Static task
static1
Behavioral task
behavioral1
Sample
5eb7138b44d44e32e78ac2125f081540c1da991e6e35c54af52239f09f26f1b7.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
5eb7138b44d44e32e78ac2125f081540c1da991e6e35c54af52239f09f26f1b7.exe
Resource
win10v2004-20230915-en
General
-
Target
5eb7138b44d44e32e78ac2125f081540c1da991e6e35c54af52239f09f26f1b7
-
Size
5.9MB
-
MD5
6fe15cc3a3ef3de575ab65782a377adf
-
SHA1
57c54cf029b7f9a1bbb64e99621c6082105e16c9
-
SHA256
5eb7138b44d44e32e78ac2125f081540c1da991e6e35c54af52239f09f26f1b7
-
SHA512
83106bc2cee1eae7dff4ea08ecfbc98843e4809e38e6e9d8bc6e58d95af776cd0d2af61111fd6c4a7eaa6d03ebbc2f2121eeb6547b449b7daf849a263ab99def
-
SSDEEP
98304:37/rdeX5wsb41lcerJPsBslID/13mMP88SW063TOnrJE937srUaIH4Fwg/Cjoj9:Lsb417JP8su5P3Y63TOq9fH4FwgcojDk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5eb7138b44d44e32e78ac2125f081540c1da991e6e35c54af52239f09f26f1b7
Files
-
5eb7138b44d44e32e78ac2125f081540c1da991e6e35c54af52239f09f26f1b7.exe windows x86
acc12870c8acfa29e0453e3304b554b5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
opengl32
wglDeleteContext
glFinish
glDisable
glRasterPos3f
glPopMatrix
glTranslatef
glEnd
glVertex3dv
glBegin
glColor3f
glLineStipple
glRotatef
glPushMatrix
glClear
glDeleteLists
glCallList
wglUseFontBitmapsW
glGenLists
wglGetCurrentDC
glGetIntegerv
glGetDoublev
glLightfv
glLightModelfv
glEnable
glClearDepth
glClearColor
wglMakeCurrent
wglCreateContext
glLoadIdentity
glMatrixMode
glViewport
glut32
glutSolidCone
glutSolidTorus
glu32
gluPerspective
gluLookAt
gluProject
freetype
FT_Init_FreeType
FT_New_Memory_Face
FT_Select_Charmap
FT_Set_Pixel_Sizes
FT_Get_Char_Index
FT_Load_Glyph
FT_Render_Glyph
zsyntax
ZSyntax_GetSysCmdWords
ZSyntax_GetLangWords
zmotion
ZMC_RegisterRead
ZMC_GetAxises
ZMC_DirectCommand
ZMC_EnumChildCard
ZMC_Execute
ZMC_GetConnectType
ZMC_ExecuteNoAck
ZMC_GetAIn
ZMC_GetDaOut
ZMC_GetSoftVersion
ZMC_SetDaOut
ZMC_MakeRealZpjMem
ZMC_SetComDefaultBaud
ZMC_SetComDefaultID
ZMC_PeakCom
ZMC_SetTimeOut
ZMC_GetMaxPciCards
ZMC_SearchEth
ZMC_GetMaxLocalRTes
ZMC_GetCurIpAddr
ZMC_GetHardId
ZMC_GetControllerIDDate
ZMC_GetAxisFeatures
ZMC_ZVLatinImgGet
ZMC_ZVLatinImgGetInfo
ZMC_Modbus_Set0x
ZMC_ReadMessage
ZMC_ExecuteGetReceive
ZMC_Modbus_SetIEEE
ZMC_RegisterWrite
ZMC_Modbus_Set4x
ZMC_Modbus_SetLong
ZMC_Modbus_GetLong
ZMC_Modbus_GetIEEE
ZMC_CheckFirmWare
ZMC_GetSoftId
ZMC_JumpZbios
ZMC_JumpApp
ZMC_Open
ZMC_OpenCom
ZMC_UpCurZpjToMem
ZMC_Close
ZMC_Pause
ZMC_UnLock
ZMC_ResetController
ZMC_SearchAndOpenEth
ZMC_BreakDel
ZMC_BreakAdd
ZMC_BreakClear
ZMC_GetStringType
ZMC_GetStopPauseTaskid
ZMC_GetTaskState
ZMC_GetTaskStackState
ZMC_EnumLocal
ZMC_GetState
ZMC_GetSysSpecification
ZMC_SetTimeOutAutoClose
ZMC_GetError
ZMC_GetErrcodeDescription
ZMC_HmiFileDecode
ZMC_GetZlibFileType
ZMC_GetZlibGlobalDefine
ZMC_GetProgress
ZMC_GetTimeOut
ZMC_MakeZarAndRamRun2
ZMC_MakeZarAndDown2
ZMC_DownZar
ZMC_DownFirmWare
ZMC_MakeZar2
ZMC_MakeZlib
ZMC_HmiFileEncode
ZMC_Lock
ZMC_Resume
ZMC_GetDllVersion
ZMC_Stop
ZMC_RunZarFile
ZMC_OpenEth
ZMC_Modbus_Get0x
ZMC_StepRun
zmotioncad3
