Static task
static1
Behavioral task
behavioral1
Sample
星空酒店电视调试软件.exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
星空酒店电视调试软件.exe
Resource
win10v2004-20230703-en
General
-
Target
星空酒店电视调试软件.exe
-
Size
2.1MB
-
MD5
de2320cf4decb29926150c9c5ee29117
-
SHA1
65b3acf4821d50eb8105311f8e7b5931306092b7
-
SHA256
8cfde38b51a57101d3d1eaeee01da32541cdd2b16df5e9aa9bf25c63a2d0aaad
-
SHA512
84ab644d55d8a3ce45d808c62c7b670f7f800e708195f96160f020e39f20b9c203a8e5ee16342b9993bbe301e6cf6c4af63f19a8b914cee04624ca2185467a57
-
SSDEEP
24576:v0xB9FtyQ+7xdGkLOamGyx/7pbAdengZ7kYJdJ:M3hvFI+u
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 星空酒店电视调试软件.exe
Files
-
星空酒店电视调试软件.exe.exe windows x86
f051f10c47231b7ad0aa8ce444457e84
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
ws2_32
recvfrom
WSAEnumNetworkEvents
sendto
WSAWaitForMultipleEvents
WSACleanup
WSACreateEvent
bind
socket
WSAStartup
inet_addr
inet_ntoa
WSAEventSelect
ntohs
ntohl
htons
htonl
kernel32
UnhandledExceptionFilter
Sleep
LCMapStringW
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
IsBadWritePtr
FreeEnvironmentStringsA
FreeEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
SetUnhandledExceptionFilter
GetStringTypeA
GetStringTypeW
IsBadReadPtr
IsBadCodePtr
HeapReAlloc
CompareStringA
CompareStringW
SetEnvironmentVariableA
GetProfileStringA
InterlockedExchange
GetModuleFileNameA
GetLocalTime
SetEvent
CreateEventA
CloseHandle
GetLastError
CreateSemaphoreA
GlobalFree
GlobalUnlock
WriteFile
HeapSize
GetFileType
SetStdHandle
TerminateProcess
GetACP
GetSystemTime
GetTimeZoneInformation
RaiseException
ExitProcess
GetCommandLineA
GetStartupInfoA
HeapFree
HeapAlloc
ExitThread
CreateThread
RtlUnwind
GetTickCount
GetCurrentDirectoryA
SetErrorMode
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileSize
SizeofResource
GetOEMCP
CreateFileA
GlobalLock
GlobalAlloc
GetCurrentThreadId
MulDiv
WideCharToMultiByte
MultiByteToWideChar
LCMapStringA
LockResource
LoadResource
FindResourceA
GetCPInfo
GlobalFlags
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
GlobalReAlloc
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
LocalAlloc
GetProcessVersion
GetDiskFreeSpaceA
GetFileTime
SetFileTime
GetTempFileNameA
GetFileAttributesA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
GetCurrentThread
lstrcmpA
ResumeThread
SetLastError
FileTimeToLocalFileTime
FileTimeToSystemTime
GetShortPathNameA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
lstrcpynA
GetVolumeInformationA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
FreeLibrary
GetCurrentProcess
DuplicateHandle
FormatMessageA
LocalFree
InterlockedDecrement
InterlockedIncrement
lstrlenA
GetVersion
lstrcatA
GlobalGetAtomNameA
lstrcmpiA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
lstrcpyA
GetModuleHandleA
LoadLibraryA
GetProcAddress
user32
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
ReuseDDElParam
UnpackDDElParam
BringWindowToTop
IsZoomed
UnionRect
WindowFromPoint
SetCursorPos
DrawMenuBar
DefMDIChildProcA
GetSysColorBrush
GetClassNameA
LoadStringA
InsertMenuA
DeleteMenu
CharNextA
CopyAcceleratorTableA
GetNextDlgGroupItem
MessageBeep
GetTabbedTextExtentA
GetDCEx
LockWindowUpdate
RegisterClipboardFormatA
SetParent
PostThreadMessageA
GetMessageA
TranslateMessage
ValidateRect
DestroyMenu
EndPaint
BeginPaint
CharUpperA
EndDialog
CreateDialogIndirectParamA
wvsprintfA
GetMenuCheckMarkDimensions
GetMenuState
ModifyMenuA
SetMenuItemBitmaps
CheckMenuItem
GetNextDlgTabItem
IsWindowEnabled
MoveWindow
SetWindowTextA
IsDialogMessageA
SetDlgItemTextA
SetDlgItemInt
SendDlgItemMessageA
MapWindowPoints
PeekMessageA
DispatchMessageA
SetActiveWindow
EqualRect
DeferWindowPos
BeginDeferWindowPos
EndDeferWindowPos
IsWindowVisible
ScrollWindow
GetScrollInfo
SetScrollInfo
