Static task
static1
Behavioral task
behavioral1
Sample
BatteryInfoView.exe
Resource
win7-20230220-en
Behavioral task
behavioral2
Sample
BatteryInfoView.exe
Resource
win10v2004-20230220-en
General
-
Target
BatteryInfoView.exe
-
Size
78KB
-
MD5
fa1d4ff6c8086fca2bdb5ea5d4bf2e90
-
SHA1
b6d8f4e7352ba83088eee5961ee521ab7317c014
-
SHA256
08ef9887b01880ef87f5b836aab830737105f2e58bd85957f654d3c301dfde11
-
SHA512
280fa900ba160cd5abab30426bc4822e953f46eecb15fa1c5bc4d770b448e149bc8d4c34a428a17446ff99553ac6fe28e8817b349e7f6f2c8b60360427d41564
-
SSDEEP
1536:5jphesepE6OsAaRHO/9ipn8kXCIchTYxYW1fikHZR94k7NgribZINtotN6Sz7kxG:5dhesiE6OQRHOF+n8IVqk5n4k7Ngrib5
Malware Config
Signatures
-
Nirsoft 1 IoCs
resource yara_rule sample Nirsoft -
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BatteryInfoView.exe
Files
-
BatteryInfoView.exe.exe windows x86
1f16e692dce94a0f0d615fbff9cdd10d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcrt
__p__commode
_adjust_fdiv
__setusermatherr
_initterm
__wgetmainargs
_wcmdln
exit
_cexit
_XcptFilter
__p__fmode
_c_exit
_onexit
__dllonexit
strlen
qsort
_purecall
_wcslwr
malloc
_ultow
wcschr
wcscmp
__set_app_type
_controlfp
_except_handler3
_exit
free
modf
_wtoi
_memicmp
memcmp
wcstoul
wcsrchr
??3@YAXPAX@Z
??2@YAPAXI@Z
wcslen
_itow
_wcsicmp
memcpy
abs
wcscpy
memset
wcscat
_snwprintf
wcsncat
comctl32
ImageList_SetImageCount
CreateStatusWindowW
ImageList_ReplaceIcon
ord17
ImageList_Create
ImageList_AddMasked
CreateToolbarEx
version
GetFileVersionInfoSizeW
VerQueryValueW
GetFileVersionInfoW
setupapi
SetupDiEnumDeviceInterfaces
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
kernel32
GetCurrentProcessId
ReadProcessMemory
GetCurrentProcess
ExitProcess
DeleteFileW
SetErrorMode
GetStdHandle
EnumResourceNamesW
GetPrivateProfileIntW
OpenProcess
EnumResourceTypesW
GetModuleHandleA
GetStartupInfoW
CreateFileW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetTempFileNameW
GetDateFormatW
GetVersionExW
FormatMessageW
SystemTimeToFileTime
GetTickCount
GetLastError
DeviceIoControl
CloseHandle
GetSystemTimeAsFileTime
FileTimeToLocalFileTime
GetFileSize
SetFilePointer
CompareFileTime
FreeLibrary
LoadLibraryW
FileTimeToSystemTime
GetProcAddress
GetTimeFormatW
GetModuleHandleW
GetWindowsDirectoryW
GetFileAttributesW
ReadFile
GetModuleFileNameW
LocalFree
GetNumberFormatW
WriteFile
LockResource
lstrcpyW
MultiByteToWideChar
FindResourceW
lstrlenW
LoadResource
GlobalAlloc
GlobalUnlock
LoadLibraryExW
WideCharToMultiByte
GetTempPathW
GetLocaleInfoW
SizeofResource
GlobalLock
user32
SetForegroundWindow
SetTimer
GetMessageW
PostQuitMessage
TrackPopupMenu
RegisterWindowMessageW
SetCursor
LoadCursorW
GetSysColorBrush
ShowWindow
KillTimer
EndDialog
SetWindowLongW
EndPaint
GetDlgItem
InvalidateRect
GetWindow
DrawFrameControl
SetDlgItemInt
SetWindowTextW
BeginPaint
UpdateWindow
GetClientRect
SetDlgItemTextW
GetDlgItemTextW
GetSystemMetrics
DeferWindowPos
CreateWindowExW
GetWindowRect
GetDlgItemInt
SendDlgItemMessageW
SetMenu
SetWindowPos
GetWindowPlacement
LoadAcceleratorsW
PostMessageW
DefWindowProcW
SendMessageW
TranslateAcceleratorW
RegisterClassW
MessageBoxW
LoadIconW
LoadImageW
GetWindowLongW
EndDeferWindowPos
BeginDeferWindowPos
SetFocus
CheckMenuRadioItem
CheckMenuItem
GetCursorPos
GetParent
GetSysColor
SetClipboardData
EnableWindow
MapWindowPoints
GetMenu
GetSubMenu
GetDC
EmptyClipboard
EnableMenuItem
ReleaseDC
GetClassNameW
OpenClipboard
MoveWindow
GetMenuStringW
GetMenuItemCount
CloseClipboard
CreateDialogParamW
DestroyWindow
EnumChildWindows
LoadStringW
GetWindowTextW
LoadMenuW
ModifyMenuW
GetMenuItemInfoW
DialogBoxParamW
GetDlgCtrlID
DestroyMenu
IsDialogMessageW
TranslateMessage
DrawTextExW
DispatchMessageW
ChildWindowFromPoint
gdi32
SetBkMode
DeleteObject
GetStockObject
GetTextExtentPoint32W
SetBkColor
SelectObject
GetDeviceCaps
SetTextColor
CreateFontIndirectW
comdlg32
FindTextW
GetSaveFileNameW
shell32
Shell_NotifyIconW
SHGetFileInfoW
ShellExecuteW
ole32
CoUninitialize
CoInitialize
Sections
.text Size: 45KB - Virtual size: 44KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 19KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