ZMotionCad3_ItemGetListNum
ZMotionCad3_Draw
ZMotionCad3_GetRange
ZMotionCad3_ImportVectGraph
ZMotionCad3_ImportImage
ZMotionCad3_DeleteChain
ZMotionCad3_NewGraph
ZMotionCad3_Scale
ZMotionCad3_Move
zmotionplc
ZPLC_ReCompileReg
ZPlc_Reg_GetNext
ZPLC_CompileLine
ZPLC_NewLadItem
ZPLC_NewPLine
ZPLC_NewPString
ZPLC_LineGetWidth
ZPLC_LineGetDisp
ZPLC_RegGetDisp
ZPLC_ReRegValueString
ZPLC_DeleteLadTable
ZPLC_NewLadTable
ZPLC_DeleteLadItemes
ZPLC_Release
ZPLC_FileInit
ZPLC_FileLoad
ZPLC_FileFree
ZPLC_LADRead
ZPLC_FileGetSectBuff
ZPLC_LADGetItem
ZPLC_LADGetRow
ZPLC_CompileFile
ZPLC_FileSave
ZPLC_FileGetMaxStepes
ZPLC_FileGetMaxILLines
ZPLC_LineGetFeature
ZPLC_DllInit
ZPLC_ILWrite2
ZPLC_LADGetItemFromRow
ZPLC_LADItemGetMaster
ZPLC_LADCopyPart
ZPLC_AndToLd2
ZPLC_OrToLd2
ZPLC_LADAddItem
ZPLC_LADRowInsert
ZPLC_LADUndoTo
ZPLC_LADRowDelete
ZPLC_SetLadRelation
ZPLC_LADWrite
ZPLC_LADIfNeedClearRect
ZPLC_LADClearRect
ZPlc_LadToGlobalString
ZPLC_LADFromString
ZPLC_LADIfHaveZusi
ZPLC_LADRejustPart
ZPLC_LADCopyTo
ZPLC_ILtoLAD
ZPLC_RelationRead
ZPLC_SFCtoIL
ZPLC_LADtoIL
ZPLC_LADInsertItem_Row
ZPLC_LADClearItem
ZPLC_LADGetItem_Add
kernel32
SetEnvironmentVariableA
CreateFileW
GlobalLock
GlobalAlloc
GlobalHandle
GlobalUnlock
GlobalFree
CreateFileA
WriteFile
CloseHandle
WideCharToMultiByte
SizeofResource
LockResource
LoadResource
FindResourceW
Sleep
CreateThread
WaitForSingleObject
TerminateThread
MultiByteToWideChar
GetModuleFileNameA
IsDBCSLeadByte
CopyFileA
GetTickCount
CreateEventA
GetLocalTime
GetLastError
lstrlenW
LoadLibraryExA
FreeLibrary
lstrcatA
lstrlenA
WinExec
lstrcpyA
MulDiv
GetWindowsDirectoryA
LoadLibraryA
GetVersionExA
GetModuleHandleA
GetProcAddress
lstrcmpiA
SetLastError
DeactivateActCtx
ActivateActCtx
lstrcpynA
GetLocaleInfoA
GetFileAttributesA
InterlockedIncrement
InterlockedDecrement
LCMapStringA
WritePrivateProfileStringA
GetPrivateProfileSectionA
GetPrivateProfileStringA
GetACP
GetSystemTime
ResetEvent
SetEvent
GetExitCodeThread
ResumeThread
WaitForMultipleObjects
FindFirstFileA
FileTimeToSystemTime
FindClose
GetSystemDefaultLCID
SetCurrentDirectoryA
DeleteFileA
LocalFree
FormatMessageA
GlobalSize
lstrcmpW
LoadLibraryW
CompareStringA
GlobalDeleteAtom
GlobalFindAtomA
GlobalAddAtomA
GlobalGetAtomNameA
GetCurrentThreadId
FreeResource
FindResourceA
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
GetModuleHandleW
GetCurrentProcessId
SetThreadPriority
SuspendThread
CreateActCtxW
ReleaseActCtx
GetModuleFileNameW
lstrcmpA
GetStringTypeExA
GetThreadLocale
MoveFileA
ReadFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetFileSize
DuplicateHandle
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
GetShortPathNameA
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
CreateMutexA
ReleaseMutex
FindNextFileA
FileTimeToLocalFileTime
SystemTimeToFileTime
GetUserDefaultLCID
ReplaceFileA
SetFileTime
GetFileTime
GetTempFileNameA
GetDiskFreeSpaceA
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetUserDefaultUILanguage
GetCurrentThread
GetPrivateProfileIntA
LocalAlloc
TlsGetValue
GlobalReAlloc
InitializeCriticalSection
