Auto Fishing[.]rar | Triage

Resubmissions

14/10/2024, 23:54

241014-3xv5gswgqn 3

Sharing

Copy URL Twitter E-mail

General

Target

Auto Fishing.rar
Size

513KB
MD5

f59efc85be131429d8f849441f8a93eb
SHA1

4a5b85498acc6310cd39b605625d3c695af79a30
SHA256

4e3adf0c569fa3d8ecc970663ff844e8aa7237fe9adfe29d3f7dd038ab404df5
SHA512

69ac72c511674b97d77c3221723e140e2c50d04fba2e874c78dcefb57b0830f19dd2341ae9b416851209f06b19f59be5adb5e4732bd14bb3f7047ea2b8bc7764
SSDEEP

12288:JgNzDD1p6hKh8oXp+11vrTC4RFRNKIuKt7IHPvb:JghPWhKhpZ+HrTHR0bK6HPj

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/Auto Fishing/Auto Fishing.exe

Files

Auto Fishing.rar
.rar
Auto Fishing/Auto Fishing Script.ahk
Auto Fishing/Auto Fishing.exe
.exe windows:5 windows x64 arch:x64

48e414e431433a62713440d22abb8343

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DEBUG_STRIPPED

Imports

kernel32

GetModuleHandleA
GetProcAddress

wsock32

gethostbyname

winmm

mixerOpen

version

VerQueryValueW

comctl32

ImageList_Create

psapi

GetModuleBaseNameW

wininet

InternetOpenW

user32

GetDC

gdi32

BitBlt

comdlg32

GetSaveFileNameW

advapi32

RegCloseKey

shell32

DragFinish

ole32

CoGetObject

oleaut32

SafeArrayGetLBound

Sections

.MPRESS1
Size: 437KB - Virtual size: 1.2MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.MPRESS2
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 46KB - Virtual size: 45KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Auto Fishing/Screenshots/screenshot.png
.png
Auto Fishing/gdip_All.ahk