Static task
static1
General
-
Target
SONIC.exe
-
Size
21.3MB
-
MD5
28df4911e4a16284cb1338904b5bfcbd
-
SHA1
3bad8d603a41dec304ba34211726ebb2d6b16e59
-
SHA256
4a599067fb977fe33260375099e58dd4fd52d1d71f577560b0c416ec0b6e0997
-
SHA512
1ddc024c74ad8b0714b56acd9462937e84f88c46c140fb6184358591b0cc745ea804b1053e09ae2d1e47fff69fe0ebd2b782e17e1cd89c4f88677b70f5565353
-
SSDEEP
393216:cxyACvJDDJFijkdKNyBa7XNQPZHPtOpb6v:9lPz4kdxBa7XyZ1O16v
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SONIC.exe
Files
-
SONIC.exe.exe windows:5 windows x86 arch:x86
c2c5a527b998c95dbec28b2437154baa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
midiOutSetVolume
timeSetEvent
timeEndPeriod
timeKillEvent
timeGetTime
timeBeginPeriod
joyGetNumDevs
joyGetDevCapsA
joyGetPosEx
waveOutGetErrorTextA
waveOutPrepareHeader
waveOutOpen
midiStreamProperty
midiStreamOpen
midiStreamClose
midiStreamStop
midiStreamOut
midiStreamPause
midiOutPrepareHeader
midiOutUnprepareHeader
midiStreamRestart
waveOutUnprepareHeader
waveOutWrite
waveOutClose
kernel32
GetDriveTypeA
GetFullPathNameA
GetTimeZoneInformation
SetCurrentDirectoryA
SetEndOfFile
SetEnvironmentVariableA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
CompareStringW
HeapAlloc
GetCurrentProcess
HeapFree
GetCurrentThread
VirtualFree
GetProcessHeap
GetLastError
VirtualAlloc
IsBadReadPtr
IsBadWritePtr
SetThreadPriority
GetCurrentDirectoryA
GetTickCount
WaitForSingleObject
ReleaseMutex
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
GetProcAddress
GetModuleFileNameA
GetModuleHandleA
QueryPerformanceCounter
Sleep
FreeLibrary
LoadLibraryA
CreateSemaphoreA
ReleaseSemaphore
CloseHandle
TerminateThread
GetCurrentThreadId
CreateThread
GetVersionExA
GetCommandLineA
GetStartupInfoA
HeapReAlloc
GetSystemTimeAsFileTime
GetModuleHandleW
ExitProcess
SetConsoleCtrlHandler
RtlUnwind
MoveFileA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetConsoleMode
WriteFile
GetStdHandle
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
SetHandleCount
GetFileType
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
HeapCreate
GetCurrentProcessId
TerminateProcess
IsDebuggerPresent
HeapSize
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
SetEnvironmentVariableW
LCMapStringA
MultiByteToWideChar
LCMapStringW
InitializeCriticalSectionAndSpinCount
ReadFile
SetFilePointer
CreateFileA
SetStdHandle
GetConsoleCP
FlushFileBuffers
RaiseException
CompareStringA
user32
ToAscii
GetDesktopWindow
ToAsciiEx
GetMessageA
ScreenToClient
GetKeyState
GetKeyboardLayout
MapVirtualKeyExA
CallWindowProcA
MoveWindow
ShowWindow
GetForegroundWindow
SendMessageA
LoadIconA
IsZoomed
IsIconic
GetWindowRect
MessageBoxA
GetAsyncKeyState
RegisterClassA
ChangeDisplaySettingsA
AdjustWindowRect
MapWindowPoints
LoadImageA
ReleaseCapture
DispatchMessageA
ClipCursor
PostMessageA
GetCursorPos
DefWindowProcA
PeekMessageA
GetWindowLongA
SetCursorPos
GetMenu
GetKeyboardState
TranslateMessage
PtInRect
BeginPaint
SetFocus
GetClientRect
WindowFromPoint
KillTimer
SetCapture
PostQuitMessage
SetTimer
SetCursor
ClientToScreen
EndPaint
DestroyIcon
GetSystemMetrics
AdjustWindowRectEx
ReleaseDC
SetWindowLongA
GetDC
SetForegroundWindow
InvalidateRect
EnumDisplaySettingsA
GetCursor
DestroyCursor
CreateCursor
SetWindowTextA
SetClassLongA
CreateIconFromResourceEx
CreateWindowExA
DestroyWindow
SetWindowPos
gdi32
CreateDIBSection
BitBlt
SetPaletteEntries
SelectPalette
DescribePixelFormat
ChoosePixelFormat
SetPixelFormat
SwapBuffers
GetDeviceGammaRamp
SetDeviceGammaRamp
DeleteDC
GetSystemPaletteEntries
GetDIBits
SetDIBColorTable
CreatePalette
DeleteObject
SelectObject
CreateCompatibleDC
CreateCompatibleBitmap
RealizePalette
shell32
DragQueryFileA
DragFinish
ShellExecuteA
Sections
.text Size: 1012KB - Virtual size: 1012KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 194KB - Virtual size: 193KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 104KB - Virtual size: 225KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 10KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