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
GlobalFlags
GetCPInfo
GetOEMCP
GetCurrentDirectoryA
SetErrorMode
GetFileAttributesExA
LocalFileTimeToFileTime
GetFileSizeEx
GetProfileIntA
SearchPathA
GetTempPathA
VirtualProtect
GetNumberFormatA
FindResourceExW
HeapAlloc
HeapFree
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
GetTimeFormatA
GetDateFormatA
GetCommandLineA
HeapSetInformation
GetStartupInfoW
RtlUnwind
RaiseException
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapReAlloc
ExitThread
ExitProcess
HeapQueryInformation
HeapSize
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetStdHandle
HeapCreate
IsValidCodePage
SetHandleCount
LCMapStringW
GetTimeZoneInformation
GetLocaleInfoW
EnumSystemLocalesA
IsValidLocale
GetStringTypeW
IsProcessorFeaturePresent
CompareStringW
GetConsoleCP
GetConsoleMode
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetDriveTypeW
WriteConsoleW
GetCurrentDirectoryW
GetProcessHeap
user32
GetMenuStringA
SetWindowPos
SetWindowLongA
GetMenu
CallWindowProcA
GetDlgCtrlID
SetWindowPlacement
SetScrollInfo
GetScrollInfo
DeferWindowPos
AdjustWindowRectEx
RegisterClassA
GetClassInfoExA
CreateWindowExA
MessageBoxA
ShowScrollBar
SetForegroundWindow
GetScrollPos
GetScrollRange
SetScrollRange
SetMenu
TrackPopupMenu
ScrollWindow
MapWindowPoints
GetMonitorInfoA
MonitorFromWindow
PeekMessageA
GetMessageTime
GetMessagePos
DestroyWindow
GetTopWindow
EndDeferWindowPos
BeginDeferWindowPos
GetLastActivePopup
GetForegroundWindow
GetWindowTextLengthA
SetFocus
RemovePropA
GetPropA
SetPropA
GetClassLongA
CallNextHookEx
SetWindowsHookExA
IsChild
WinHelpA
SendDlgItemMessageA
LoadIconA
LoadIconW
CheckDlgButton
GetDlgItemInt
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
IsDialogMessageA
SetWindowTextA
MoveWindow
ShowWindow
CheckMenuItem
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
IsZoomed
GetDesktopWindow
InsertMenuItemA
GetActiveWindow
GetWindowThreadProcessId
DestroyMenu
LoadMenuA
ReuseDDElParam
UnpackDDElParam
ValidateRect
GetMessageA
DefFrameProcA
DefMDIChildProcA
DrawMenuBar
TranslateMDISysAccel
GetWindowDC
BeginPaint
EndPaint
DrawStateA
EndDialog
GetNextDlgTabItem
CreateDialogIndirectParamA
GetKeyNameTextA
MapVirtualKeyA
CharNextA
GetMenuItemInfoA
GetAsyncKeyState
GetUpdateRect
SetClassLongA
GetSysColorBrush
NotifyWinEvent
DestroyAcceleratorTable
DeleteMenu
GetSystemMenu
CopyImage
EnumDisplayMonitors
SetLayeredWindowAttributes
DrawIconEx
CharUpperBuffA
MonitorFromPoint
IsMenu
InvertRect
HideCaret
EnableScrollBar
DrawIcon
ShowOwnedPopups
CopyAcceleratorTableA
InsertMenuA
GetKeyboardLayout
GetKeyboardState
LoadAcceleratorsW
CreateAcceleratorTableA
PostQuitMessage
WaitMessage
MapDialogRect
SetWindowContextHelpId
RealChildWindowFromPoint
UpdateLayeredWindow
SetCursorPos
SetMenuDefaultItem
GetMenuDefaultItem
UnregisterClassA
InvalidateRgn
SubtractRect
PostThreadMessageA
LoadImageW
GetDoubleClickTime
GetNextDlgGroupItem
CreateMenu
GetTabbedTextExtentW
IsCharLowerA
MapVirtualKeyExA
EnumChildWindows
GetWindowRgn
UpdateWindow
UnionRect
DrawEdge
DrawFrameControl
GetKeyState
