simas1.rar
- SHA256 5537f58e3c041fb2fbee1b76c17fe2cfb64be64e9ff6ef47e4a8f84018605b4a
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
simas.exe
Resource
win10v2004-20240709-en
windows10-2004-x64
4 signatures
300 seconds
General
- Target simas1.rar
- Size 1.6MB
- Sample240720-twypjsvgjp
- SHA256 5537f58e3c041fb2fbee1b76c17fe2cfb64be64e9ff6ef47e4a8f84018605b4a
- MD5 d7ee856c4065ebe3f8b304efdb08668d
- SHA1 7fdcce3977161ee609780abff8c93bb01cafaa73
- SHA512 342631cb921992403c49044a9e39affed3c38447941d9bbf2fbc5179d66902f700a63c4390b85f830d757bf2776d31e2170d01ff22f2c3e6230360adc31f598d
- SSDEEP 49152:4HEZ3G/y3/PHHV6wEgVLReYj2HN6UF54amm8ngy4SuQz:DZx3F6wnNeYj2EUFaaIf04
- MD5 SHA1 SHA512 SSDEEP
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/simas.exe
File Explorer
-
simas1.rar.rar 1.6MB
-
simas.exe.exe 633.6MB
simas.exe
- IMPHASH fe869a6c2e8725b941aa2783a1e69469
- SHA256 6bf7e2913edbb6a8fa67849bb7fe7a15b3514da1bcc387e85954ed1315fd5e6f
- MD5 9e2c7292e4208894e629e695f976e19b
- SHA1 e0193cd527a71d67bdd2440d1ac98065c9b0520d
- SHA512 a160ed48087b0e7df07d2fb7ac0e7f61b371b17eff74ba4f6059bc210045183c0be51884055a19e5747292f8e578ea0749665e34cb3cf0eeb35d1759b6381d30
- SSDEEP 98304:wmJVD97VAOltrWJP8SDUTYAA56RoeXN3cJvPd4Fm0fP0:wmJ7hAatrWJP8S+YAfSkN+vPji0
- MD5 SHA1 SHA512 SSDEEP
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
0
Major OS version
4
Entry point
1871127
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
PDB paths
kernel32
FindFirstFileA
GlobalMemoryStatus
FlushFileBuffers
IsBadCodePtr
VirtualQuery
GetSystemInfo
VirtualProtect
GetLocaleInfoA
GetCurrentDirectoryA
GetStringTypeW
GetStringTypeA
GetCPInfo
GetOEMCP
GetACP
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
SetUnhandledExceptionFilter
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
UnhandledExceptionFilter
GetModuleFileNameA
GetStdHandle
CloseHandle
GetLastError
CreateMutexA
VirtualAlloc
VirtualFree
HeapCreate
HeapDestroy
LCMapStringW
MultiByteToWideChar
WideCharToMultiByte
LCMapStringA
TlsAlloc
TlsGetValue
TlsSetValue
SetLastError
TlsFree
HeapSize
HeapReAlloc
GetFileType
RaiseException
RtlUnwind
Sleep
GetExitCodeThread
CreateThread
IsBadWritePtr
IsBadReadPtr
OutputDebugStringA
QueryPerformanceFrequency
GetLocalTime
QueryPerformanceCounter
GetTickCount
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
ConvertThreadToFiber
SetThreadPriority
SuspendThread
ResumeThread
GetCurrentThreadId
DeleteFiber
SwitchToFiber
WaitForSingleObject
TerminateThread
ExitThread
GetCurrentThread
GetLogicalDrives
GetDriveTypeA
SetErrorMode
FindClose
GetDiskFreeSpaceExA
GetVolumeInformationA
GetFullPathNameA
GetFileSize
CreateFileA
ReadFile
SetFilePointer
WriteFile
SetEndOfFile
FindNextFileA
CreateDirectoryA
RemoveDirectoryA
DeleteFileA
ReleaseSemaphore
CreateSemaphoreA
GetProcAddress
LoadLibraryA
FreeLibrary
ExitProcess
GetModuleHandleA
TerminateProcess
GetCurrentProcess
HeapFree
HeapAlloc
GetStartupInfoA
GetCommandLineA
GetVersionExA
user32
SetWindowPos
GetWindowRect
GetCursorPos
SetCursorPos
ClipCursor
GetClientRect
PeekMessageA
TranslateMessage
DispatchMessageA
FindWindowA
GetWindowPlacement
ShowWindow
SetForegroundWindow
LoadImageA
LoadCursorA
RegisterClassA
GetSystemMetrics
CallWindowProcA
SetWindowLongA
DefWindowProcA
ScreenToClient
PostQuitMessage
GetDesktopWindow
GetDC
PostMessageA
KillTimer
WindowFromPoint
PtInRect
MapWindowPoints
AdjustWindowRect
SetTimer
IsWindow
GetFocus
MessageBoxA
ShowCursor
CreateWindowExA
GetForegroundWindow
gdi32
SetDeviceGammaRamp
GetStockObject
GetDeviceGammaRamp
ole32
CoInitialize
CoUninitialize
CoCreateInstance
??0pddiColour@@QAE@HHHH@Z
??0pddiColour@@QAE@I@Z
??0pddiColour@@QAE@XZ
??0pddiRect@@QAE@HHHH@Z
??0pddiRect@@QAE@XZ
??4pddiColour@@QAEAAU0@ABU0@@Z
??4pddiRect@@QAEAAV0@ABV0@@Z
??BpddiColour@@QAEIXZ
?Alpha@pddiColour@@QBEHXZ
?Blue@pddiColour@@QBEHXZ
?Green@pddiColour@@QBEHXZ
?Intensity@pddiColour@@QBEHXZ
?Red@pddiColour@@QBEHXZ
?Set@pddiColour@@QAEXHHHH@Z
?Set@pddiRect@@QAEXHHHH@Z
?SetAlpha@pddiColour@@QAEXH@Z
?SetBlue@pddiColour@@QAEXH@Z
?SetGreen@pddiColour@@QAEXH@Z
?SetRed@pddiColour@@QAEXH@Z
Name
.text
Size
1.9MB
Virtual Size
1.9MB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
312KB
Virtual Size
311KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
112KB
Virtual Size
576KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.nndkm
Size
276KB
Virtual Size
276KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.tadb
Size
720KB
Virtual Size
719KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.idata
Size
8KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
424KB
Virtual Size
422KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
generic
count=5, id=39, version=9162,
count=45, id=64, productName=VS2002 (.NET) build 9466, version=9466,
count=1, id=11, productName=VS98 (6.0) build 8168, version=8168,
count=4, id=25, productName=VS2002 (.NET) build 9466, version=9466,
count=166, id=28, productName=VS2002 (.NET) build 9466, version=9466,
count=302, id=29, productName=VS2002 (.NET) build 9466, version=9466,
count=1, id=28, version=9178,
count=9, id=25, version=9210,
count=181, id=1, productName=Unmarked objects,
count=1, id=29, version=8830,
count=518, id=44, version=9466,
count=1, id=63, productName=VS2002 (.NET) build 9466, version=9466,
count=1, id=69, productName=VS2002 (.NET) build 9466, version=9466,
count=1, id=61, productName=VS2002 (.NET) build 9466, version=9466,