetFileSize
GetFileAttributesW
GetFileAttributesExW
GetFileAttributesA
GetExitCodeThread
GetEnvironmentVariableW
GetDriveTypeW
GetDiskFreeSpaceW
GetDateFormatW
GetCurrentDirectoryW
GetCPInfoExW
GetConsoleOutputCP
GetConsoleCP
GetComputerNameW
GetCommandLineW
GetACP
FreeResource
FreeLibrary
FormatMessageW
FlushInstructionCache
FlushFileBuffers
FindResourceW
FindResourceA
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
FileTimeToDosDateTime
ExitThread
ExitProcess
EnumSystemLocalesW
EnumResourceTypesA
EnumResourceNamesW
EnumResourceNamesA
EnumCalendarInfoW
DuplicateHandle
DeleteFileW
DeleteCriticalSection
CreateThread
CreateProcessW
CreateProcessA
CreatePipe
CreateMutexW
CreateFileW
CreateFileMappingW
CreateFileA
CreateEventW
CreateDirectoryW
CompareStringW
CompareStringA
CloseHandle
GetStartupInfoW
GetCommandLineA
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
LoadLibraryA
GetModuleHandleA
GetProcAddress
GetLastError
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
ReadProcessMemory
GetStartupInfoA
user32
ShowCaret
ShowOwnedPopups
ShowScrollBar
ShowWindow
SubtractRect
SystemParametersInfoW
ToAscii
TrackPopupMenu
TranslateMDISysAccel
TranslateMessage
UnhookWindowsHookEx
UnregisterClassW
UpdateWindow
ValidateRect
WaitMessage
WindowFromPoint
wvsprintfA
SetWindowPlacement
SetWindowLongW
SetTimer
SetScrollRange
SetScrollPos
SetScrollInfo
SetRect
SetPropW
SetParent
SetMenuItemInfoW
SetForegroundWindow
SetFocus
SetCursorPos
SetClipboardData
SetClassLongW
SetCaretPos
SetCapture
SetActiveWindow
SendMessageW
SendMessageTimeoutW
SendMessageA
SendDlgItemMessageW
ScrollWindow
ScrollDC
ScreenToClient
RemovePropW
RemoveMenu
ReleaseDC
ReleaseCapture
RegisterWindowMessageW
RegisterClipboardFormatW
RegisterClassW
RedrawWindow
PostQuitMessage
PostMessageW
PeekMessageW
PeekMessageA
OpenClipboard
OffsetRect
MsgWaitForMultipleObjectsEx
MoveWindow
MessageBoxW
MessageBoxA
MessageBeep
MapWindowPoints
MapVirtualKeyW
LockWindowUpdate
LoadStringW
LoadKeyboardLayoutW
LoadImageW
LoadImageA
LoadIconW
LoadCursorW
LoadBitmapW
KillTimer
IsZoomed
IsWindowVisible
IsWindowUnicode
IsWindowEnabled
IsIconic
IsDialogMessageW
IsDialogMessageA
IsClipboardFormatAvailable
IsChild
InvalidateRgn
InvalidateRect
InsertMenuW
InsertMenuItemW
HideCaret
GetWindowThreadProcessId
GetWindowTextW
GetWindowRect
GetWindowPlacement
SetWindowTextW
GetWindowDC
GetUpdateRect
GetTopWindow
GetSystemMetrics
GetSystemMenu
GetSysColorBrush
GetSubMenu
GetScrollRange
GetScrollPos
GetScrollInfo
GetPropW
GetParent
GetMessageW
GetMessagePos
GetMessageExtraInfo
GetMenuStringW
GetMenuState
GetMenuItemInfoW
GetMenuItemID
GetMenuItemCount
GetLastActivePopup
GetKeyNameTextW
GetKeyboardState
GetKeyboardLayoutNameW
GetKeyboardLayoutList
GetIconInfo
GetForegroundWindow
GetFocus
GetDlgItemTextW
GetDlgItemTextA
GetDlgCtrlID
GetDesktopWindow
GetDCEx
GetCursorPos
GetClipboardFormatNameW
GetClipboardData
GetClientRect
GetClassNameW
GetClassLongW
GetClassInfoW
GetClassInfoExW
GetCapture
GetAsyncKeyState
GetActiveWindow
FrameRect
FindWindowW
FindWindowExW
FillRect
EnumWindows
EnumThreadWindows
EnumClipboardFormats
EnumChildWindows
EndPaint
EndDialog
EndDeferWindowPos
EnableWindow
EnableScrollBar
EnableMenuItem
EmptyClipboard
DrawTextW
DrawTextExW
DrawMenuBar
DrawIconEx
DrawFrameControl
DrawFocusRect
DrawEdge
DispatchMessageW
DispatchMessageA
DialogBoxParamW
DestroyWindow
DestroyMenu
DestroyIcon
DestroyCursor
DestroyCaret
DeleteMenu
DefWindowProcW
DefMDIChildProcW
DefFrameProcW
CreateWindowExW
CreatePopupMenu
CreateMenu
CreateIconIndirect
CreateDialogParamW
CreateCursor
CreateCaret
CreateAcceleratorTableW
CopyRect
CopyImage
CopyIcon
CloseClipboard
ClientToScreen
SetWindowsHookExW