DispatchMessageA
TranslateMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
EqualRect
PtInRect
IsRectEmpty
GetWindowTextA
IsWindowEnabled
ChildWindowFromPoint
WindowFromPoint
SetWindowRgn
SetRect
DefWindowProcA
GetClassInfoA
IntersectRect
GetWindowPlacement
IsIconic
GetSystemMetrics
SystemParametersInfoA
LoadImageA
DestroyCursor
DestroyIcon
CopyIcon
CreateIconIndirect
GetIconInfo
OffsetRect
PostMessageA
FrameRect
DrawFocusRect
CopyRect
FindWindowA
GetCapture
InflateRect
GetSysColor
SetRectEmpty
LoadBitmapA
SetParent
FillRect
ClientToScreen
ScreenToClient
GetSubMenu
LoadMenuW
GetWindowLongA
ReleaseCapture
SetCapture
GetCursorPos
EnableMenuItem
AppendMenuA
CreatePopupMenu
RedrawWindow
ReleaseDC
GetDC
LoadCursorA
SetCursor
LockWindowUpdate
GetFocus
GetParent
GetClassNameA
CharUpperA
IsWindowVisible
SetScrollPos
KillTimer
GetWindowRect
IsWindow
TranslateAcceleratorA
InvalidateRect
SetTimer
GetClientRect
LoadAcceleratorsA
EnableWindow
SendMessageA
RemoveMenu
GetClipboardData
IsClipboardFormatAvailable
SetClipboardData
CloseClipboard
EmptyClipboard
RegisterClipboardFormatA
OpenClipboard
LoadCursorW
wsprintfA
GetDlgItem
GrayStringA
DrawTextExA
TabbedTextOutA
DrawTextA
BringWindowToTop
CharLowerA
ModifyMenuA
GetWindow
MessageBeep
SetActiveWindow
ToAsciiEx
RegisterWindowMessageA
UnhookWindowsHookEx
gdi32
CreateFontIndirectA
SetBkMode
SetBkColor
GetTextMetricsA
SetLayout
GetViewportExtEx
GetWindowExtEx
GetPixel
SetTextJustification
TextOutA
GetClipBox
FrameRgn
FillRgn
SelectClipRgn
CreateRectRgn
CombineRgn
OffsetRgn
CreateRoundRectRgn
CreatePolygonRgn
ExtTextOutA
GetViewportOrgEx
CreatePalette
SelectPalette
RealizePalette
LineTo
BeginPath
EndPath
PathToRegion
Polygon
Ellipse
CreateHatchBrush
GetBkColor
PtVisible
RectVisible
Escape
PolyBezier
UnrealizeObject
PatBlt
CopyMetaFileA
CreateDCA
SaveDC
RestoreDC
SetPolyFillMode
SetROP2
SetMapMode
ExcludeClipRect
IntersectClipRect
SetTextAlign
MoveToEx
SetTextColor
CreateSolidBrush
StretchBlt
CreateBitmap
RoundRect
Rectangle
GetDeviceCaps
DeleteDC
StretchDIBits
SetStretchBltMode
SwapBuffers
GetCurrentObject
SetPixelFormat
ChoosePixelFormat
SetPixel
GetTextExtentPoint32A
CreateRectRgnIndirect
CreatePen
CreateCompatibleBitmap
GetStockObject
GetObjectA
SetDIBits
EnumFontFamiliesA
BitBlt
SelectObject
CreateCompatibleDC
CreateDIBSection
DeleteObject
GetBitmapBits
StartDocA
SetViewportOrgEx
OffsetViewportOrgEx
SetPixelV
EnumFontFamiliesExA
GetBoundsRect
PtInRegion
GetSystemPaletteEntries
GetNearestPaletteIndex
GetWindowOrgEx
GetTextExtentPoint32W
GetTextExtentPointA
GetTextFaceA
GetTextAlign
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetNearestColor
SetPaletteEntries
ExtFloodFill
GetPaletteEntries
GetDIBits
SetDIBColorTable
GetRgnBox
EndDoc
AbortDoc
SetAbortProc
EndPage
StartPage
GetCharWidthA
LPtoDP
Polyline
CreateEllipticRgn
GetTextCharsetInfo
CreateDIBitmap
DPtoLP
GetMapMode
SetRectRgn
GetTextColor
GetObjectType
CreatePatternBrush
ExtSelectClipRgn
ArcTo
GetCurrentPositionEx
ScaleWindowExtEx
SetWindowExtEx
OffsetWindowOrgEx
SetWindowOrgEx
ScaleViewportExtEx
SetViewportExtEx
