d:\MyProjects\SYSTEMAX\sai2_bak\20200410-Released\bin64\sai2.pdb
Static task
static1
1 signatures
General
-
Target
sai2.exe
-
Size
5.6MB
-
MD5
f2c9675e32b7785c12567e3422efe3fa
-
SHA1
bf410dd26cf22b9e8ad5bd09857db726e2f05ed4
-
SHA256
b8c0f2a9eb104c6080920bb5fee5ef475042c1d8e2b6c81135a9cae1d7ff4a22
-
SHA512
a4d418207397c892522e8e94107fdecdf01f65d7025a5a8dd1a36fccfd0a0851226551c5393ebe3577c74a493b9cff115ba29e3c4755f838ae5e0fed41349b6b
-
SSDEEP
49152:1JboGiLbBvNwnZvJJwBnaFF8vvFYE9r65UeKCgjaDGTf36U379c:1JoU2YEk500w
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource sai2.exe
Files
-
sai2.exe.exe windows:5 windows x64 arch:x64
6ed84bf66a92b924239092414dbc6d40
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
SystemTimeToFileTime
FlushFileBuffers
WriteFile
SetFilePointerEx
ReadFile
GetFileSizeEx
DeleteFileW
CreateFileW
Sleep
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
FileTimeToSystemTime
GetFileAttributesW
CompareFileTime
CompareStringW
GetPrivateProfileIntW
ReleaseSemaphore
GlobalAlloc
GlobalFree
LocalAlloc
LocalFree
FileTimeToLocalFileTime
SwitchToThread
CopyFileW
GetPrivateProfileStringW
CreateMutexW
GetLastError
GetProcAddress
CloseHandle
GetDiskFreeSpaceExW
lstrlenA
GetSystemTime
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetLocaleInfoW
GetConsoleMode
GetConsoleCP
LoadLibraryA
GetCurrentProcess
SetPriorityClass
GlobalLock
GlobalUnlock
GetTickCount
GetCurrentThread
SetThreadPriority
GetCurrentThreadId
WaitForSingleObject
GetStringTypeW
GetStringTypeA
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
HeapReAlloc
HeapSize
WideCharToMultiByte
MultiByteToWideChar
WaitForMultipleObjects
ResetEvent
SetEvent
EnterCriticalSection
LeaveCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
VirtualAlloc
VirtualFree
VirtualQuery
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
RtlVirtualUnwind
RtlLookupFunctionEntry
FreeLibrary
SetFilePointer
GetFileSize
FormatMessageW
LoadLibraryW
RaiseException
Module32NextW
Module32FirstW
CreateToolhelp32Snapshot
GetCurrentProcessId
GlobalMemoryStatusEx
RtlCaptureContext
SetThreadAffinityMask
GetProcessAffinityMask
ResumeThread
CreateEventW
CreateSemaphoreW
GetModuleFileNameW
GetCommandLineW
GetModuleHandleW
DeviceIoControl
SetFileTime
SetEndOfFile
FlushViewOfFile
SetLastError
MoveFileExW
CreateDirectoryW
RemoveDirectoryW
FindClose
FindNextFileW
FindFirstFileW
GetEnvironmentVariableW
GetDriveTypeW
DebugBreak
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetVersionExW
GetCPInfo
GetSystemInfo
RtlUnwindEx
HeapFree
HeapAlloc
GetCommandLineA
GetStartupInfoA
VirtualProtect
ExitThread
CreateThread
GetACP
GetOEMCP
IsValidCodePage
EncodePointer
DecodePointer
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
LCMapStringA
LCMapStringW
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapSetInformation
HeapCreate
ExitProcess
GetStdHandle
GetModuleFileNameA
RtlPcToFileHeader
user32
DestroyIcon
LoadCursorW
GetAncestor
ReleaseCapture
WaitMessage
GetMessageW
GetDlgCtrlID
SetCapture
DefWindowProcW
SetWindowLongPtrW
GetSystemMenu
MoveWindow
SystemParametersInfoW
GetWindowRect
AdjustWindowRectEx
CreateWindowExW
GetSystemMetrics
DrawTextW
FillRect
GetWindowLongPtrW
EnableWindow
RegisterClassExW
GetSysColor
RedrawWindow
MapWindowPoints
SetLayeredWindowAttributes
FrameRect
GetClientRect
GetPropW
SetPropW
MonitorFromWindow
CreatePopupMenu
