www.pekj1403.com_sample.bin
- SHA256 00e2d805f73615bf814b946813ddfc9b284f26bb63277d317e4d4e1285282928
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
ainst86235863001.exe
Resource
win10v2004-20260513-en
windows10-2004-x64
1 signatures
150 seconds
Behavioral task
behavioral2
Sample
ainst86235863001.exe
Resource
win11-20260513-en
windows11-21h2-x64
1 signatures
150 seconds
General
- Target www.pekj1403.com_sample.bin
- Size 10.0MB
- Sample260606-sshcqahx21
- SHA256 00e2d805f73615bf814b946813ddfc9b284f26bb63277d317e4d4e1285282928
- MD5 667e3e8c18b6e9c37167575d9c81155b
- SHA1 03ffd276be43a28c167ab21831569bd11f0f63fd
- SHA512 ade4788eaa7822301e5b6e76636106d668acd788c72dfcc759d07e49c300660d3394ba4f2322f9d64faa96a080ff9fded1d8da2f3226d68708fb74fd0e54134a
- SSDEEP 196608:RpH1c9WizbJTb7sdFxaDM4mYwlwLHVazAiM0GoMBbFCw2GDMRKB9R1pcTU6D0Sos:P1itbxKxaWlwLHVakJz/bFCFwZ1mPD0W
- TLSH T166B633B87774D209D46FB57DD6100C87788FB9ACC025E80BE3BD3759BFA59A8E40A850
- MD5 SHA1 SHA512 SSDEEP TLSH
Score
3/10
Malware Config
Signatures
- Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/ainst86235863001.exe
File Explorer
-
www.pekj1403.com_sample.bin.zip 10.0MB
-
ainst86235863001.exe.exe 71.7MB
ainst86235863001.exe
- IMPHASH e611cb40dae30a74fa3f15a0e816a66a
- SHA256 b821932b981f8c5c6ba8069cf34e5b024f86a186f1fa2f505f2170804dc0d5b0
- MD5 41e03d0207dcbb05a21ff1f5e6632dc8
- SHA1 67f830bdc86949a7dc7da928c41ad500213cae9c
- SHA512 7b6c4677c52bdd2c0c20cafd49a67ebafcc4e9d155eb23c782ff3e2276ff32c7bc146f83767994a1eecf1a72b61f16a90219c155aab436e7f489f9dd535d7c0d
- SSDEEP 196608:xd/Rsi4kq2QB9+L2Dhb6Z/LzEnSQ5Ps6EgcA6Z6OTXR6Rn82C1gYHJgIB:LRpQBhDO4y8RAvjB
- TLSH T19EF7954ABB11CD93E4159239D89B8BE03372ECB48BA6930333587B3D7EBB2944DD1594
- MD5 SHA1 SHA512 SSDEEP TLSH
-
Unsigned PE
Checks for missing Authenticode signature.
Minor OS version
2
Major OS version
5
Entry point
87720
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB paths
gdiplus
GdipDisposeImage
GdipCreateHBITMAPFromBitmap
GdiplusShutdown
GdiplusStartup
GdipCreateBitmapFromStream
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
comdlg32
GetOpenFileNameW
GetSaveFileNameW
CommDlgExtendedError
winmm
PlaySoundW
imm32
ImmGetDefaultIMEWnd
kernel32
LoadLibraryA
GetProcAddress
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpW
SetCurrentDirectoryW
GetSystemDirectoryW
DeleteFileW
lstrcpynW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
SizeofResource
LockResource
LoadResource
SetEnvironmentVariableA
CompareStringW
GetProcessHeap
SetEndOfFile
GetStringTypeW
SetFilePointer
WriteConsoleW
ReadFile
LCMapStringW
IsValidCodePage
GetOEMCP
GetCPInfo
SetStdHandle
GetSystemTimeAsFileTime
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
FlsAlloc
GetCurrentThreadId
SetLastError
FlsFree
FlsSetValue
FlsGetValue
GetEnvironmentStringsW
FreeEnvironmentStringsW
HeapCreate
GetVersion
HeapSetInformation
FlushFileBuffers
GetConsoleMode
GetConsoleCP
WriteFile
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetStdHandle
SetHandleCount
LeaveCriticalSection
EnterCriticalSection
RtlUnwindEx
ExitProcess
HeapSize
Sleep
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
FindResourceW
CloseHandle
lstrcpyW
GetLastError
CreateMutexW
lstrcmpiW
GetSystemDefaultLangID
GetEnvironmentVariableW
lstrlenW
GetModuleFileNameW
GetLocalTime
ExpandEnvironmentStringsA
EncodePointer
DecodePointer
HeapAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlPcToFileHeader
RaiseException
GetFileType
PeekNamedPipe
GetFileInformationByHandle
FileTimeToLocalFileTime
