Static task
static1
Behavioral task
behavioral1
Sample
Kaspersky Endpoint Security para Windows (12.0) (12.0.0.465).exe
Resource
win7-20230712-en
Behavioral task
behavioral2
Sample
Kaspersky Endpoint Security para Windows (12.0) (12.0.0.465).exe
Resource
win10v2004-20230703-en
General
-
Target
Kaspersky Endpoint Security para Windows (12.0) (12.0.0.465).exe
-
Size
426.6MB
-
MD5
e57ee756d631c1ddcdd5d49a9c241cca
-
SHA1
98e06ba5964349ae312988b7e292d1ad0446fb42
-
SHA256
25d66d38ab8bdc9c2f37f38c75f39dd6c429ae13a0847d9e359f3e6471db8380
-
SHA512
4636ad16ffaafc79804046e8eca42d03b3d323a392e270179839798c288841f87dc1d3edd7caa3f8f776d2acbf15d9c77ebacf46c84e55ee711999eb7fd25853
-
SSDEEP
6291456:p9M6dnxYBMmK/tUydGyzGabCqrDyULuhKwEcdX7hYB6xYcRKHCJeu+QGg:/YstUastqrD/cQ87hYgQHCEpQGg
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Kaspersky Endpoint Security para Windows (12.0) (12.0.0.465).exe
Files
-
Kaspersky Endpoint Security para Windows (12.0) (12.0.0.465).exe.exe windows x86
efe3bb0afa14d689f861dd9aabb52d72
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetConsoleMode
ConvertThreadToFiber
ConvertFiberToThread
CreateFiber
DeleteFiber
SwitchToFiber
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SystemTimeToFileTime
GetSystemTime
SetHandleInformation
GetComputerNameExA
WaitForSingleObjectEx
GetFileType
PeekNamedPipe
GetStdHandle
FormatMessageA
VerSetConditionMask
GetSystemDirectoryA
GetModuleHandleA
VerifyVersionInfoA
SleepEx
GetThreadPriority
HeapWalk
ReleaseMutex
HeapCreate
Module32NextW
Module32FirstW
GetSystemInfo
IsDebuggerPresent
GlobalMemoryStatus
GlobalMemoryStatusEx
VirtualAlloc
VirtualFree
GetStartupInfoW
GetComputerNameExW
GetCurrentProcessId
SetThreadPriority
CreateSemaphoreW
ReleaseSemaphore
QueryPerformanceCounter
GetThreadTimes
QueryPerformanceFrequency
GetCurrentDirectoryW
SetLastError
FlushFileBuffers
MapViewOfFile
CreateFileMappingW
CopyFileW
GetFileSize
SetConsoleMode
FileTimeToSystemTime
GetFileAttributesExW
UnmapViewOfFile
RemoveDirectoryW
WriteFile
FindNextFileW
ReadFile
CreateDirectoryW
SetUnhandledExceptionFilter
SetFileApisToANSI
AddVectoredExceptionHandler
RemoveVectoredExceptionHandler
SetConsoleCtrlHandler
GetEnvironmentStringsW
ResetEvent
GetVersion
GetACP
GetSystemDefaultLangID
FreeEnvironmentStringsW
GetSystemDefaultLCID
GetDriveTypeW
lstrcmpiW
lstrcpyW
GetVersionExW
LocalAlloc
CreateMutexW
Sleep
LCMapStringW
LoadLibraryA
GetUserDefaultLCID
GetStringTypeExW
FindClose
FindFirstFileW
SetErrorMode
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
InitializeCriticalSection
GetEnvironmentVariableW
GetWindowsDirectoryW
GetLongPathNameW
LocalFree
GetModuleHandleExW
WideCharToMultiByte
MoveFileExW
ResumeThread
GetCurrentProcess
GetSystemDirectoryW
AssignProcessToJobObject
SetInformationJobObject
CreateJobObjectW
IsProcessInJob
QueryInformationJobObject
GetCurrentThread
ReadConsoleA
ReadConsoleW
LoadLibraryExA
DeleteFileW
GetStringTypeW
TryEnterCriticalSection
EncodePointer
SwitchToThread
CompareStringW
GetLocaleInfoW
GetCPInfo
GlobalSize
OutputDebugStringA
FreeResource
GlobalDeleteAtom
lstrcmpW
GlobalAddAtomW
GlobalFindAtomW
lstrcmpA
GlobalGetAtomNameW
GlobalReAlloc
GlobalHandle
LocalReAlloc
GetSystemDefaultUILanguage
GetUserDefaultUILanguage
GlobalFlags
VirtualProtect
GetFullPathNameW
GetVolumeInformationW
LockFile
UnlockFile
DuplicateHandle
VerifyVersionInfoW
FindResourceExW
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
SystemTimeToTzSpecificLocalTime
SearchPathW
GetProfileIntW
GetTempFileNameW
UnhandledExceptionFilter
IsProcessorFeaturePresent
InitializeSListHead
SignalObjectAndWait
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
GetProcessAffinityMask
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
FreeLibraryAndExitThread
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
CreateTimerQueue
RtlUnwind
GetCommandLineA
VirtualQuery
ExitProcess
ExitThread
SetFilePointerEx
GetFileInformationByHandle
HeapQueryInformation
SetStdHandle
GetConsoleCP
GetDateFormatW
GetTimeFormatW
IsValidLocale
EnumSystemLocalesW
IsValidCodePage
GetOEMCP
GetTimeZoneInformation
FindFirstFileExW
SetEnvironmentVariableW
WriteConsoleW
GetFileAttributesA
CreateFileA
CreatePipe
SearchPathA
CreateProcessA
CreateToolhelp32Snapshot
TerminateProcess
OpenProcess
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
WaitForMultipleObjects
SetEndOfFile
SetFilePointer
CreateFileW
SetFileAttributesW
GetFileAttributesW
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
FreeLibrary
SetEvent
MulDiv
LoadLibraryExW
SetCurrentDirectoryW
GetProcAddress
LoadLibraryW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
FindResourceW
LoadResource
LockResource
SizeofResource
GetCommandLineW
GetModuleHandleW
ExpandEnvironmentStringsW
CreateThread
GetModuleFileNameW
CloseHandle
CreateEventW
GetTempPathW
FormatMessageW
OutputDebugStringW
MultiByteToWideChar
lstrlenW
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
HeapFree
user32
CharUpperW
LoadImageW
IsZoomed
GetSystemMenu
SetWindowRgn
MessageBeep
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
SetMenuDefaultItem
IsRectEmpty
UpdateLayeredWindow
EnableScrollBar
UnionRect
MonitorFromPoint
SetLayeredWindowAttributes
EnumDisplayMonitors
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetNextDlgGroupItem
DrawFocusRect
DrawIconEx
GetIconInfo
HideCaret
InvertRect
MapVirtualKeyW
GetKeyNameTextW
SetClassLongW
SetParent
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawEdge
DrawFrameControl
SetCursorPos
CopyIcon
FrameRect
DrawIcon
SetRect
LockWindowUpdate
ModifyMenuW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
PostThreadMessageW
GetComboBoxInfo
IsCharLowerW
MapVirtualKeyExW
GetDoubleClickTime
IsClipboardFormatAvailable
GetUpdateRect
DestroyCursor
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
CreateMenu
SubtractRect
GetWindowRgn
WindowFromPoint
ScreenToClient
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetCursorPos
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetActiveWindow
DeleteMenu
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
GetFocus
SetFocus
GetDlgCtrlID
GetDlgItem
IsIconic
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
IsWindow
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
GetMessageW
UnregisterClassW
EnableWindow
FillRect
ClientToScreen
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
GetWindowThreadProcessId
GetDesktopWindow
PeekMessageW
DispatchMessageW
MsgWaitForMultipleObjects
PostQuitMessage
CopyRect
DestroyIcon
ReleaseCapture
SetCapture
WaitMessage
IntersectRect
KillTimer
WaitForInputIdle
SetTimer
MapDialogRect
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
LoadMenuW
LoadBitmapW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
InflateRect
SetCursor
EnableMenuItem
CheckMenuItem
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
GetUserObjectInformationW
GetProcessWindowStation
MessageBoxW
CharUpperBuffW
CharLowerBuffW
RegisterClipboardFormatW
LoadStringW
TranslateMessage
LoadIconW
ReleaseDC
GetDC
UpdateWindow
GetParent
InvalidateRect
GetWindowRect
LoadCursorW
PostMessageW
GetDialogBaseUnits
GetClientRect
TrackMouseEvent
SendMessageW
RegisterWindowMessageW
GetAsyncKeyState
RealChildWindowFromPoint
CopyImage
SystemParametersInfoW
GetMenuItemInfoW
DestroyMenu
GetSysColorBrush
GetSystemMetrics
DrawStateW
OffsetRect
SetRectEmpty
SendDlgItemMessageA
ShowOwnedPopups
CheckDlgButton
SetDlgItemTextW
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
SetWindowLongW
GetWindowLongW
PtInRect
EqualRect
GetSysColor
GetScrollRange
MapWindowPoints
gdi32
EnumFontFamiliesExW
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
CreateCompatibleBitmap
CreateRoundRectRgn
DPtoLP
SetRectRgn
PatBlt
CreateRectRgnIndirect
CreatePalette
GetTextMetricsW
GetTextExtentPoint32W
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportOrgEx
SetViewportExtEx
ExtTextOutW
TextOutW
MoveToEx
ExtCreatePen
SetTextAlign
SetROP2
SetPolyFillMode
GetLayout
SetLayout
CopyMetaFileW
SetMapMode
SetBkMode
SelectPalette
ExtSelectClipRgn
SelectClipRgn
SaveDC
CombineRgn
RectVisible
PtVisible
LineTo
GetTextFaceW
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
RoundRect
SetPaletteEntries
ExtFloodFill
DeleteDC
DeleteObject
SelectObject
Rectangle
CreateFontW
GetDeviceCaps
StretchBlt
GetDIBColorTable
CreateCompatibleDC
GetStockObject
GetObjectW
CreateFontIndirectW
SetDIBColorTable
CreateDIBSection
IntersectClipRect
OffsetRgn
GetRgnBox
LPtoDP
Polyline
Polygon
CreatePolygonRgn
GetTextColor
Ellipse
CreateEllipticRgn
SetPixel
GetBkColor
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
GetWindowExtEx
GetViewportExtEx
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
BitBlt
CreateBitmap
SetTextColor
SetBkColor
CreateDCW
RestoreDC
ole32
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoDisconnectObject
CoInitialize
CoCreateGuid
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CreateStreamOnHGlobal
ReleaseStgMedium
CoCreateInstance
CoUninitialize
CoInitializeEx
oleaut32
VariantCopy
VarBstrFromDate
LoadTypeLi
SysFreeString
VariantClear
SysStringLen
SysAllocString
VariantInit
VariantTimeToSystemTime
SystemTimeToVariantTime
VariantChangeType
SysAllocStringLen
advapi32
SetThreadToken
OpenThreadToken
CryptDestroyHash
CryptDestroyKey
CryptHashData
CryptReleaseContext
CryptCreateHash
CryptAcquireContextW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegEnumKeyExW
CryptAcquireContextA
CryptGetHashParam
RevertToSelf
RegEnumValueW
SetSecurityDescriptorGroup
LookupAccountNameW
CryptGetProvParam
LookupAccountSidW
AddAccessAllowedAce
LsaClose
LsaOpenPolicy
GetLengthSid
InitializeAcl
InitializeSecurityDescriptor
FreeSid
OpenProcessToken
IsValidSid
GetNamedSecurityInfoW
SetNamedSecurityInfoW
AllocateAndInitializeSid
EqualSid
ImpersonateLoggedOnUser
LogonUserW
DuplicateTokenEx
CreateProcessAsUserW
RegOpenKeyExW
RegQueryValueExW
GetTokenInformation
GetAce
AdjustTokenPrivileges
SetSecurityDescriptorDacl
LookupPrivilegeValueW
LsaQueryInformationPolicy
LsaFreeMemory
GetUserNameW
ReportEventW
OpenEventLogW
CloseEventLog
CryptGenRandom
LsaNtStatusToWinError
RegisterEventSourceW
CryptExportKey
CryptDecrypt
CryptGetUserKey
DeregisterEventSource
CryptSetHashParam
CryptSignHashW
CryptEnumProvidersW
comctl32
InitCommonControlsEx
_TrackMouseEvent
shlwapi
PathFindExtensionW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathRemoveFileSpecW
PathFindFileNameW
crypt32
CertGetCertificateContextProperty
CertDuplicateCertificateContext
CertCreateCertificateContext
CertFindExtension
CryptQueryObject
CryptMsgClose
CertOpenStore
CryptMsgGetParam
CertFreeCertificateContext
CertEnumCertificatesInStore
CertVerifyTimeValidity
CertCloseStore
CertFindCertificateInStore
CryptDecodeObject
CertGetIssuerCertificateFromStore
CryptDecodeObjectEx
CryptMsgOpenToDecode
CryptMsgUpdate
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
shell32
SHBrowseForFolderW
SHAppBarMessage
DragFinish
DragQueryFileW
ShellExecuteW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
SHGetFileInfoW
Sections
.text Size: 5.0MB - Virtual size: 5.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 75KB - Virtual size: 119KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didat Size: 512B - Virtual size: 412B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.trc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 460KB - Virtual size: 459KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 326KB - Virtual size: 325KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