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
SetRectEmpty
MessageBoxA
WinHelpA
wsprintfA
GetClassInfoA
RegisterClassA
GetMenu
TrackPopupMenu
GetWindowTextLengthA
GetWindowTextA
GetKeyState
DestroyWindow
CreateWindowExA
GetClassLongA
CallWindowProcA
DefWindowProcA
GetMessageTime
GetMessagePos
GetLastActivePopup
GetForegroundWindow
SetWindowPos
GetWindowPlacement
IsRectEmpty
RegisterWindowMessageA
FindWindowA
SetFocus
GetDlgCtrlID
GetFocus
IsChild
AdjustWindowRectEx
EnumChildWindows
GetAsyncKeyState
GetCursorPos
AppendMenuA
DrawFrameControl
DrawIconEx
DrawEdge
SystemParametersInfoA
ScreenToClient
GetSubMenu
IntersectRect
SetWindowsHookExA
TrackPopupMenuEx
UnhookWindowsHookEx
CallNextHookEx
GetMenuItemInfoA
GetMenuStringA
RemovePropA
LoadBitmapA
GetSystemMetrics
SetPropA
SetMenu
MapVirtualKeyA
GetKeyNameTextA
ReleaseDC
GetWindowDC
GetDC
GetWindowRect
GetDesktopWindow
GetWindow
IsWindow
GetPropA
IsIconic
ShowWindow
SetForegroundWindow
UpdateWindow
PostMessageA
GetMenuItemCount
GetMenuItemID
EnableMenuItem
ClientToScreen
SetWindowLongA
DestroyIcon
CreatePopupMenu
GrayStringA
DrawTextA
TabbedTextOutA
GetWindowLongA
CopyRect
SetRect
MapDialogRect
SetWindowContextHelpId
ShowOwnedPopups
GetTopWindow
PostQuitMessage
FrameRect
InflateRect
FillRect
GetSysColor
OffsetRect
DrawStateA
DrawFocusRect
GetActiveWindow
GetParent
GetCapture
GetClientRect
PtInRect
InvalidateRect
LoadImageA
RedrawWindow
DestroyCursor
EnableWindow
LoadIconA
KillTimer
ReleaseCapture
SetTimer
SetCapture
LoadCursorA
SetCursor
SendMessageA
IsWindowUnicode
DefDlgProcA
ExcludeUpdateRgn
ShowCaret
HideCaret
UnregisterClassA
GetDlgItem
gdi32
LPtoDP
DPtoLP
GetClipBox
SetTextColor
SetBkColor
CreateRectRgnIndirect
StartDocA
SaveDC
RestoreDC
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
MoveToEx
LineTo
SetTextAlign
GetCurrentPositionEx
GetTextExtentPoint32A
CreateRectRgn
GetViewportExtEx
GetWindowExtEx
CreatePatternBrush
GetViewportOrgEx
AbortDoc
EndDoc
EndPage
StartPage
SetAbortProc
GetMapMode
SetRectRgn
CombineRgn
GetTextMetricsA
StretchDIBits
GetCharWidthA
GetBkColor
GetNearestColor
GetStretchBltMode
GetPolyFillMode
GetTextAlign
GetBkMode
GetROP2
GetTextFaceA
GetWindowOrgEx
CreateSolidBrush
CreateDIBitmap
CreateBitmap
PatBlt
CreateFontA
GetTextColor
Rectangle
CreateDCA
GetDeviceCaps
DeleteDC
GetStockObject
CreatePen
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
CreateCompatibleBitmap
GetObjectA
CreateCompatibleDC
BitBlt
SelectObject
CreateFontIndirectA
GetTextExtentPointA
DeleteObject
comdlg32
PrintDlgA
GetSaveFileNameA
GetOpenFileNameA
CommDlgExtendedError
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegSetValueA
RegQueryValueExA
RegOpenKeyExA
RegSetValueExA
RegCreateKeyExA
RegOpenKeyA
RegQueryValueA
RegEnumKeyA
RegDeleteKeyA
RegDeleteValueA
SetFileSecurityA
GetFileSecurityA
RegCloseKey
RegCreateKeyA
shell32
DragQueryFileA
DragFinish
SHGetFileInfoA
ExtractIconA
comctl32
ImageList_GetIcon
ImageList_ReplaceIcon
ImageList_GetImageCount
ord17
ImageList_Destroy
ImageList_Create
ImageList_LoadImageA
oledlg
ord8
ole32
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
OleUninitialize
CLSIDFromString
CLSIDFromProgID
CreateILockBytesOnHGlobal
CoTaskMemFree
OleInitialize
CoTaskMemAlloc
CoFreeUnusedLibraries
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
CoRegisterMessageFilter
CoGetClassObject
olepro32
ord253
oleaut32
SysAllocStringByteLen
SysAllocString
SysStringLen
VariantChangeType
VariantCopy
VariantTimeToSystemTime
VariantClear
SysAllocStringLen
SysFreeString
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 152KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 60KB - Virtual size: 240KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 816KB - Virtual size: 815KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