Static task
static1
Behavioral task
behavioral1
Sample
Godzilla Vip Hack.sp.exe
Resource
win10-20240404-en
General
-
Target
Godzilla Vip Hack.sp.exe
-
Size
8.7MB
-
MD5
832d84d5654c1a82e641381ca5e7871f
-
SHA1
9b43522bce8f0f573078b0b9da42c6e6a2c01eaa
-
SHA256
3c992da6212998cd47ae868b80130189daff0d49e812bea6daef7dff88172bbe
-
SHA512
37f981c9bd246349546d3dbcc1be4c6f2fea8857b7964b7042380d5c4c2b0eceaaa64fe670c345da1f917003808e6fd8ff6d5527286a6d8293e2f85964257460
-
SSDEEP
196608:2A7NYb0AJzBAc4GyX+OvaTvP2/YbGKLDSr/afxq0nVkH5Yr9ktdnJDQOu/vpWQ3:2A76lrAc4JX+fTveADKreqkkH5Yr9kte
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Godzilla Vip Hack.sp.exe
Files
-
Godzilla Vip Hack.sp.exe.exe windows:6 windows x86 arch:x86
7e2a3ead65f24962372aca13051f7ea4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
WSASetLastError
crypt32
CertGetCertificateContextProperty
advapi32
CryptCreateHash
kernel32
AreFileApisANSI
GetSystemTimeAsFileTime
LocalAlloc
LocalFree
GetModuleFileNameW
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
GetWindowThreadProcessId
CharUpperBuffW
shell32
ShellExecuteA
msvcp140
?set_new_handler@std@@YAP6AXXZP6AXXZ@Z
d3d11
D3D11CreateDeviceAndSwapChain
d3dx11_43
D3DX11CreateShaderResourceViewFromMemory
dwmapi
DwmExtendFrameIntoClientArea
urlmon
URLDownloadToFileA
d3dcompiler_43
D3DCompile
version
GetFileVersionInfoSizeA
bcrypt
BCryptGenRandom
userenv
UnloadUserProfile
rpcrt4
UuidToStringA
imm32
ImmGetContext
vcruntime140
__current_exception_context
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
api-ms-win-crt-string-l1-1-0
_strdup
api-ms-win-crt-heap-l1-1-0
free
api-ms-win-crt-convert-l1-1-0
atoi
api-ms-win-crt-stdio-l1-1-0
_setmode
api-ms-win-crt-time-l1-1-0
_gmtime64_s
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-multibyte-l1-1-0
_mbscmp
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-filesystem-l1-1-0
_fstat64i32
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-environment-l1-1-0
getenv
Sections
.text Size: - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 795KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 329KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.2+u Size: - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.96v Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.V+Z Size: 8.5MB - Virtual size: 8.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 142KB - Virtual size: 141KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