PetSimBot[.]zip | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
PetSimBot.zip
Size 653KB
Sample260723-sjd9psbf59
SHA256 cd1f366d354bf97d21aa51010da3e4f10b3131a1b511378f4c83d81e166f680f
MD5 b488cfcdccbd9cad3304b173a56fb2f9
SHA1 c1aa58a28094c933bea79f333af41e1ed3680f05
SHA512 99855f5c575ed92dbf52670d40782df8b0dfeee68298e88bffb24d1038720856b1154b6c4b0fbacbb431c6db6a0acf396ec68d01a420026918b2adeb390b9555
SSDEEP 12288:ptPRW4CatoHN7ho/wf9RtVNLrmmgah/d0Rpb2inkNP7qQdjAZhUp:bJxKHF9RnNmaB7fjh
TLSH
T108E423591B71BDA4BAAA0329407CCC279F4492196B66DC6033E8DCCCCCB7D706D574AB
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
unpack001/PetSimBot.exe

File Explorer

PetSimBot.zip

.zip 653KB
Calibrate.ahk

5KB
Diagnostic.ahk

8KB
LISEZ-MOI.txt

5KB
OCR.ahk

98KB
Overlay.ahk

5KB
PetSimBot.ahk

7KB
PetSimBot.exe

.exe 1.2MB
config.ini

1KB

PetSimBot.zip

SHA256 cd1f366d354bf97d21aa51010da3e4f10b3131a1b511378f4c83d81e166f680f
MD5 b488cfcdccbd9cad3304b173a56fb2f9
SHA1 c1aa58a28094c933bea79f333af41e1ed3680f05
SHA512 99855f5c575ed92dbf52670d40782df8b0dfeee68298e88bffb24d1038720856b1154b6c4b0fbacbb431c6db6a0acf396ec68d01a420026918b2adeb390b9555
SSDEEP 12288:ptPRW4CatoHN7ho/wf9RtVNLrmmgah/d0Rpb2inkNP7qQdjAZhUp:bJxKHF9RnNmaB7fjh
TLSH
T108E423591B71BDA4BAAA0329407CCC279F4492196B66DC6033E8DCCCCCB7D706D574AB
MD5 SHA1 SHA512 SSDEEP TLSH

PetSimBot.exe

IMPHASH 85764be90204f791b27a27cfe813963d
SHA256 a2ec220266a0e2439e951b597421dbc51d2245ac7b69df4fb642ae38f0fd8f56
MD5 4f7685da26ed6eed879945b63fda9143
SHA1 7cae8edaae65c95b39d98a538ef8aa3c9fb8373a
SHA512 441f7c9c15ffc27fe8f6d301335102525e62c703726afe0f58e86f60f6cbd6cbd94613cf1d2d7272725b26e51b3030977fd758594ed1b90e8ed68b0bea939f72
SSDEEP 24576:U2ctIvKqwpMKvT7QvYMy91tA2DP2crkmQNHElqKlRRaBll:JToMKvPQvOi8AmQNsrlLaJ
TLSH
T102459F0773E7C1E9DE7BC1F9C5614226EB31B8640B389ADB2590452EEF63AD04E3A711
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

775052

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

wsock32

WSAGetLastError getservbyname htonl send recv inet_addr WSAAsyncSelect inet_ntoa gethostbyname WSASetLastError ioctlsocket htons gethostbyaddr getservbyport ntohs WSAStartup gethostname shutdown WSACleanup closesocket connect socket

winmm

joyGetPosEx mciSendStringW joyGetDevCapsW

version

GetFileVersionInfoW VerQueryValueW GetFileVersionInfoSizeW

comctl32

ImageList_GetIconSize ImageList_Create ImageList_Destroy ImageList_AddMasked ImageList_ReplaceIcon CreateStatusWindowW

psapi

GetProcessImageFileNameW

wininet

InternetCloseHandle InternetReadFileExA InternetReadFile InternetOpenW InternetOpenUrlW

