Static task
static1
Behavioral task
behavioral1
Sample
New folder/1_MAIN.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
New folder/1_MAIN.exe
Resource
win10v2004-20240508-en
Behavioral task
behavioral3
Sample
New folder/PLAY32.exe
Resource
win7-20240221-en
Behavioral task
behavioral4
Sample
New folder/PLAY32.exe
Resource
win10v2004-20240508-en
General
-
Target
New folder.zip
-
Size
1.7MB
-
MD5
3c22f847057f8b8f2ebc48af9d19a97e
-
SHA1
14e6a2069fc2a7e924c0d0108ae86f82726ad261
-
SHA256
c336111b091eb00a64a7219b34c89fdb00c08600b248261177bd1040ed014c18
-
SHA512
2595590a41ad3d54b4805114b994688d64ba581035beaa462c2e365bb0b6e9020075680b3026d8789e081d0026fb5aaf43df7042eea6c69a8c28d0fb6e2f956f
-
SSDEEP
49152:ajVdl/jPbeu1T+mFnvKWyNah6LF2tNc0yzeisNKjoRp6i3NU:ax7/jP+mFvKW6G6LFMS0yChEmm
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/New folder/1_MAIN.EXE unpack001/New folder/PLAY32.EXE
Files
-
New folder.zip.zip
-
New folder/1_MAIN.EXE.exe windows:4 windows x86 arch:x86
19576a4101d1dceaf8e77f8646dfdb3e
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
HeapReAlloc
HeapSize
LCMapStringA
HeapAlloc
TerminateProcess
ExitProcess
UnhandledExceptionFilter
RtlUnwind
GetOEMCP
FreeEnvironmentStringsA
GetEnvironmentStrings
HeapFree
LCMapStringW
RaiseException
GetStartupInfoA
lstrcmpA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetStringTypeA
GetStringTypeW
SetStdHandle
CompareStringA
CompareStringW
lstrcpyA
MultiByteToWideChar
LockResource
FreeResource
lstrlenA
SetEnvironmentVariableA
GetCommandLineA
GetSystemTime
GetModuleHandleA
GetLocalTime
GetCurrentDirectoryA
GetTimeZoneInformation
GetFullPathNameA
GetVersionExA
SetupComm
_llseek
_lopen
_lcreat
DebugBreak
_lwrite
_lclose
GlobalSize
GetACP
GetCPInfo
GlobalGetAtomNameA
GlobalFlags
GlobalMemoryStatus
GetProfileStringA
WinExec
GetProfileIntA
GetWindowsDirectoryA
WritePrivateProfileStringA
GetPrivateProfileStringA
_hwrite
_hread
GetDiskFreeSpaceA
GetVolumeInformationA
GetSystemDirectoryA
GetDriveTypeA
GetTempPathA
GetModuleFileNameA
SetFileTime
GetFileTime
SetCurrentDirectoryA
GlobalAddAtomA
GlobalDeleteAtom
DeleteFileA
CreateDirectoryA
FindNextFileA
FlushFileBuffers
RemoveDirectoryA
MoveFileA
SetEndOfFile
WriteFile
ReadFile
FindClose
SetFilePointer
FindFirstFileA
GetTempFileNameA
GetFileAttributesA
CreateFileA
SetLastError
CloseHandle
GetFileSize
SetHandleCount
GlobalHandle
GetTickCount
GetCurrentProcess
lstrcatA
OpenFile
SetErrorMode
LoadLibraryA
GetLastError
GetSystemInfo
GlobalReAlloc
GlobalAlloc
GlobalFree
GetCurrentProcessId
FindResourceA
LoadResource
GetVersion
lstrcmpiA
lstrcpynA
GlobalUnlock
GetProcAddress
GlobalLock
FreeLibrary
IsBadStringPtrA
IsBadReadPtr
WideCharToMultiByte
GetFileType
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
OutputDebugStringA
user32
TranslateAcceleratorA
PostQuitMessage
DispatchMessageA
TranslateMessage
GetAsyncKeyState
ToAscii
GetMessageA
IsDialogMessageA
IsIconic
SetActiveWindow
IsWindowVisible
GetLastActivePopup
DeleteMenu
GetSystemMenu
GetDialogBaseUnits
BringWindowToTop
AppendMenuA
GetMenuStringA
GetMenuState
GetMenuItemID
GetMenuItemCount
CreatePopupMenu
DestroyMenu
DrawMenuBar
RemoveMenu
GetMenu
ModifyMenuA
EnableMenuItem
IsZoomed
GetSubMenu
SetMenu
CreateMenu
wsprintfA
SetMessageQueue
GetUpdateRect
ScrollDC
LoadStringA
MessageBoxA
MessageBeep
SetPropA
RemovePropA
