Static task
static1
Behavioral task
behavioral1
Sample
ScoopyNG/ScoopyNG.exe
Resource
win10v2004-20240802-en
General
-
Target
ScoopyNG.zip
-
Size
29KB
-
MD5
a0a756bd310bcd4fd3b86ea179f0a81e
-
SHA1
72a03a64dfb91292dc0c14297b81fa5da4c6a499
-
SHA256
ab68e945bceab536f637b0a3ccaae7a9eb831a07da89eb3abb46728bcdf286e3
-
SHA512
8deace4e845d5c3f0e64f0d6e4811bb62b8f191e9603e790d48ee9744d2158c2ba6db2b8f90feab33267144079610eeef0e828b328b41a705f9ce9d3c0437e11
-
SSDEEP
768:73HajUGSIHdO2ehE6x1tPDmW9T9afQESlWQidT:z1In5G7PDmWSfQP/2T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ScoopyNG/ScoopyNG.exe
Files
-
ScoopyNG.zip.zip
-
ScoopyNG/License.txt
-
ScoopyNG/ScoopyNG.c
-
ScoopyNG/ScoopyNG.exe.exe windows:4 windows x86 arch:x86
81404cc9f15f9b803623a8cda8753bf5
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetProcAddress
GetModuleHandleA
GetCommandLineA
HeapFree
GetVersionExA
HeapAlloc
GetProcessHeap
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
RtlUnwind
ExitProcess
WriteFile
GetStdHandle
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetLastError
GetEnvironmentStringsW
SetHandleCount
GetFileType
GetStartupInfoA
DeleteCriticalSection
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InterlockedDecrement
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
Sleep
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LoadLibraryA
InitializeCriticalSection
VirtualAlloc
HeapReAlloc
GetConsoleCP
GetConsoleMode
FlushFileBuffers
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetFilePointer
HeapSize
CloseHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetStdHandle
CreateFileA
Sections
.text Size: 36KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE