40c89ba2c4705e0bc78906c2c67a216ce2c8f35db71f9266bb22f951916f9f1c
- SHA256 40c89ba2c4705e0bc78906c2c67a216ce2c8f35db71f9266bb22f951916f9f1c
Password
infected
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
simas.exe
Resource
win7-20240708-en
windows7-x64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
simas.exe
Resource
win10v2004-20240704-en
windows10-2004-x64
0 signatures
150 seconds
General
- Target 40c89ba2c4705e0bc78906c2c67a216ce2c8f35db71f9266bb22f951916f9f1c
- Size 2.5MB
- Sample240719-1c53va1bkr
- SHA256 40c89ba2c4705e0bc78906c2c67a216ce2c8f35db71f9266bb22f951916f9f1c
- MD5 ddc97a7ab7dbd853124e0696d3e176ee
- SHA1 2dc39aee3542996b092e878d1a249a1dea7e4792
- SHA512 7455737c332f41d89e29f63e7d4f0c760d73ef4eaf80858e61cec4ffb35746d9db2c452c835815d76f2339fb31d37c65b61e8bc78967ebe9d326b491eba1e807
- SSDEEP 49152:UBgeYGOb5t6Wdn89Pu90RzQJmkmresvidKERc52O4/HGayYwJHh0CCwcL:UBgfG2t6Wd89WaMtGendKERc52BvGeGg
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/simas.exe
File Explorer
-
40c89ba2c4705e0bc78906c2c67a216ce2c8f35db71f9266bb22f951916f9f1c.zip 2.5MB
-
simas.exe.exe 633.6MB
simas.exe
- IMPHASH fe869a6c2e8725b941aa2783a1e69469
- SHA256 f3c6e0e66df7c335f28b0db0a15c8e77986a1d0a57ffda99b787a6aaa03b8041
- MD5 50d8f8e2fffcb5d00f53c2e2bced7264
- SHA1 2bbabd5d67e2eee8c129e1c686ffb26cc02bd7a9
- SHA512 f483464810fafc54c7c9630be92e8e830fe082e6a32ff4ffd27bb00c8fa39ce508c5f8e4aa2a69fc6995223d43206dc0386091050c0916a24a342bccd3fc0eb9
- SSDEEP 98304:5mJVD97VAOltrWJP8SDUTYAA56RoeXN3cJvPd4Fm0fA0:5mJ7hAatrWJP8S+YAfSkN+vPjt0
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1871127
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
FindFirstFileA
GlobalMemoryStatus
FlushFileBuffers
IsBadCodePtr
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetCurrentDirectoryA
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
GetACP
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
SetUnhandledExceptionFilter
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
CloseHandle
GetLastError
CreateMutexA
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
TlsAlloc
TlsGetValue
TlsSetValue
SetLastError
TlsFree
HeapSize
HeapReAlloc
GetFileType
RaiseException
RtlUnwind
Sleep
GetExitCodeThread
CreateThread
IsBadWritePtr
IsBadReadPtr
OutputDebugStringA
QueryPerformanceFrequency
GetLocalTime
QueryPerformanceCounter
GetTickCount
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ConvertThreadToFiber
SetThreadPriority
SuspendThread
ResumeThread
GetCurrentThreadId
DeleteFiber
SwitchToFiber
WaitForSingleObject
TerminateThread
ExitThread
GetCurrentThread
GetLogicalDrives
GetDriveTypeA
SetErrorMode
FindClose
GetDiskFreeSpaceExA
GetVolumeInformationA
GetFullPathNameA
GetFileSize
CreateFileA
ReadFile
SetFilePointer
WriteFile
SetEndOfFile
FindNextFileA
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
ReleaseSemaphore
CreateSemaphoreA
GetProcAddress
LoadLibraryA
FreeLibrary
ExitProcess
GetModuleHandleA
TerminateProcess
GetCurrentProcess
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersionExA
user32
SetWindowPos
GetWindowRect
GetCursorPos
SetCursorPos
ClipCursor
GetClientRect
PeekMessageA
TranslateMessage
DispatchMessageA
FindWindowA
GetWindowPlacement
ShowWindow
SetForegroundWindow
LoadImageA
LoadCursorA
RegisterClassA
GetSystemMetrics
CallWindowProcA
SetWindowLongA
DefWindowProcA
ScreenToClient
PostQuitMessage
GetDesktopWindow
GetDC
PostMessageA
KillTimer
WindowFromPoint
PtInRect
MapWindowPoints
AdjustWindowRect
SetTimer
IsWindow
GetFocus
MessageBoxA
ShowCursor
CreateWindowExA
GetForegroundWindow
gdi32
SetDeviceGammaRamp
GetStockObject
GetDeviceGammaRamp
ole32
CoInitialize
CoUninitialize
CoCreateInstance
??0pddiColour@@QAE@HHHH@Z
??0pddiColour@@QAE@I@Z
??0pddiColour@@QAE@XZ
??0pddiRect@@QAE@HHHH@Z
??0pddiRect@@QAE@XZ
??4pddiColour@@QAEAAU0@ABU0@@Z
??4pddiRect@@QAEAAV0@ABV0@@Z
??BpddiColour@@QAEIXZ
?Alpha@pddiColour@@QBEHXZ
?Blue@pddiColour@@QBEHXZ
?Green@pddiColour@@QBEHXZ
?Intensity@pddiColour@@QBEHXZ
?Red@pddiColour@@QBEHXZ
?Set@pddiColour@@QAEXHHHH@Z
?Set@pddiRect@@QAEXHHHH@Z
?SetAlpha@pddiColour@@QAEXH@Z
?SetBlue@pddiColour@@QAEXH@Z
?SetGreen@pddiColour@@QAEXH@Z
?SetRed@pddiColour@@QAEXH@Z
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
312KB
Virtual Size
311KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
112KB
Virtual Size
576KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.nndkm
Size
276KB
Virtual Size
276KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.tadb
Size
720KB
Virtual Size
719KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
484KB
Virtual Size
482KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=5, id=39, version=9162,
count=45, id=64, productName=VS2002 (.NET) build 9466, version=9466,
count=1, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=4, id=25, productName=VS2002 (.NET) build 9466, version=9466,
count=166, id=28, productName=VS2002 (.NET) build 9466, version=9466,
count=302, id=29, productName=VS2002 (.NET) build 9466, version=9466,
count=1, id=28, version=9178,
count=9, id=25, version=9210,
count=181, id=1, productName=Unmarked objects,
count=1, id=29, version=8830,
count=518, id=44, version=9466,
count=1, id=63, productName=VS2002 (.NET) build 9466, version=9466,
count=1, id=69, productName=VS2002 (.NET) build 9466, version=9466,
count=1, id=61, productName=VS2002 (.NET) build 9466, version=9466,