shlwapi

StrCmpLogicalW

uxtheme

EnableThemeDialogTexture SetWindowTheme IsAppThemed

dwmapi

DwmGetWindowAttribute

kernel32

GlobalFree GlobalUnlock WideCharToMultiByte GetCPInfo GetSystemDirectoryA LoadLibraryA GetProcAddress FreeLibrary GetCurrentThreadId GetEnvironmentVariableW IsValidCodePage LoadLibraryW GetLastError OutputDebugStringW lstrcmpiW GetStringTypeExW CreateThread SetThreadPriority GetExitCodeThread CloseHandle CreateMutexW VirtualProtect SetLastError GetModuleHandleW GetDiskFreeSpaceExW GetDriveTypeW CreateFileW DeviceIoControl SetVolumeLabelW GetVolumeInformationW GetDiskFreeSpaceW SetEnvironmentVariableW MultiByteToWideChar GetFullPathNameW GetFileAttributesW CreateDirectoryW ReadFile DeleteFileW LoadResource LockResource WriteFile SizeofResource SetCurrentDirectoryW CompareStringOrdinal CopyFileW SetFileAttributesW FindFirstFileW FindNextFileW FindClose FileTimeToLocalFileTime LocalFileTimeToFileTime GetSystemTimeAsFileTime SetFileTime GlobalLock MoveFileW GetCurrentProcessId OpenProcess TerminateProcess SetPriorityClass GetProcessId QueryDosDeviceW EnterCriticalSection LeaveCriticalSection Beep GetLocalTime GetDateFormatW GetTimeFormatW GetDateFormatEx GetTickCount64 GetSystemTime GetSystemDefaultUILanguage GetComputerNameW GetCurrentDirectoryW GetSystemWindowsDirectoryW GetTempPathW WaitForSingleObject GetExitCodeProcess WriteProcessMemory ReadProcessMemory GetVersionExW InitializeCriticalSection DeleteCriticalSection GetModuleFileNameW SetDllDirectoryW GetModuleHandleExW GetShortPathNameW CreateProcessW FormatMessageW CompareStringW RemoveDirectoryW GetCurrentProcess CreateToolhelp32Snapshot Process32FirstW Process32NextW GetPrivateProfileStringW GetPrivateProfileSectionW GetPrivateProfileSectionNamesW WritePrivateProfileStringW WritePrivateProfileSectionW SetEndOfFile GetACP GetFileType GetStdHandle SetFilePointerEx SystemTimeToFileTime FileTimeToSystemTime GetFileSize IsWow64Process VirtualAllocEx VirtualFreeEx EnumResourceNamesW LoadLibraryExW GlobalSize FindResourceW SetErrorMode Sleep GetTickCount MulDiv RaiseException FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer InitializeCriticalSectionEx GetCommandLineA GetCommandLineW ExitProcess SetUnhandledExceptionFilter GetStartupInfoW QueryPerformanceCounter InitializeSListHead RtlLookupFunctionEntry RtlUnwindEx HeapSize HeapReAlloc HeapQueryInformation IsProcessorFeaturePresent RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapFree HeapAlloc GetProcessHeap FindFirstFileExW GetOEMCP GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GlobalAlloc SetStdHandle GetStringTypeW FlushFileBuffers GetConsoleOutputCP GetConsoleMode WriteConsoleW GetFileSizeEx RtlPcToFileHeader

