SpeechModelDownload[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

SpeechModelDownload.exe
Size

178KB
MD5

23fa2118cded8ee5685f35abe3fff552
SHA1

b3f92fab03e37d8e30c9598ce7d4e2be1d3bcd5f
SHA256

72b8d2df39fcec08793d13be1db6fed9d8b264cebd8d1126031fe875dfdc0a01
SHA512

59b08e1bc23ad4019f5b221e8cfa009edfe1e5ee07e4d6f74636763ebc479194257a925f14b337fe0799c07d24b0aa29f2584e480a1a107de2d9b805fc9e14d0
SSDEEP

3072:5jQEEuyLEEgHkcM4Oh47EAm0qEsaxTK8nQRyaAzEj65rGKvt:dQEpyLEjW4647YH2TKZAAaf

Score

1^/10

Malware Config

Signatures

Files

SpeechModelDownload.exe
.exe windows x64

e95cfb4ac77237f8a9c5b1a43ffd8ed3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcp110_win

?_Syserror_map@std@@YAPEBDH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Winerror_map@std@@YAPEBDH@Z
?_Xbad_alloc@std@@YAXXZ

msvcrt

memmove
memcpy
_CxxThrowException
memset
swprintf_s
??1type_info@@UEAA@XZ
?terminate@@YAXXZ
_onexit
__dllonexit
_unlock
_lock
_commode
_fmode
__C_specific_handler
_initterm
??3@YAXPEAX@Z
__setusermatherr
_cexit
_exit
exit
__set_app_type
__wgetmainargs
_amsg_exit
_XcptFilter
_callnewh
malloc
_vsnprintf_s
??0exception@@QEAA@AEBV0@@Z
??0exception@@QEAA@XZ
??_V@YAXPEAX@Z
_vsnprintf
wcscmp
_wstat
wcsrchr
_wcsnicmp
wcsstr
wcstok_s
swscanf_s
wcscpy_s
_wfopen_s
fwrite
fclose
fread
feof
wcsncpy_s
_wcsicmp
vswprintf_s
wcscat_s
isspace
towupper
??1exception@@UEAA@XZ
_purecall
memcpy_s
_vsnwprintf
__CxxFrameHandler3

api-ms-win-eventing-provider-l1-1-0

EventRegister
EventActivityIdControl
EventWriteTransfer
EventSetInformation
EventUnregister

api-ms-win-core-libraryloader-l1-2-0

LoadLibraryExW
GetModuleHandleExW
GetProcAddress
GetModuleFileNameA
FreeLibrary
GetModuleHandleW

api-ms-win-core-synch-l1-2-0

WakeAllConditionVariable
Sleep
InitOnceBeginInitialize
SleepConditionVariableSRW
InitOnceComplete

api-ms-win-core-synch-l1-1-0

ReleaseMutex
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
WaitForSingleObject
CancelWaitableTimer
EnterCriticalSection
WaitForSingleObjectEx
DeleteCriticalSection
CreateMutexExW
OpenSemaphoreW
InitializeCriticalSection
CreateSemaphoreExW
SetWaitableTimer
ReleaseSemaphore
LeaveCriticalSection

api-ms-win-core-heap-l1-1-0

HeapAlloc
HeapFree
HeapSize
GetProcessHeap
HeapSetInformation

api-ms-win-core-errorhandling-l1-1-0

RaiseException
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
GetLastError

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference
WindowsGetStringRawBuffer
WindowsCreateString
WindowsDeleteString

api-ms-win-core-com-l1-1-0

CoTaskMemAlloc
CoCreateInstance
CoTaskMemFree
CoCreateGuid

api-ms-win-core-winrt-l1-1-0

RoActivateInstance
RoUninitialize
RoGetActivationFactory
RoInitialize

api-ms-win-core-threadpool-l1-2-0

CreateThreadpoolTimer
CloseThreadpoolTimer
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess

api-ms-win-core-string-l1-1-0

MultiByteToWideChar

api-ms-win-core-localization-l1-2-0

GetUserDefaultLocaleName
FormatMessageW

api-ms-win-core-debug-l1-1-0

DebugBreak
IsDebuggerPresent
OutputDebugStringW

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter
QueryPerformanceFrequency

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-rtlsupport-l1-1-0

RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

api-ms-win-core-sysinfo-l1-1-0

GetSystemDirectoryW
GetWindowsDirectoryW
GetSystemTimeAsFileTime
GetTickCount

policymanager

PolicyManager_GetPolicyInt

api-ms-win-core-registry-l1-1-0

RegQueryInfoKeyW
RegEnumKeyExW
RegCreateKeyExW
RegOpenKeyExW
RegDeleteValueW
RegGetValueW
RegSetValueExW
RegQueryValueExW
RegCloseKey

api-ms-win-stateseparation-helpers-l1-1-0

GetPersistedRegistryValueW

api-ms-win-core-file-l1-1-0

GetFileAttributesW
FindNextFileW
LockFile
CreateFileW
FindClose
FindFirstFileW
CreateDirectoryW
DeleteFileW
UnlockFile
RemoveDirectoryW

api-ms-win-core-synch-l1-2-1

CreateWaitableTimerW

oleaut32

SysFreeString
VariantClear
SysAllocString

api-ms-win-core-processenvironment-l1-1-0

ExpandEnvironmentStringsW

winhttp

WinHttpQueryOption
WinHttpConnect
WinHttpQueryDataAvailable
WinHttpOpenRequest
WinHttpSetTimeouts
WinHttpCloseHandle
WinHttpReceiveResponse
WinHttpOpen
WinHttpSendRequest
WinHttpQueryHeaders
WinHttpReadData

ntdll

RtlConvertDeviceFamilyInfoToString
NtQueryLicenseValue
WinSqmIsOptedInEx

api-ms-win-core-sysinfo-l1-2-0

VerSetConditionMask
GetProductInfo

api-ms-win-core-kernel32-legacy-l1-1-1

VerifyVersionInfoW

api-ms-win-core-version-l1-1-1

GetFileVersionInfoSizeW
GetFileVersionInfoW

api-ms-win-core-version-l1-1-0

VerQueryValueW

Sections

.text
Size: 100KB - Virtual size: 99KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 300B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

e95cfb4ac77237f8a9c5b1a43ffd8ed3

Headers

DLL Characteristics

File Characteristics

Imports

msvcp110_win

msvcrt

api-ms-win-eventing-provider-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-synch-l1-1-0

api-ms-win-core-heap-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-com-l1-1-0

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-threadpool-l1-2-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

policymanager

api-ms-win-core-registry-l1-1-0

api-ms-win-stateseparation-helpers-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-synch-l1-2-1

oleaut32

api-ms-win-core-processenvironment-l1-1-0

winhttp

ntdll

api-ms-win-core-sysinfo-l1-2-0

api-ms-win-core-kernel32-legacy-l1-1-1

api-ms-win-core-version-l1-1-1

api-ms-win-core-version-l1-1-0

Sections

.text Size: 100KB - Virtual size: 99KB

.rdata Size: 69KB - Virtual size: 69KB

.data Size: 1024B - Virtual size: 3KB

.pdata Size: 4KB - Virtual size: 4KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 512B - Virtual size: 300B

.text
Size: 100KB - Virtual size: 99KB

.rdata
Size: 69KB - Virtual size: 69KB

.data
Size: 1024B - Virtual size: 3KB

.pdata
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 512B - Virtual size: 300B