GetPropA
GetWindowDC
AdjustWindowRect
GetTopWindow
IsCharLowerA
GetKeyState
SetWindowTextA
GetCursorPos
EqualRect
ValidateRect
ExitWindowsEx
EnumWindows
HideCaret
InvertRect
DestroyCaret
CharPrevA
ClientToScreen
ScreenToClient
EnumChildWindows
GetWindow
LoadAcceleratorsA
OemToCharA
CreateWindowExA
SendDlgItemMessageA
ReleaseCapture
SetCapture
EnableWindow
GetClassNameA
GetActiveWindow
CharToOemA
SetFocus
ShowWindow
IntersectRect
DrawFocusRect
GetWindowRect
DrawIcon
LoadBitmapA
LoadIconA
CreateCursor
SetCursor
DestroyCursor
SetSysColors
GetFocus
GetWindowThreadProcessId
GetClipboardData
SetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetDlgItemTextA
SetDlgItemTextA
CreateCaret
SetCaretPos
ShowCaret
UnionRect
CharNextA
InflateRect
GetClassLongA
IsWindow
SetWindowLongA
SetWindowPos
GetWindowLongA
OffsetRect
GetWindowTextA
GetSysColor
FrameRect
IsWindowEnabled
DestroyWindow
GetNextDlgGroupItem
SendMessageA
GetWindowWord
GetDlgCtrlID
GetParent
PostMessageA
GetCapture
SetWindowWord
InvalidateRect
UpdateWindow
DefWindowProcA
PeekMessageA
PtInRect
CharUpperA
DefDlgProcA
GetDC
ReleaseDC
GetSystemMetrics
MoveWindow
SetTimer
KillTimer
BeginPaint
SetRect
DrawTextA
EndPaint
GetClientRect
FillRect
SystemParametersInfoA
EndDialog
GetClassInfoA
LoadCursorA
RegisterClassA
DialogBoxParamA
CreateDialogParamA
GetDlgItem
CharLowerA
gdi32
TextOutA
SetBkMode
DeleteObject
SelectPalette
StretchDIBits
RealizePalette
LPtoDP
SetViewportExtEx
SetWindowExtEx
SetMapMode
DeleteDC
SelectObject
BitBlt
CreateCompatibleDC
StretchBlt
SetTextColor
UnrealizeObject
CreatePatternBrush
CreateBitmap
CreateSolidBrush
LineTo
MoveToEx
CreatePen
GetSystemPaletteUse
GetTextColor
SetBkColor
GetBkColor
SetROP2
SaveDC
RestoreDC
GetObjectA
GetBitmapBits
Rectangle
GetDeviceCaps
SetSystemPaletteUse
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
CreatePalette
RectVisible
CreateCompatibleBitmap
GetDIBits
SetPixel
ExtFloodFill
GetPixel
SetStretchBltMode
CreateDIBitmap
GetNearestColor
PatBlt
ExtTextOutA
CreateFontIndirectA
GetClipBox
SelectClipRgn
CreateRectRgn
SetTextCharacterExtra
Ellipse
IntersectClipRect
SetViewportOrgEx
GetViewportOrgEx
Pie
GetTextMetricsA
EnumFontsA
SetDIBits
GetOutlineTextMetricsA
GetTextExtentPoint32A
CreateICA
Arc
Polygon
RoundRect
SetWindowOrgEx
GetWindowOrgEx
Polyline
GetViewportExtEx
CreateMetaFileA
OffsetWindowOrgEx
DeleteMetaFile
CloseMetaFile
CreateDiscardableBitmap
StartDocA
SetAbortProc
StartPage
AbortDoc
EndDoc
Escape
CreateDCA
CombineRgn
EndPage
CreateRectRgnIndirect
OffsetRgn
SetRectRgn
GetStockObject
GetDCOrgEx
SetTextAlign
comdlg32
GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError
shell32
SHAppBarMessage
ShellExecuteA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
GetPrinterA
advapi32
AdjustTokenPrivileges
LookupPrivilegeValueA
OpenProcessToken
mpr
WNetCloseEnum
WNetOpenEnumA
WNetEnumResourceA
ole32
OleSetMenuDescriptor
OleLoad
CoCreateInstance
OleInitialize
CreateGenericComposite
CreateItemMoniker
CreateFileMoniker
MkParseDisplayName
CreateBindCtx
CLSIDFromString
OleUninitialize
OleSetContainedObject
GetHGlobalFromILockBytes
StgOpenStorageOnILockBytes
CreateILockBytesOnHGlobal
OleSave
OleCreateStaticFromData
OleDraw
StgCreateDocfileOnILockBytes
CoUninitialize
CoInitialize
Sections
