Air Force Missions[.]exe

Resubmissions

11/09/2024, 10:18

240911-mb5h2avckk 3

11/09/2024, 10:18

240911-mbx4yswanf 3

11/09/2024, 10:17

240911-mbfvnswalg 3

Sharing

Copy URL Twitter E-mail

General

Target

Air Force Missions.exe
Size

696KB
MD5

550267e7f9c775b53d3663c2e6a7b13d
SHA1

b61b36747d1f5de7e31859e596391e25b4e5f908
SHA256

440684ccbde752312461de20d29b3325e85275c6c8f956f3d2306f68227e6ad4
SHA512

17399af4e4e55e1f0879993f410e7ac08259df40e9b6a3441b08b512c7fd8433b13a87f900f411de96c11280cf49deeda075cb002b25e7a59607d5b3d3de1d0b
SSDEEP

12288:dxfrZmAzmxbrFL4QnfsRnUbo15npLFr2Khozq04Ec3YR:Bz2KP1DZr2b+Rj3YR

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Air Force Missions.exe

Files

Air Force Missions.exe
.exe windows:4 windows x86 arch:x86

905dafd2cadb2abd9469be0763d64564

Headers

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

winmm

timeEndPeriod
timeGetTime
joyGetPosEx
joyGetDevCapsA
joyGetNumDevs
timeBeginPeriod

wininet

InternetOpenA
HttpOpenRequestA
InternetCloseHandle
InternetConnectA
HttpSendRequestA
InternetAttemptConnect

bass

BASS_Pause
BASS_Init
BASS_ChannelPlay
BASS_SampleFree
BASS_ChannelIsActive
BASS_Set3DPosition
BASS_Set3DFactors
BASS_Start
BASS_SampleLoad
BASS_MusicFree
BASS_SampleGetChannel
BASS_SampleSetInfo
BASS_SetEAXParameters
BASS_Apply3D
BASS_Update
BASS_ChannelSet3DPosition
BASS_ChannelSetPosition
BASS_MusicGetLength
BASS_Stop
BASS_ChannelStop
BASS_MusicLoad
BASS_Free
BASS_GetVersion
BASS_SampleGetInfo
BASS_ChannelGetInfo
BASS_ChannelSetAttributes
BASS_SetConfig
BASS_ChannelSetFlags

kernel32

GetFileSize
MapViewOfFile
CreateFileMappingA
CreateFileW
GetPrivateProfileStringA
WritePrivateProfileStringA
GetCurrentDirectoryA
GetFullPathNameA
GetDriveTypeA
GetVolumeInformationA
SetCurrentDirectoryA
GetModuleFileNameA
UnmapViewOfFile
FindNextFileA
lstrlenA
GetVersionExA
Sleep
IsProcessorFeaturePresent
SetEnvironmentVariableA
CompareStringW
CompareStringA
SetEndOfFile
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
FlushFileBuffers
SetStdHandle
CreateFileA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
GetFileType
SetHandleCount
LCMapStringW
LCMapStringA
GetConsoleMode
GetConsoleCP
WideCharToMultiByte
CloseHandle
FindClose
FindFirstFileA
SetEnvironmentVariableW
HeapReAlloc
VirtualAlloc
SetFilePointer
ReadFile
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetProcAddress
GetModuleHandleA
ExitProcess
GetLastError
HeapFree
HeapAlloc
GetCommandLineA
GetProcessHeap
GetStartupInfoA
RaiseException
RtlUnwind
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapSize
GetCPInfo
GetACP
GetOEMCP
WriteFile
GetStdHandle
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
LoadLibraryA
InitializeCriticalSection
HeapDestroy
HeapCreate
VirtualFree
MultiByteToWideChar

user32

RegisterHotKey
DialogBoxParamA
DestroyWindow
GetMessageA
IsIconic
SetForegroundWindow
LoadIconA
SetFocus
WaitMessage
GetDC
TranslateMessage
UnregisterClassA
CreateWindowExA
PeekMessageA
ReleaseDC
DefWindowProcA
SetWindowPos
ShowWindow
DispatchMessageA
SystemParametersInfoA
ReleaseCapture
GetSystemMetrics
UpdateWindow
AdjustWindowRect
UnregisterHotKey
ChangeDisplaySettingsA
GetDesktopWindow
RegisterClassA
ShowCursor
GetWindowRect
SetCursorPos
GetCursorPos
SendMessageA
MessageBoxA
SendDlgItemMessageA
EnumDisplaySettingsA
EndDialog

gdi32

PatBlt

advapi32

RegOpenKeyA
RegQueryValueExA
RegCreateKeyExA
RegSetValueExA
RegCloseKey

shell32

ShellExecuteA

d3d8

Direct3DCreate8

Sections

.text
Size: 508KB - Virtual size: 504KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 100KB - Virtual size: 97KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 28KB - Virtual size: 29.5MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.data1
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 52KB - Virtual size: 48KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

905dafd2cadb2abd9469be0763d64564

Headers

File Characteristics

Imports

winmm

wininet

bass

kernel32

user32

gdi32

advapi32

shell32

d3d8

Sections

.text Size: 508KB - Virtual size: 504KB

.rdata Size: 100KB - Virtual size: 97KB

.data Size: 28KB - Virtual size: 29.5MB

.data1 Size: 4KB - Virtual size: 2KB

.rsrc Size: 52KB - Virtual size: 48KB

.text
Size: 508KB - Virtual size: 504KB

.rdata
Size: 100KB - Virtual size: 97KB

.data
Size: 28KB - Virtual size: 29.5MB

.data1
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 52KB - Virtual size: 48KB