SetWindowRgn
GetWindowLongW
SetWindowPos
CheckMenuItem
CharUpperW
CharUpperBuffW
CharNextW
CharNextA
CharLowerW
CharLowerBuffW
CallWindowProcW
CallNextHookEx
BringWindowToTop
BeginPaint
BeginDeferWindowPos
AttachThreadInput
AdjustWindowRectEx
ActivateKeyboardLayout
GetKeyState
gdi32
GetGraphicsMode
GetMapMode
GetObjectW
GetPaletteEntries
GetPixel
GetRgnBox
GetStockObject
GetSystemPaletteEntries
GetTextAlign
GetTextColor
GetTextExtentPoint32W
GetTextExtentPointW
GetTextMetricsW
GetViewportOrgEx
GetWindowOrgEx
GetWinMetaFileBits
IntersectClipRect
LineDDA
LineTo
LPtoDP
MaskBlt
ModifyWorldTransform
GetGlyphOutlineW
OffsetRgn
OffsetViewportOrgEx
PatBlt
Pie
PlayEnhMetaFile
PlgBlt
PolyBezierTo
Polygon
Polyline
RealizePalette
Rectangle
GetEnhMetaFilePaletteEntries
RestoreDC
RoundRect
SaveDC
ExtCreatePen
SelectClipRgn
SelectObject
SelectPalette
SetAbortProc
SetBkColor
SetBkMode
SetBrushOrgEx
SetDIBColorTable
SetDIBits
SetEnhMetaFileBits
SetGraphicsMode
SetMapMode
SetPaletteEntries
SetPixel
SetROP2
SetStretchBltMode
SetTextAlign
SetTextColor
SetViewportOrgEx
SetWindowOrgEx
SetWinMetaFileBits
SetWorldTransform
StartDocW
StartPage
StretchBlt
StretchDIBits
TextOutW
TranslateCharsetInfo
UnrealizeObject
ExcludeClipRect
EnumFontsW
EnumFontFamiliesExW
EndPage
EndDoc
Ellipse
DeleteObject
DeleteEnhMetaFile
DeleteDC
CreateSolidBrush
CreateRoundRectRgn
CreateRectRgnIndirect
CreatePolygonRgn
GetEnhMetaFileHeader
GetEnhMetaFileDescriptionW
GetEnhMetaFileBits
GetDIBits
GetDIBColorTable
GetDeviceCaps
GetCurrentPositionEx
GetCurrentObject
GetClipBox
GetBrushOrgEx
GetBkMode
GetBkColor
GetBitmapBits
GdiFlush
FrameRgn
ExtTextOutW
ExtFloodFill
CreateBitmap
CopyEnhMetaFileW
CombineRgn
Chord
RectVisible
BitBlt
ArcTo
AngleArc
MoveToEx
AbortDoc
CreatePenIndirect
CreatePatternBrush
CreatePalette
CreateICW
CreateHalftonePalette
CreateFontW
CreateFontIndirectW
CreateFontIndirectA
ExtCreateRegion
CreateEllipticRgn
CreateDIBSection
CreateDIBitmap
CreateDCW
CreateCompatibleDC
CreateCompatibleBitmap
CreateBrushIndirect
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
EnumPrintersW
comdlg32
GetOpenFileNameA
GetOpenFileNameW
GetSaveFileNameA
GetSaveFileNameW
ChooseColorW
ChooseFontW
PrintDlgW
advapi32
RegSetValueExW
RegSaveKeyW
RegRestoreKeyW
RegReplaceKeyW
RegQueryValueExW
RegQueryInfoKeyW
RegOpenKeyExW
RegLoadKeyW
RegFlushKey
RegEnumValueW
RegEnumKeyExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegConnectRegistryW
RegCloseKey
OpenThreadToken
OpenProcessToken
LookupPrivilegeValueW
LookupPrivilegeNameW
GetUserNameW
GetTokenInformation
FreeSid
AllocateAndInitializeSid
AdjustTokenPrivileges
RegUnLoadKeyW
shell32
Shell_NotifyIconW
ExtractIconExW
ShellExecuteExW
ole32
RegisterDragDrop
CoTaskMemAlloc
CoTaskMemFree
ProgIDFromCLSID
CoUninitialize
CreateDataAdviseHolder
CreateStreamOnHGlobal
DoDragDrop
FreePropVariantArray
OleFlushClipboard
OleGetClipboard
OleInitialize
OleSetClipboard
OleUninitialize
CLSIDFromString
StringFromCLSID
StgCreateDocfile
RevokeDragDrop
CoCreateInstance
ReleaseStgMedium
oleaut32
SysAllocStringLen
SafeArrayUnaccessData
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetElement
SafeArrayCreate
SafeArrayAccessData
GetErrorInfo
SysReAllocStringLen
VariantChangeType
VariantClear
VariantCopyInd
VariantInit
SysFreeString
GetActiveObject
msvcrt
_adjust_fdiv
__setusermatherr
_initterm
__getmainargs
__p__commode
exit
_XcptFilter
_exit
_except_handler3
__p__fmode
_acmdln
_controlfp
__set_app_type
Sections
.text Size: 2.3MB - Virtual size: 2.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 4.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_arch2_ Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE