sunwukongs[.]exe | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
sunwukongs.exe
Size 3.0MB
Sample260607-prjmlsez4x
SHA256 0ab83feefb3ea1ba67dd9834bb489ca3c9ad311a49f3afa1e1ba9b72de22ef76
MD5 b3a00a3f8432a34f459614aa5dce55ee
SHA1 43da4180926c5fdfcc598b5fab2aa29d1ab8a71e
SHA512 dcacef98ff334ec08b1c9014db3d85aea8cb37641d20dc14b856dd7dfcfc5f6b9c14321fcbcf52c761d44cdadca07207df979c2f77d5f86a6d29966c092c269e
SSDEEP 98304:vwgOv4UTgr0yKGviNz64TQIXQnMg1Faz01:YlvJTgrKGvi56QQnMg1FG01
TLSH
T135E5331E919CEEE3E5C677F4F96ADC5361C134300BA944EA3278874EE874AF749B4680
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sunwukongs.exe

File Explorer

sunwukongs.exe

.exe 3.0MB

sunwukongs.exe

IMPHASH 1208a089df3cde2ba03d4b024b77031f
SHA256 0ab83feefb3ea1ba67dd9834bb489ca3c9ad311a49f3afa1e1ba9b72de22ef76
MD5 b3a00a3f8432a34f459614aa5dce55ee
SHA1 43da4180926c5fdfcc598b5fab2aa29d1ab8a71e
SHA512 dcacef98ff334ec08b1c9014db3d85aea8cb37641d20dc14b856dd7dfcfc5f6b9c14321fcbcf52c761d44cdadca07207df979c2f77d5f86a6d29966c092c269e
SSDEEP 98304:vwgOv4UTgr0yKGviNz64TQIXQnMg1Faz01:YlvJTgrKGvi56QQnMg1FG01
TLSH
T135E5331E919CEEE3E5C677F4F96ADC5361C134300BA944EA3278874EE874AF749B4680
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5280

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

FindFirstFileExA ConnectNamedPipe OpenSemaphoreA CloseHandle FindClose GetProcessId QueryPerformanceCounter CreateMutexW CreateSemaphoreA GetEnvironmentStrings GetProcessHeap OpenEventW QueryPerformanceFrequency GetModuleFileNameW ReleaseSemaphore GetVersionExW CopyFileA DeleteFileA OutputDebugStringW GetProcessTimes FindFirstFileExW VirtualQueryEx ResetEvent GetSystemDirectoryA CreateNamedPipeA GetLocalTime FillConsoleOutputCharacterA CreateNamedPipeW DisableThreadLibraryCalls GetComputerNameA GetLastError CreateFileW OpenProcess FindFirstFileW GetLocaleInfoA GetTimeZoneInformation lstrlenW HeapAlloc FreeEnvironmentStringsW FillConsoleOutputCharacterW GetFileSize GetModuleHandleW SetThreadAffinityMask CreateSemaphoreW GetCommandLineW GetModuleHandleA GetCurrentPackageId FlushInstructionCache WriteConsoleW SuspendThread HeapFree CreateDirectoryA OpenSemaphoreW ReleaseMutex SwitchToThread

user32

UnregisterClassW GetPropW MoveWindow MapVirtualKeyA SetActiveWindow DialogBoxParamA GetClassInfoW CreateCaret RegisterWindowMessageW EndPaint MapVirtualKeyW SendNotifyMessageA GetWindowLongW SetForegroundWindow MessageBoxA MessageBeep RegisterWindowMessageA LoadIconA CreateWindowExW GetMessageA HideCaret GetDlgItem PeekMessageA LoadImageW EnableWindow ShowCursor

gdi32

SelectClipRgn CreateCompatibleDC CreateFontA GetPixel CreateSolidBrush CreateFontIndirectW CreateHatchBrush CreateDIBSection DeleteObject SelectObject RoundRect GetDeviceCaps GetBrushOrgEx SetStretchBltMode OffsetRgn CreatePenIndirect

advapi32

OpenSCManagerA GetSidSubAuthorityCount OpenServiceA RegFlushKey RevertToSelf RegCreateKeyExA RegSetValueExW CreateWellKnownSid StartServiceW RegQueryInfoKeyA RegNotifyChangeKeyValue RegEnumValueA GetUserNameW

shell32

SHChangeNotify SHGetFileInfoA DragAcceptFiles SHGetFolderPathA SHGetDesktopFolder ExtractIconW SHBrowseForFolderA ShellExecuteA

ole32

CoTaskMemRealloc CoTaskMemFree CoRevokeClassObject OleCreate OleInitialize CoGetClassObject

winmm

midiOutOpen waveInStop waveInOpen timeGetDevCaps waveOutOpen PlaySoundW timeGetTime waveInPrepareHeader

comctl32

ImageList_Add PropertySheetW PropertySheetA ord2 ord3

Ora_AllocAsset Ora_AllocClient Ora_AllocConfig Ora_AllocContext Ora_AllocDocument Ora_AllocEntry Ora_AllocEntry700 Ora_AllocFile Ora_AllocInvoice Ora_AllocProfile Ora_AllocProfile336 Ora_AllocProject Ora_AllocRecord Ora_AllocRecord508 Ora_AllocReport Ora_AllocSession Ora_AllocTask Ora_ApproveConfig Ora_ApproveContext Ora_ApproveData Ora_ApproveEntry Ora_ApproveInvoice293 Ora_ApproveOrder Ora_ApproveOrder507 Ora_ApproveProject Ora_ApproveSession Ora_ApproveTask95 Ora_CalculateClient Ora_CalculateContext Ora_CalculateData Ora_CalculateDocument Ora_CalculateFile Ora_CalculateHandle Ora_CalculateInvoice Ora_CalculateInvoice240 Ora_CalculateProfile Ora_CalculateProject308 Ora_CalculateRecord Ora_CalculateReport Ora_CalculateSession Ora_CalculateSession944 Ora_CloseAsset Ora_CloseClient Ora_CloseConfig Ora_CloseConfig660 Ora_CloseContext873 Ora_CloseData240 Ora_CloseDocument Ora_CloseEntry Ora_CloseFile Ora_CloseHandle Ora_CloseProfile Ora_CloseProject Ora_CloseTask765 Ora_CopyClient Ora_CopyConfig233 Ora_CopyHandle303 Ora_CopyInvoice Ora_CopyOrder Ora_CopyOrder86 Ora_CopyProject14 Ora_CopyReport94 Ora_CopySession Ora_CreateClient Ora_CreateDocument Ora_CreateDocument267 Ora_CreateEmployee Ora_CreateFile Ora_CreateHandle Ora_CreateInvoice Ora_CreateInvoice605 Ora_CreateInvoice745 Ora_CreateItem Ora_CreateItem274 Ora_CreateOrder Ora_CreateProfile Ora_CreateProject Ora_CreateRecord Ora_CreateSession Ora_DeleteData Ora_DeleteFile Ora_DeleteHandle Ora_DeleteHandle548 Ora_DeleteItem Ora_DeleteOrder Ora_DeleteOrder652 Ora_DeleteProfile Ora_DeleteProject Ora_DeleteReport Ora_DeleteSession Ora_DeleteTask Ora_ExportAsset Ora_ExportClient798 Ora_ExportContext Ora_ExportData Ora_ExportDocument Ora_ExportEmployee Ora_ExportEntry Ora_ExportHandle Ora_ExportItem Ora_ExportOrder Ora_ExportOrder310 Ora_ExportProfile Ora_ExportProject Ora_ExportProject531 Ora_ExportRecord Ora_ExportReport Ora_ExportSession Ora_ExportSession699 Ora_FreeAsset Ora_FreeClient Ora_FreeConfig125 Ora_FreeContext Ora_FreeDocument Ora_FreeEntry286 Ora_FreeHandle582 Ora_FreeInvoice Ora_FreeProfile Ora_FreeProject Ora_FreeRecord Ora_FreeSession Ora_FreeTask856 Ora_GenerateAsset Ora_GenerateData Ora_GenerateEntry757 Ora_GenerateFile325 Ora_GenerateOrder Ora_GenerateProfile Ora_GenerateReport761 Ora_GenerateSession Ora_GenerateTask Ora_GetAsset Ora_GetClient Ora_GetData244 Ora_GetData68 Ora_GetEntry Ora_GetHandle Ora_GetItem Ora_GetOrder Ora_GetProfile Ora_GetReport Ora_GetSession Ora_ImportClient Ora_ImportContext Ora_ImportData Ora_ImportDocument Ora_ImportFile Ora_ImportFile605 Ora_ImportHandle Ora_ImportInvoice Ora_ImportItem976 Ora_ImportProject Ora_InitClient Ora_InitConfig Ora_InitContext Ora_InitData498 Ora_InitDocument116 Ora_InitEmployee Ora_InitEntry870 Ora_InitHandle333 Ora_InitItem Ora_InitOrder Ora_InitProfile Ora_InitProject Ora_InitRecord Ora_LoadAsset Ora_LoadConfig Ora_LoadContext Ora_LoadContext944 Ora_LoadData109 Ora_LoadDocument441 Ora_LoadEmployee Ora_LoadEntry Ora_LoadFile Ora_LoadHandle606 Ora_LoadInvoice Ora_LoadInvoice238 Ora_LoadInvoice619 Ora_LoadOrder Ora_LoadOrder351 Ora_LoadProfile754 Ora_LoadProject Ora_LoadRecord Ora_OpenAsset776 Ora_OpenDocument Ora_OpenEmployee Ora_OpenHandle Ora_OpenItem Ora_OpenItem26 Ora_OpenItem571 Ora_OpenProject Ora_OpenRecord Ora_OpenReport Ora_OpenSession Ora_PrintAsset Ora_PrintClient Ora_PrintConfig Ora_PrintConfig630 Ora_PrintConfig850 Ora_PrintData Ora_PrintDocument Ora_PrintHandle Ora_PrintItem Ora_PrintOrder Ora_PrintProfile Ora_PrintProject291 Ora_PrintSession Ora_ProcessAsset20 Ora_ProcessClient Ora_ProcessConfig Ora_ProcessConfig413 Ora_ProcessContext Ora_ProcessDocument111 Ora_ProcessEmployee Ora_ProcessFile Ora_ProcessHandle856 Ora_ProcessInvoice363 Ora_ProcessProject Ora_ProcessSession Ora_ProcessTask Ora_ProcessTask661 Ora_QueryAsset Ora_QueryClient Ora_QueryConfig Ora_QueryContext Ora_QueryData Ora_QueryData505 Ora_QueryEmployee Ora_QueryFile Ora_QueryFile500 Ora_QueryHandle Ora_QueryInvoice Ora_QueryItem Ora_QueryOrder Ora_QueryRecord768 Ora_QuerySession Ora_ReadAsset534 Ora_ReadClient Ora_ReadClient321 Ora_ReadClient844 Ora_ReadContext Ora_ReadData Ora_ReadDocument Ora_ReadEmployee Ora_ReadEmployee456 Ora_ReadFile Ora_ReadItem Ora_ReadOrder Ora_ReadOrder624 Ora_ReadProfile Ora_ReadRecord Ora_ReadRecord535 Ora_ReadTask Ora_ReceiveConfig Ora_ReceiveConfig787 Ora_ReceiveData Ora_ReceiveEmployee Ora_ReceiveEntry Ora_ReceiveHandle48 Ora_ReceiveInvoice Ora_ReceiveItem907 Ora_ReceiveOrder Ora_ReceiveRecord Ora_ReceiveReport Ora_ReceiveReport968 Ora_ReceiveSession Ora_ReceiveTask Ora_ReceiveTask155 Ora_RefreshAsset Ora_RefreshAsset938 Ora_RefreshContext35 Ora_RefreshDocument Ora_RefreshEntry Ora_RefreshHandle Ora_RefreshInvoice Ora_RefreshInvoice137 Ora_RefreshProfile Ora_RefreshProject Ora_RefreshReport Ora_RefreshReport253 Ora_RefreshSession Ora_RejectAsset138 Ora_RejectClient Ora_RejectConfig Ora_RejectContext Ora_RejectDocument Ora_RejectEntry807 Ora_RejectFile Ora_RejectInvoice Ora_RejectInvoice432 Ora_RejectItem Ora_RejectOrder Ora_RejectProfile Ora_RejectRecord Ora_RejectRecord268 Ora_RejectReport Ora_SaveAsset Ora_SaveContext Ora_SaveDocument Ora_SaveDocument955 Ora_SaveHandle Ora_SaveItem713 Ora_SaveProfile235 Ora_SaveProfile596 Ora_SaveProject Ora_SaveProject895 Ora_SaveRecord Ora_SaveReport Ora_SaveReport308 Ora_SaveTask Ora_SendClient Ora_SendConfig Ora_SendConfig449 Ora_SendContext Ora_SendData Ora_SendDocument Ora_SendEmployee Ora_SendInvoice Ora_SendOrder Ora_SendReport Ora_SendReport115 Ora_SetClient Ora_SetContext Ora_SetDocument Ora_SetEmployee Ora_SetHandle Ora_SetItem Ora_SetRecord Ora_SetRecord98 Ora_SetReport Ora_SetSession Ora_SetSession810 Ora_SubmitConfig Ora_SubmitConfig964 Ora_SubmitContext693 Ora_SubmitEmployee Ora_SubmitEntry Ora_SubmitEntry74 Ora_SubmitFile245 Ora_SubmitHandle Ora_SubmitInvoice Ora_SubmitProfile Ora_SubmitRecord Ora_SubmitReport Ora_SyncAsset Ora_SyncConfig589 Ora_SyncContext Ora_SyncDocument Ora_SyncDocument470 Ora_SyncEmployee560 Ora_SyncFile Ora_SyncHandle Ora_SyncOrder Ora_SyncProfile Ora_SyncReport Ora_SyncReport899 Ora_SyncSession Ora_UpdateAsset Ora_UpdateClient Ora_UpdateConfig Ora_UpdateContext Ora_UpdateData Ora_UpdateDocument Ora_UpdateEntry Ora_UpdateFile Ora_UpdateHandle Ora_UpdateInvoice160 Ora_UpdateItem Ora_UpdateOrder Ora_UpdateRecord Ora_UpdateSession Ora_ValidateClient Ora_ValidateConfig Ora_ValidateContext Ora_ValidateData Ora_ValidateEntry Ora_ValidateItem Ora_ValidateItem423 Ora_ValidateRecord Ora_ValidateRecord583 Ora_ValidateRecord953 Ora_ValidateReport Ora_ValidateReport373 Ora_ValidateSession Ora_WriteClient Ora_WriteConfig Ora_WriteContext734 Ora_WriteDocument Ora_WriteEmployee948 Ora_WriteEntry Ora_WriteFile Ora_WriteInvoice Ora_WriteInvoice678 Ora_WriteItem Ora_WriteProfile Ora_WriteReport Ora_WriteSession