GetLayout
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
GetJobA
OpenPrinterA
ClosePrinter
DocumentPropertiesA
advapi32
RegDeleteValueA
RegEnumValueA
RegOpenKeyExA
RegQueryValueA
RegCloseKey
RegSetValueA
RegQueryValueExA
RegOpenKeyExW
RegDeleteKeyA
RegEnumKeyA
SetFileSecurityA
GetFileSecurityA
RegCreateKeyExA
RegSetValueExA
RegEnumKeyExA
shell32
ShellExecuteA
ShellExecuteExA
DragAcceptFiles
DragFinish
DragQueryFileA
SHGetFileInfoA
SHAppBarMessage
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetMalloc
SHGetPathFromIDListA
SHBrowseForFolderA
SHAddToRecentDocs
ExtractIconA
comctl32
ImageList_DrawEx
ImageList_Create
ord17
ImageList_GetImageCount
ImageList_GetIcon
InitCommonControlsEx
ImageList_ReplaceIcon
ImageList_GetIconSize
ImageList_Destroy
shlwapi
PathFindFileNameA
PathRemoveFileSpecW
PathFindExtensionA
PathRemoveExtensionA
PathStripToRootA
PathIsUNCA
PathFileExistsA
ole32
CreateStreamOnHGlobal
OleIsCurrentClipboard
OleFlushClipboard
DoDragDrop
OleTranslateAccelerator
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
CoRevokeClassObject
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleGetClipboard
StgCreateDocfileOnILockBytes
CoGetClassObject
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
CLSIDFromProgID
OleInitialize
CoFreeUnusedLibraries
OleUninitialize
IsAccelerator
CoCreateGuid
CLSIDFromString
CoInitialize
CoInitializeEx
CoCreateInstance
CoUninitialize
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
StringFromCLSID
CoTaskMemFree
CoRegisterMessageFilter
oleaut32
VariantTimeToSystemTime
SystemTimeToVariantTime
SysAllocStringByteLen
VariantChangeType
VariantInit
OleCreateFontIndirect
SysAllocString
SysStringLen
VariantCopy
SysFreeString
SafeArrayDestroy
VarBstrFromDate
VariantClear
SysAllocStringLen
oledlg
ord8
gdiplus
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipDrawImageRectI
GdipDrawImageI
GdipDrawLinesI
GdipGetImageHeight
GdipGetImageWidth
GdipGetImagePixelFormat
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipAlloc
GdipFree
GdipCreateBitmapFromScan0
GdipCloneImage
GdipDisposeImage
GdipCreateHBITMAPFromBitmap
GdipSaveImageToFile
GdipGetImageEncodersSize
GdipGetImageEncoders
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipDrawImageRectRect
GdipDeleteGraphics
GdipCreateBitmapFromFile
GdiplusStartup
GdiplusShutdown
GdipGetImageGraphicsContext
GdipCreateSolidFill
GdipDeleteBrush
GdipCloneBrush
GdipFillRectangleI
GdipCreatePen1
GdipDeletePen
GdipSetInterpolationMode
ws2_32
sendto
inet_addr
socket
bind
closesocket
inet_ntoa
WSAGetLastError
recvfrom
setsockopt
htons
WSASetLastError
WSACleanup
WSAStartup
gethostbyname
gethostname
winmm
PlaySoundA
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
imm32
ImmGetOpenStatus
ImmReleaseContext
ImmGetContext
Sections
.text Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 137KB - Virtual size: 990KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.8MB - Virtual size: 1.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 281KB - Virtual size: 281KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