.text Size: 906KB - Virtual size: 906KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 19KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 175KB - Virtual size: 174KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 42KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
New folder/PLAY32.EXE.exe windows:1 windows x86 arch:x86
db1709fb31ca832abf07aade26dc1574
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
GetModuleHandleA
MulDiv
GetProfileStringA
LoadLibraryA
GetProcAddress
lstrcatA
GlobalLock
lstrcpyA
GlobalAlloc
WritePrivateProfileStringA
GlobalUnlock
LocalHandle
LocalLock
GetPrivateProfileIntA
LocalAlloc
GetModuleFileNameA
LocalUnlock
LocalFree
SetErrorMode
lstrlenA
lstrcmpiA
FindClose
FindFirstFileA
VirtualFree
GetCPInfo
GetOEMCP
GetStdHandle
UnhandledExceptionFilter
RtlUnwind
GetACP
WriteFile
ExitProcess
GetVersion
GetCurrentDirectoryA
GetEnvironmentStrings
GetStartupInfoA
GetCommandLineA
FileTimeToLocalFileTime
FileTimeToSystemTime
GetDriveTypeA
CloseHandle
GetVersionExA
GetLastError
SetFilePointer
GetTimeZoneInformation
GetFullPathNameA
GetLogicalDrives
MultiByteToWideChar
WideCharToMultiByte
GetFileType
SetStdHandle
FlushFileBuffers
SetEnvironmentVariableA
OutputDebugStringA
GlobalFree
VirtualAlloc
user32
RegisterWindowMessageA
OffsetRect
GetWindowRect
MapWindowPoints
IsRectEmpty
LoadIconA
EqualRect
CloseClipboard
IntersectRect
OpenClipboard
FillRect
GetSysColor
CharToOemA
DrawIcon
GetDlgCtrlID
CharUpperA
CheckMenuItem
InsertMenuA
DeleteMenu
DrawFocusRect
CallWindowProcA
TranslateMDISysAccel
TranslateAcceleratorA
GetMessageA
DestroyIcon
MoveWindow
LoadMenuA
ValidateRect
SetRectEmpty
IsZoomed
SetWindowLongA
DefMDIChildProcA
MessageBoxA
InvalidateRect
GetClassNameA
GetParent
WinHelpA
LoadBitmapA
DialogBoxParamA
CreateDialogParamA
EnableWindow
DestroyWindow
LoadStringA
SetWindowTextA
GetMenu
GetSubMenu
CreateWindowExA
PostQuitMessage
GetWindow
SendMessageA
IsWindow
EnumChildWindows
DefFrameProcA
GetWindowLongA
PostMessageA
SetPropA
RemovePropA
IsDlgButtonChecked
SetMenu
LoadAcceleratorsA
SetMessageQueue
SetCapture
CheckDlgButton
GetPropA
GetActiveWindow
EnableMenuItem
ClientToScreen
SetCursor
LoadCursorA
GetKeyState
ReleaseCapture
ClipCursor
CheckRadioButton
wvsprintfA
OemToCharA
PeekMessageA
DrawMenuBar
SetFocus
DispatchMessageA
IsDialogMessageA
TranslateMessage
GetDlgItem
BeginPaint
EndPaint
GetClientRect
UpdateWindow
GetDC
wsprintfA
ReleaseDC
GetDlgItemTextA
IsIconic
SetDlgItemTextA
EndDialog
CharNextA
ShowWindow
CharPrevA
RegisterClassA
CharLowerA
DestroyMenu
AdjustWindowRect
GetSystemMetrics
EmptyClipboard
gdi32
SetAbortProc
DeleteObject
DeleteDC
BitBlt
GetObjectA
SelectObject
CreateSolidBrush
ExcludeClipRect
CreateCompatibleDC
EndPage
AbortDoc
EndDoc
StartDocA
GetDeviceCaps
StartPage
PatBlt
GetStockObject
CreateFontIndirectA
CreatePatternBrush
comdlg32
FindTextA
GetOpenFileNameA
PrintDlgA
CommDlgExtendedError
shell32
DragQueryFileA
DragAcceptFiles
DragFinish
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
qtole32
ord10
ord3
ord6
ord5
ord4
ord8
ord7
ord9
ord12
ord2
Sections
.text Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 6KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 512B - Virtual size: 224B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.edata Size: 512B - Virtual size: 51B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
New folder/REACTORS.A4R