Scam_Simulator[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Scam_Simulator.exe
Size

1.8MB
MD5

764ac27da955a33b3816ff6d5318b591
SHA1

af680d9a31b94c03961959b67265b3df00bb7108
SHA256

4bf449cc380491a5f8faf93ddfd800ee60b0361fec57f281a6eb83418388425a
SHA512

46a2bfd922949e5efc21faa9c640af5ffde132b28ef0cecd8632a2ea40742ce048e2c47295aa67df23c131cd4e88e0e9a09ce096cba29b7a64530ed646bfda6f
SSDEEP

49152:oykXsjAP6vi8Y15R9a5mnZnTnZjJaE60:4Fp

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Scam_Simulator.exe

Files

Scam_Simulator.exe
.exe windows:6 windows x64 arch:x64

360c21722e9b0270637d39161ad4d8f4

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

Scam_Simulator.pdb

Imports

bcryptprimitives

ProcessPrng

api-ms-win-core-synch-l1-2-0

WaitOnAddress
WakeByAddressAll
WakeByAddressSingle

bcrypt

BCryptGenRandom

advapi32

SystemFunction036

gdi32

ChoosePixelFormat
DescribePixelFormat
CreateBitmap
CreateDIBSection
SwapBuffers
DeleteObject
SetPixelFormat

kernel32

GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
GetCurrentThreadId
CloseHandle
CreateEventA
WaitForSingleObject
GetModuleHandleW
GetProcAddress
LoadLibraryA
FreeLibrary
GetLastError
GlobalLock
GlobalSize
GlobalAlloc
GlobalUnlock
AddVectoredExceptionHandler
SetThreadStackGuarantee
GetCurrentThread
SwitchToThread
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
SetLastError
GetCurrentDirectoryW
GetEnvironmentVariableW
GetCurrentProcess
GetStdHandle
GetCurrentProcessId
GetSystemTimePreciseAsFileTime
HeapFree
HeapReAlloc
lstrlenW
ReleaseMutex
GetProcessHeap
HeapAlloc
GetConsoleMode
FormatMessageW
MultiByteToWideChar
WriteConsoleW
CreateThread
GetModuleHandleA
WaitForSingleObjectEx
CreateMutexA

ole32

CoCreateInstance
CoInitializeEx

api-ms-win-shcore-scaling-l1-1-1

GetDpiForMonitor

user32

SetClipboardData
EmptyClipboard
GetClipboardData
CloseClipboard
OpenClipboard
SetProcessDPIAware
SetWindowLongPtrA
PeekMessageW
PostMessageW
TranslateMessage
DispatchMessageW
DestroyWindow
ClipCursor
ShowCursor
LoadCursorW
SetCursor
GetClientRect
GetWindowLongA
AdjustWindowRectEx
SetWindowPos
GetSystemMetrics
ShowWindow
ClientToScreen
SetRect
GetKeyState
GetWindowLongPtrA
DefWindowProcW
GetRawInputData
PostQuitMessage
GetDC
ReleaseDC
CreateIconIndirect
SendMessageW
LoadIconW
RegisterClassW
CreateWindowExW
RegisterRawInputDevices
MonitorFromPoint

ntdll

RtlNtStatusToDosError
NtWriteFile

vcruntime140

__C_specific_handler
__current_exception
__current_exception_context
memcmp
memmove
memset
memcpy
_CxxThrowException
__CxxFrameHandler3

api-ms-win-crt-math-l1-1-0

fmod
trunc
cosf
sinf
ceilf
__setusermatherr

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

_set_app_type
_seh_filter_exe
_c_exit
_configure_narrow_argv
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
exit
_exit
__p___argc
__p___argv
_cexit
_crt_atexit
_register_thread_local_exe_atexit_callback
_register_onexit_function
_initialize_onexit_table
terminate

api-ms-win-crt-stdio-l1-1-0

_set_fmode
__p__commode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

free
_set_new_mode

Sections

.text
Size: 1.3MB - Virtual size: 1.3MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 386KB - Virtual size: 385KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 7KB - Virtual size: 8KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 86KB - Virtual size: 85KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

360c21722e9b0270637d39161ad4d8f4

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

bcryptprimitives

api-ms-win-core-synch-l1-2-0

bcrypt

advapi32

gdi32

kernel32

ole32

api-ms-win-shcore-scaling-l1-1-1

user32

ntdll

vcruntime140

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 1.3MB - Virtual size: 1.3MB

.rdata Size: 386KB - Virtual size: 385KB

.data Size: 7KB - Virtual size: 8KB

.pdata Size: 86KB - Virtual size: 85KB

.reloc Size: 5KB - Virtual size: 4KB

.text
Size: 1.3MB - Virtual size: 1.3MB

.rdata
Size: 386KB - Virtual size: 385KB

.data
Size: 7KB - Virtual size: 8KB

.pdata
Size: 86KB - Virtual size: 85KB

.reloc
Size: 5KB - Virtual size: 4KB