user32

SetActiveWindow IsWindowVisible IsChild SetWindowRgn SetWindowPos EnumWindows IsZoomed IsIconic GetLayeredWindowAttributes SetLayeredWindowAttributes DestroyWindow RegisterClassExW SystemParametersInfoW CreateWindowExW GetMenu EnableMenuItem LoadAcceleratorsW AddClipboardFormatListener RemoveClipboardFormatListener LoadImageW CreateIconIndirect PostQuitMessage CheckMenuItem RegisterWindowMessageW DefWindowProcW SetForegroundWindow MonitorFromPoint GetSystemMenu GetMenuItemCount GetMenuItemID GetSubMenu GetMenuStringW ExitWindowsEx GetPropW GetClassLongW SetMenu SetPropW RemovePropW GetSysColor RedrawWindow DrawTextW SetParent GetClassInfoExW AdjustWindowRectEx UpdateWindow FlashWindow GetMessagePos GetSysColorBrush FillRect GetClassLongPtrW CallWindowProcW CheckRadioButton IntersectRect GetUpdateRect PtInRect CreateDialogIndirectParamW CreateAcceleratorTableW DestroyAcceleratorTable InsertMenuItemW RemoveMenu SetMenuItemInfoW GetMenuItemInfoW SetMenuDefaultItem CreateMenu CreatePopupMenu SetMenuInfo DestroyMenu TrackPopupMenuEx CopyImage CreateIconFromResourceEx DrawIconEx EnumClipboardFormats GetWindow BringWindowToTop GetQueueStatus GetLastActivePopup EnumChildWindows ActivateKeyboardLayout GetGUIThreadInfo GetWindowTextW mouse_event WindowFromPoint keybd_event SetKeyboardState GetKeyboardState GetCursorPos GetAsyncKeyState AttachThreadInput SendInput UnregisterHotKey RegisterHotKey SendMessageTimeoutW CharUpperW UnhookWindowsHookEx SetWindowsHookExW PostThreadMessageW IsCharAlphaNumericW IsCharUpperW IsCharLowerW ToUnicodeEx GetKeyboardLayout CallNextHookEx CharLowerW ReleaseDC DialogBoxParamW ScrollWindow GetSystemMetrics GetWindowRect GetWindowLongPtrW SetFocus DefDlgProcW MoveWindow MapWindowPoints GetClientRect EnableWindow MapDialogRect GetDlgItem SetWindowLongPtrW SetWindowTextW MessageBoxW OpenClipboard GetClipboardData GetClipboardFormatNameW CloseClipboard SetClipboardData EmptyClipboard PostMessageW FindWindowW EndDialog IsWindow DispatchMessageW TranslateMessage GetLastInputInfo LoadCursorW GetCursorInfo ClientToScreen MessageBeep GetIconInfo GetWindowTextLengthW InvalidateRect AdjustWindowRect SetDlgItemTextW SendDlgItemMessageW IsCharAlphaW DestroyIcon EnumDisplayMonitors GetMonitorInfoW BlockInput ShowWindow IsClipboardFormatAvailable CountClipboardFormats SetWindowLongW ScreenToClient IsDialogMessageW MapVirtualKeyExW GetAncestor SendMessageW IsWindowEnabled GetWindowLongW GetKeyState TranslateAcceleratorW KillTimer PeekMessageW GetFocus GetClassNameW GetWindowThreadProcessId GetForegroundWindow GetMessageW SetTimer GetParent GetDlgCtrlID VkKeyScanExW MapVirtualKeyW GetShellWindow GetKeyboardLayoutNameW GetDC

gdi32

GdiFlush CreateDIBSection EnumFontFamiliesExW SetBrushOrgEx CreatePatternBrush GetObjectW GetClipBox SetBkMode SetBkColor GetDeviceCaps CreateCompatibleDC CreateFontIndirectW GetStockObject CreateSolidBrush GetCharABCWidthsW GetTextMetricsW GetPixel GetDIBits SelectObject CreateDCW CreateFontW CreatePolygonRgn CreateRectRgn CreateRoundRectRgn CreateEllipticRgn DeleteObject BitBlt CreateCompatibleBitmap DeleteDC GetSystemPaletteEntries SetTextColor

advapi32

UnlockServiceDatabase RegDeleteKeyW RegSetValueExW RegCreateKeyExW RegQueryValueExW AdjustTokenPrivileges LookupPrivilegeValueW OpenProcessToken RegDeleteValueW GetUserNameW RegConnectRegistryW RegCloseKey RegOpenKeyExW RegQueryInfoKeyW RegEnumValueW RegEnumKeyExW CreateProcessWithLogonW OpenSCManagerW LockServiceDatabase CloseServiceHandle RegDeleteKeyExW

shell32

SHBrowseForFolderW DragFinish SHGetKnownFolderPath ExtractIconW DragQueryPoint SHEmptyRecycleBinW SHFileOperationW SHGetPathFromIDListW DragQueryFileW SHGetDesktopFolder SHGetMalloc SHCreateItemFromParsingName ShellExecuteExW SHGetFolderPathW Shell_NotifyIconW

ole32

CoCreateInstance CoTaskMemFree CLSIDFromString OleInitialize OleFlushClipboard OleUninitialize CoInitialize CoUninitialize CLSIDFromProgID CoGetObject StringFromGUID2 CreateStreamOnHGlobal

oleaut32

SafeArrayUnaccessData SafeArrayGetElemsize SafeArrayAccessData SafeArrayUnlock SafeArrayPtrOfIndex SafeArrayDestroy SysFreeString OleLoadPicture SysStringLen SafeArrayCreate VariantClear VariantChangeType SysAllocString SafeArrayCopy SysAllocStringLen GetActiveObject VariantCopyInd SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetDim SafeArrayLock