Static task
static1
Behavioral task
behavioral1
Sample
ScreenUpdateSync.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
ScreenUpdateSync.exe
Resource
win10v2004-20240802-en
General
-
Target
ScreenUpdateSync.exe
-
Size
330KB
-
MD5
85f9f11868fcc4d26da1a69ddd0e4584
-
SHA1
6346719db3557a3f5aac50c3baf4273fb3c04aab
-
SHA256
88fb97582559f24a7c42655a80e7131a57f23efbb5f04157d0f528b67332bff5
-
SHA512
2d1f1f954d0a328fdd16aa3796f284f29a8900ba1e3b45c8ab8135c8249ffb71a949d66f7b0fe288ab9ae72426bcc69ca97b00dda12ba3298dc567370a85b90a
-
SSDEEP
6144:lDKLfehk402hDdMr3NwGZx9iRBuIEHR9edN:lebeSl2g+kPw3Ex9edN
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ScreenUpdateSync.exe
Files
-
ScreenUpdateSync.exe.exe windows:5 windows x86 arch:x86
814691d689504a7b47ef0975d6b8ac56
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleAliasesLengthW
GetNumaProcessorNode
GetDefaultCommConfigW
GetConsoleAliasExesLengthA
InterlockedDecrement
QueryDosDeviceA
GetEnvironmentStringsW
InterlockedCompareExchange
GetComputerNameW
GetModuleHandleW
ReadConsoleW
ReadConsoleOutputA
SetCommState
GetPriorityClass
GetVolumeInformationA
LoadLibraryW
CopyFileW
FormatMessageW
GetSystemTimeAdjustment
DeleteVolumeMountPointW
HeapDestroy
GetFileAttributesA
SetConsoleMode
GetFileAttributesW
GetBinaryTypeA
GetLastError
GetLongPathNameW
GetProcAddress
SetStdHandle
LoadLibraryA
LocalAlloc
MoveFileA
FindAtomA
CreatePipe
GetModuleFileNameA
GetCommTimeouts
FreeEnvironmentStringsW
BuildCommDCBA
FatalAppExitA
WriteConsoleOutputAttribute
ReleaseMutex
HeapFree
HeapAlloc
HeapReAlloc
Sleep
ExitProcess
GetStartupInfoW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
HeapCreate
VirtualFree
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
WriteFile
GetStdHandle
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
GetCurrentThreadId
InitializeCriticalSectionAndSpinCount
GetModuleFileNameW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
RtlUnwind
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
HeapSize
GetLocaleInfoA
WideCharToMultiByte
LCMapStringA
MultiByteToWideChar
LCMapStringW
GetStringTypeA
GetStringTypeW
user32
GetFocus
Sections
.text Size: 195KB - Virtual size: 194KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 991KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.baxow Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.laj Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 118KB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