FileTimeToSystemTime
HeapReAlloc
GetStartupInfoW
GetCommandLineW
FindFirstFileW
WideCharToMultiByte
GetACP
SetErrorMode
FindClose
GetCurrentProcess
FreeLibrary
SetCurrentDirectoryA
MultiByteToWideChar
lstrcatW
GetCurrentDirectoryA
GetCurrentDirectoryW
GetTempPathW
CreateFileW
GetVersionExA
GetModuleHandleA
LoadLibraryW
GetSystemDirectoryA
GetModuleHandleW
GetVersionExW
GetLocaleInfoW
VirtualAlloc
HeapFree
user32
SetWindowTextW
TrackPopupMenuEx
EnableMenuItem
CreateIconIndirect
GetIconInfo
GetRawInputDeviceInfoW
GetRawInputDeviceList
LoadIconW
SetFocus
EndDialog
GetDlgItemInt
IsWindowEnabled
SetDlgItemInt
SystemParametersInfoW
GetWindowRect
GetDlgItem
EnableWindow
DefWindowProcW
PostQuitMessage
DestroyMenu
EndPaint
BeginPaint
ReleaseDC
GetDC
SetWindowPos
GetSystemMetrics
GetClassNameW
GetWindowTextW
KillTimer
PostMessageW
TrackPopupMenu
CheckMenuItem
ModifyMenuW
SetMenuDefaultItem
GetCursorPos
SetForegroundWindow
GetForegroundWindow
DestroyWindow
CreateDialogParamW
GetSubMenu
LoadMenuW
RegisterWindowMessageW
RegisterHotKey
UnregisterHotKey
UpdateWindow
GetWindowTextLengthW
SetLayeredWindowAttributes
CreateWindowExW
RegisterClassExW
LoadCursorW
DispatchMessageW
IsWindow
SendMessageA
EnumChildWindows
GetWindowLongA
CallWindowProcW
GetMonitorInfoW
EnumDisplayMonitors
GetWindowLongPtrW
SetWindowLongPtrW
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
DialogBoxIndirectParamW
GetParent
ScreenToClient
MonitorFromPoint
GetMonitorInfoA
GetClientRect
TranslateMessage
GetMessageW
DestroyIcon
CopyIcon
DialogBoxParamW
MessageBoxW
LoadImageW
SetTimer
MessageBeep
keybd_event
SendMessageW
GetKeyState
FindWindowW
GetDlgItemTextW
SetDlgItemTextW
wsprintfW
SendDlgItemMessageW
ShowWindow
gdi32
DeleteDC
CreateCompatibleDC
GetStockObject
GetObjectA
CreateFontIndirectA
GetDIBColorTable
DeleteObject
SetDIBits
SelectObject
SetBkColor
TextOutW
SetTextColor
GetDeviceCaps
GetDIBits
GetObjectW
advapi32
RegQueryValueExA
RegOpenKeyExA
RegCloseKey
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegCreateKeyExW
RegOpenKeyExW
shell32
Shell_NotifyIconW
DragFinish
DragQueryFileW
DragAcceptFiles
ShellExecuteW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
ole32
CreateStreamOnHGlobal
CoUninitialize
CoInitialize
CoCreateInstance
shlwapi
StrCmpNIW
Name
.text
Size
166KB
Virtual Size
165KB
Characteristics
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
Name
.rdata
Size
68KB
Virtual Size
67KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.data
Size
71.4MB
Virtual Size
71.4MB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
Name
.pdata
Size
7KB
Virtual Size
6KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.rsrc
Size
44KB
Virtual Size
44KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Name
.reloc
Size
2KB
Virtual Size
1KB
Characteristics
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
generic
count=1, id=152, version=20115,
count=144, id=170, productName=VS2010 SP1 build 40219, version=40219,
count=10, id=158, productName=VS2010 SP1 build 40219, version=40219,
count=57, id=171, productName=VS2010 SP1 build 40219, version=40219,
count=3, id=131, productName=VS2008 SP1 build 30729, version=30729,
count=1, id=135, version=30729,
count=1, id=136, version=30729,
count=29, id=147, productName=VS2008 SP1 build 30729, version=30729,
count=344, id=1, productName=Unmarked objects,
count=15, id=175, version=40219,
count=1, id=154, productName=VS2010 SP1 build 40219, version=40219,
count=1, id=157, productName=VS2010 SP1 build 40219, version=40219,