Static task
static1
Behavioral task
behavioral1
Sample
SAMP-GPS.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
SAMP-GPS.dll
Resource
win10v2004-20240508-en
General
-
Target
SAMP-GPS (2).zip
-
Size
71KB
-
MD5
91ae56e60d6c9728edddb83298ebc428
-
SHA1
9246939d78a3a0f12f0a32b8b8dfdb3321a33018
-
SHA256
c6559cc1bf46f80dfbf22aa77a2ab8891aff4eb9a77dd46b84381ada33cd4bf8
-
SHA512
d2d7d28e99595d142bb5c1aacbac93c90d287b6da2e841cd4f9ee9d1f9b915f4c0fd1f89422f389a32f70d589ccd36cbfbecc5eb1d06256bee643a442609092b
-
SSDEEP
1536:t1J/PtvzgYG2flMwVCN1tdihqvu8CSSbuLta0EQcE0S:tZrgL2flzgdig/CSe+o0EZEp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SAMP-GPS.asi
Files
-
SAMP-GPS (2).zip.zip
-
SAMP-GPS.asi.dll windows:5 windows x86 arch:x86
559bce5025e803883e7584906770f70c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
kernel32
VirtualProtect
GetCurrentProcess
GetModuleHandleA
Sleep
TerminateThread
CreateThread
DecodePointer
SetFilePointerEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
EncodePointer
RaiseException
InterlockedFlushSList
GetLastError
SetLastError
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
GetStdHandle
GetFileType
GetModuleFileNameA
GetModuleHandleExW
WriteConsoleW
ExitProcess
MultiByteToWideChar
WideCharToMultiByte
HeapFree
HeapAlloc
GetACP
WriteFile
CloseHandle
LCMapStringW
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
GetStringTypeW
SetStdHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
HeapSize
HeapReAlloc
CreateFileW
psapi
GetModuleInformation
Sections
.text Size: 98KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 251KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