Static task
static1
Behavioral task
behavioral1
Sample
App_02029.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
App_02029.exe
Resource
win10v2004-20240611-en
General
-
Target
Milenio-X-Hub-Key-System-WorkInk-Installer-576416.zip
-
Size
20.3MB
-
MD5
faebfd53c2c1884f0a0075eb1284c6ee
-
SHA1
1dc5256168704b2dd89132e3ad83e4956b760db4
-
SHA256
7dde2b8c39fbf308efe0a11f477b239bdd68141d2dc849f35f60999a2e5653e8
-
SHA512
3df7e27ba3d94f05658a2eede4875977afddaff78922d52cfae22effc0d3ffc7954f8118af3e20813280ef0d1f0858dedbe4f55933c57263200fb4cb688186e1
-
SSDEEP
393216:0jh/JLaYGagBFvx6VOkLPEH8dn0mAE5vPWbD6sctpF8zlj17jLh:0j1JLSBFvxAOlH8Z0mAEpubqDMJ7fh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/App_02029.exe
Files
-
Milenio-X-Hub-Key-System-WorkInk-Installer-576416.zip.zip
-
App_02029.exe.exe windows:6 windows x86 arch:x86
1447c707f163c367d99113dc5f1c11a9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
IsDebuggerPresent
GetFileType
HeapFree
QueryPerformanceFrequency
GetStringTypeW
GetConsoleCP
FreeEnvironmentStringsW
GetProcessAffinityMask
DeleteFileA
TlsAlloc
CreateDirectoryA
IsProcessorFeaturePresent
HeapReAlloc
AcquireSRWLockExclusive
GetConsoleMode
MultiByteToWideChar
DecodePointer
ReleaseSemaphore
WriteFile
GetLogicalDriveStringsA
HeapSize
GetModuleFileNameW
FindFirstFileA
SetFilePointerEx
LoadLibraryA
DeleteCriticalSection
GetVersionExA
VerifyVersionInfoW
GetFileAttributesW
GetProcessHeap
FlushFileBuffers
ExitThread
GetCPInfo
TerminateProcess
LocalFree
SetPriorityClass
GetVersion
GetSystemInfo
ResetEvent
SetUnhandledExceptionFilter
ReadFile
GetFileSize
GetModuleHandleExW
EnumSystemLocalesW
ExitProcess
GetLocaleInfoW
SetEndOfFile
GetModuleHandleW
GetCurrentDirectoryW
GetEnvironmentVariableA
FindFirstFileExA
MoveFileExW
CreateFileA
FindNextFileW
InitializeSListHead
GetDateFormatW
FindFirstFileW
FreeLibrary
GlobalAlloc
InitializeCriticalSectionAndSpinCount
lstrlenA
VirtualFree
VirtualAlloc
IsValidLocale
InitializeCriticalSection
WaitForMultipleObjects
RtlUnwind
SetEvent
GetLogicalDriveStringsW
ReadConsoleW
GetUserDefaultLCID
FileTimeToSystemTime
SetFileTime
FindNextFileA
SetFileAttributesW
CompareFileTime
SetLastError
TlsSetValue
GetSystemDirectoryW
AreFileApisANSI
CloseHandle
GetLastError
LoadLibraryW
WaitForSingleObject
GetTickCount64
GetOEMCP
GlobalFree
FindClose
GetDriveTypeW
CreateEventA
PeekNamedPipe
LoadLibraryExW
TlsGetValue
GetStdHandle
EncodePointer
SetFilePointer
GetCurrentThreadId
WideCharToMultiByte
GetFileAttributesA
QueryPerformanceCounter
GetModuleHandleA
GetProcAddress
IsValidCodePage
SystemTimeToTzSpecificLocalTime
CreateThread
ReleaseSRWLockExclusive
VerSetConditionMask
GetModuleFileNameA
GlobalMemoryStatus
lstrcatA
CreateSemaphoreA
UnhandledExceptionFilter
EnterCriticalSection
LCMapStringW
RaiseException
InitializeCriticalSectionEx
