Static task
static1
Behavioral task
behavioral1
Sample
ViewPass.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
ViewPass.exe
Resource
win10v2004-20240508-en
General
-
Target
ViewPass.exe
-
Size
72KB
-
MD5
6d6aa047ab4d9343dead799307719f8b
-
SHA1
49bc9564d4d6a2cc41c690f925eedf567695cf39
-
SHA256
bb9ff4d1ab114b77eabc0e4ba39c13e162b2866ffee374dfc64ae07321955000
-
SHA512
4c6eac019c1d71e6fd2715575547d0c38be17e4926a59709516a406ec2597088d39886d4c716f8bb510ac01830618aba3b3adb52e4c7c2d4aa5ff7cd41730ce6
-
SSDEEP
1536:U2Bh1JWwx2THaK92+zUqtDSrh7oRUtSZnk:3Bh1JJ6TzgqtDSrh7oytWn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ViewPass.exe
Files
-
ViewPass.exe.exe windows:4 windows x86 arch:x86
Password: infected
3055f970dc5ca4a0de9294f493607cbd
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
LoadLibraryA
GetVersionExA
WritePrivateProfileStringA
OpenProcess
MulDiv
lstrcpyA
GlobalUnlock
GlobalLock
GlobalAlloc
MultiByteToWideChar
lstrlenA
InterlockedDecrement
InterlockedIncrement
CompareStringW
CompareStringA
GetStringTypeW
GetStringTypeA
GetOEMCP
GetACP
GetCPInfo
GetModuleHandleA
IsBadCodePtr
IsBadWritePtr
IsBadReadPtr
SetUnhandledExceptionFilter
HeapSize
HeapReAlloc
WriteFile
VirtualFree
ReadProcessMemory
HeapDestroy
GetEnvironmentVariableA
GetFileType
GetStdHandle
SetHandleCount
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetModuleFileNameA
UnhandledExceptionFilter
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
LCMapStringW
LCMapStringA
HeapAlloc
GetProcAddress
VirtualAllocEx
WriteProcessMemory
CreateRemoteThread
VirtualAlloc
WaitForSingleObject
HeapFree
TlsGetValue
SetLastError
TlsAlloc
TlsSetValue
SetEnvironmentVariableA
GetCurrentThreadId
RaiseException
GetVersion
GetCommandLineA
GetStartupInfoA
GetCurrentProcess
TerminateProcess
ExitProcess
GetLocalTime
GetSystemTime
VirtualFreeEx
GetExitCodeThread
HeapCreate
CloseHandle
GetLastError
WideCharToMultiByte
LocalFree
RtlUnwind
GetTimeZoneInformation
user32
RegisterWindowMessageA
SendMessageTimeoutA
MessageBoxA
GetWindowRect
SetWindowLongA
ReleaseCapture
EndDialog
IsDlgButtonChecked
GetDlgItem
GetWindowTextA
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
GetSystemMenu
AppendMenuA
DeleteMenu
DialogBoxParamA
SendMessageA
LoadCursorA
CheckDlgButton
GetSystemMetrics
LoadIconA
SetWindowPos
GetDC
GetSysColor
ChildWindowFromPoint
SetCapture
SetCursor
GetCursorPos
WindowFromPoint
GetWindowThreadProcessId
GetClassNameA
ScreenToClient
GetParent
ChildWindowFromPointEx
GetWindow
PtInRect
GetWindowLongA
SetWindowTextA
FindWindowA
BringWindowToTop
ShowWindow
gdi32
CreateFontIndirectA
CreateSolidBrush
SetTextColor
SetBkColor
GetDeviceCaps
shell32
ShellExecuteA
ole32
CoInitialize
CoUninitialize
OleRun
CoCreateInstance
oleaut32
GetErrorInfo
SysAllocStringByteLen
SysAllocString
VariantInit
VariantClear
SysFreeString
SysStringLen
advapi32
RegSetValueExA
RegCloseKey
RegCreateKeyExA
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 12KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