SetMenuInfo
CreateMenu
GetScrollPos
SetScrollInfo
SetScrollRange
SetScrollPos
GetMenuItemInfoW
GetMenuItemCount
EnableMenuItem
CheckMenuItem
ClientToScreen
SetWindowRgn
GetMonitorInfoW
MonitorFromRect
IsZoomed
GetWindowTextW
SetWindowTextW
GetWindowLongW
SetWindowLongW
IsWindowEnabled
DrawIconEx
GetCursorPos
WindowFromPoint
ChildWindowFromPointEx
ScreenToClient
SetWindowPlacement
SetParent
GetClassLongPtrW
PostThreadMessageW
LoadIconW
SendInput
GetDlgItem
mouse_event
MessageBoxW
DeferWindowPos
EndDeferWindowPos
BeginDeferWindowPos
SetCaretPos
ShowCaret
CreateCaret
DestroyCaret
HideCaret
IsChild
GetKeyState
GetNextDlgTabItem
DestroyMenu
GetWindowDC
ReleaseDC
GetWindowPlacement
SetCursor
SetWindowPos
MessageBeep
GetParent
SetActiveWindow
BeginPaint
EndPaint
RegisterClipboardFormatW
SetFocus
ShowWindow
ReplyMessage
SetForegroundWindow
GetMenuInfo
IsIconic
DestroyWindow
PostQuitMessage
EmptyClipboard
SetClipboardData
OpenClipboard
GetClipboardData
CloseClipboard
IsClipboardFormatAvailable
DeleteMenu
AppendMenuW
InsertMenuItemW
GetCapture
GetFocus
SendMessageW
GetAsyncKeyState
SetTimer
KillTimer
PeekMessageW
TranslateMessage
DispatchMessageW
EnumThreadWindows
UpdateWindow
PostMessageW
MsgWaitForMultipleObjects
GetDC
ScrollWindowEx
GetWindowThreadProcessId
EnumChildWindows
gdi32
CreateRectRgn
BitBlt
ExtSelectClipRgn
OffsetClipRgn
SelectClipRgn
DeleteDC
DeleteObject
CreateSolidBrush
SelectObject
GetTextExtentExPointW
CreateDIBSection
CreateCompatibleBitmap
GetCurrentObject
CreateCompatibleDC
SetTextColor
GetDeviceCaps
GetCharacterPlacementW
GetGlyphOutlineW
GetTextExtentPoint32W
ExtTextOutW
GetTextMetricsW
CreateFontIndirectW
CreateRectRgnIndirect
ExtCreateRegion
CombineRgn
GetRegionData
CreateDIBitmap
EnumFontFamiliesExW
GetStockObject
RectVisible
SetBkMode
SetBkColor
SetDIBitsToDevice
comdlg32
GetOpenFileNameW
GetSaveFileNameW
shell32
SHGetPathFromIDListW
CommandLineToArgvW
ord21
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHBrowseForFolderW
SHGetDataFromIDListW
SHGetSettings
SHGetFileInfoW
DragQueryFileW
DragFinish
DragAcceptFiles
SHFileOperationW
SHGetSpecialFolderPathW
ole32
OleDuplicateData
RegisterDragDrop
RevokeDragDrop
CoTaskMemFree
StringFromIID
CoCreateInstance
OleUninitialize
OleInitialize
CoTaskMemAlloc
DoDragDrop
ReleaseStgMedium
imm32
ImmNotifyIME
ImmGetCompositionStringW
ImmGetContext
ImmSetCompositionFontW
ImmSetCompositionWindow
ImmReleaseContext
ImmAssociateContext
ImmAssociateContextEx
comctl32
ImageList_GetIconSize
ImageList_GetIcon
shlwapi
StrRetToBufW
PathCanonicalizeW
PathIsRelativeW
rpcrt4
UuidCreate
advapi32
EqualSid
RegOpenKeyExW
RegCloseKey
AllocateAndInitializeSid
GetTokenInformation
OpenProcessToken
FreeSid
RegQueryValueExW
oleaut32
SysFreeString
SysAllocString
Sections
.text Size: 2.4MB - Virtual size: 2.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.code Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 619KB - Virtual size: 619KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 33KB - Virtual size: 191KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.shared Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.appskin Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.srclibs Size: 437KB - Virtual size: 436KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 553KB - Virtual size: 552KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