GetFileSizeEx
RemoveDirectoryA
FormatMessageA
DeleteFileW
LCMapStringEx
SleepEx
FileTimeToLocalFileTime
CreateDirectoryW
GetTimeFormatW
Sleep
TlsFree
GlobalUnlock
CreateFileW
WaitForSingleObjectEx
MoveFileW
SetEnvironmentVariableA
GetFullPathNameW
GetACP
GetCommandLineA
FormatMessageW
SetFileAttributesA
GetCommandLineW
GetCurrentProcess
HeapAlloc
GetFileAttributesExW
GetCurrentProcessId
GetTimeZoneInformation
CompareStringW
SetStdHandle
GetSystemTimeAsFileTime
LeaveCriticalSection
GetTickCount
GetFileInformationByHandle
MoveFileA
RemoveDirectoryW
GetStartupInfoW
GetEnvironmentStringsW
GetCurrentDirectoryA
GlobalLock
FreeLibraryAndExitThread
WriteConsoleW
user32
OpenClipboard
GetWindowTextLengthW
GetWindowTextW
GetWindowRect
MessageBoxA
ShowWindow
DialogBoxParamW
GetWindowTextLengthA
GetMonitorInfoA
InvalidateRect
SetFocus
GetWindowTextA
EndDialog
SendMessageW
LoadCursorA
LoadIconA
DialogBoxParamA
GetDlgItem
GetFocus
wsprintfA
MoveWindow
GetParent
MonitorFromWindow
MessageBoxW
CloseClipboard
LoadStringA
SetWindowLongA
MapDialogRect
CharUpperA
SystemParametersInfoA
SetClipboardData
SetWindowTextA
CheckDlgButton
EmptyClipboard
EnableWindow
LoadStringW
IsDlgButtonChecked
PostMessageA
SendMessageA
SetTimer
ScreenToClient
GetKeyState
KillTimer
SetCursor
GetWindowLongA
CharUpperW
SetWindowTextW
advapi32
CryptHashData
CryptDestroyKey
CryptCreateHash
CryptAcquireContextW
CryptGetHashParam
CryptEncrypt
CryptReleaseContext
CloseServiceHandle
CryptDestroyHash
CryptImportKey
shell32
SHBrowseForFolderA
SHGetSpecialFolderPathW
SHGetFileInfoA
SHGetPathFromIDListA
ole32
CoTaskMemFree
OleInitialize
CoUninitialize
CoInitialize
CoCreateInstance
oleaut32
SysAllocString
SysAllocStringLen
SysStringLen
VariantClear
SysFreeString
bcrypt
BCryptGenRandom
crypt32
CertOpenStore
CertFindCertificateInStore
CryptQueryObject
CertGetNameStringW
CertEnumCertificatesInStore
CertFreeCertificateContext
CertGetCertificateChain
PFXImportCertStore
CertAddCertificateContextToStore
CertFindExtension
CryptStringToBinaryW
CertCreateCertificateChainEngine
CertFreeCertificateChain
CryptDecodeObjectEx
CertCloseStore
CertFreeCertificateChainEngine
wldap32
ord219
ord145
ord216
ord142
ord41
ord14
ord147
ord79
ord27
ord167
ord208
ord73
ord133
ord127
ord301
ord117
ord46
ord26
ws2_32
recvfrom
listen
accept
htonl
WSAEventSelect
WSACloseEvent
ioctlsocket
gethostname
sendto
WSAStartup
WSACleanup
WSAResetEvent
getsockopt
WSAWaitForMultipleEvents
send
WSAEnumNetworkEvents
WSACreateEvent
freeaddrinfo
WSAIoctl
ntohs
WSASetLastError
WSAGetLastError
closesocket
setsockopt
getaddrinfo
htons
socket
select
__WSAFDIsSet
recv
connect
getsockname
getpeername
bind
Sections
.text Size: 6.8MB - Virtual size: 6.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 250KB - Virtual size: 249KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