Static task
static1
Behavioral task
behavioral1
Sample
45c7fba72051868e602b2a1fab758a9aeec98f3d1a7fd1a793028a2e369497c3.exe
Resource
win7-20230831-en
Behavioral task
behavioral2
Sample
45c7fba72051868e602b2a1fab758a9aeec98f3d1a7fd1a793028a2e369497c3.exe
Resource
win10v2004-20230915-en
General
-
Target
45c7fba72051868e602b2a1fab758a9aeec98f3d1a7fd1a793028a2e369497c3
-
Size
470KB
-
MD5
e25d359408cf19ed2dd51f75b02ad230
-
SHA1
802acb667cfa74ee60d316a7d404ed4652f1074b
-
SHA256
45c7fba72051868e602b2a1fab758a9aeec98f3d1a7fd1a793028a2e369497c3
-
SHA512
ba5e19b82c592257b205c7dfa058d392035be83d254cb5638c9a9b5b47625d1e7e9ef37bc8f944bd89bcdf4c65b3d30700438e3bdec1b03c6e7a5b5a3e581ddf
-
SSDEEP
6144:cM7hj2ISxcNFgtpSw6sSVDH0lCGGlSDAeEADyYQFII2yiGQrHCOIGkrXsqThF5L/:UISxcNFgLdqUzZ2h+ipowrQA0s4
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45c7fba72051868e602b2a1fab758a9aeec98f3d1a7fd1a793028a2e369497c3
Files
-
45c7fba72051868e602b2a1fab758a9aeec98f3d1a7fd1a793028a2e369497c3.exe windows:6 windows x86
3c053b8791de342385f9b14e60aea447
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
hid
HidD_SetOutputReport
HidD_GetHidGuid
HidD_GetAttributes
HidD_GetInputReport
setupapi
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiEnumDeviceInterfaces
kernel32
SetFilePointerEx
GetConsoleMode
GetConsoleCP
FlushFileBuffers
GetStringTypeW
SetStdHandle
LCMapStringW
OutputDebugStringW
Sleep
FindResourceW
LoadResource
WriteConsoleW
LockResource
SizeofResource
CloseHandle
GetSystemDefaultLangID
CreateMutexW
CreateFileW
WideCharToMultiByte
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
MultiByteToWideChar
HeapSize
InitializeCriticalSectionEx
HeapFree
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
FindResourceExW
GetOEMCP
IsValidCodePage
LocalFree
IsDebuggerPresent
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwind
SetLastError
EncodePointer
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
WriteFile
GetACP
GetFileType
FindClose
FindFirstFileExW
FindNextFileW
user32
PostQuitMessage
SendMessageW
LoadIconW
MessageBoxW
SetTimer
ShowWindow
ole32
CoSetProxyBlanket
CoCreateInstance
CoUninitialize
CoInitializeSecurity
CoInitializeEx
oleaut32
SysAllocString
SysFreeString
VariantClear
imm32
ImmDisableIME
duilib
?Notify@WindowImplBase@DuiLib@@UAEXAAUtagTNotifyUI@2@@Z
??BCDuiString@DuiLib@@QBEPB_WXZ
??HCDuiString@DuiLib@@QBE?AV01@PB_W@Z
?GetHWND@CWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
??BCWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
??0WindowImplBase@DuiLib@@QAE@XZ
??1WindowImplBase@DuiLib@@UAE@XZ
?InitResource@WindowImplBase@DuiLib@@UAEXXZ
?GetSkinType@WindowImplBase@DuiLib@@MAE?AVCDuiString@2@XZ
?GetManagerName@WindowImplBase@DuiLib@@MAEPB_WXZ
??0CDuiString@DuiLib@@QAE@PB_WH@Z
??0CDuiString@DuiLib@@QAE@ABV01@@Z
?GetData@CDuiString@DuiLib@@QBEPB_WXZ
??4CDuiString@DuiLib@@QAEABV01@PB_W@Z
??8CDuiString@DuiLib@@QBE_NPB_W@Z
?GetValue@CProgressUI@DuiLib@@QBEHXZ
?CenterWindow@CWindowWnd@DuiLib@@QAEXXZ
?SendMessageW@CWindowWnd@DuiLib@@QAEJIIJ@Z
?GetSuperClassName@CWindowWnd@DuiLib@@MBEPB_WXZ
?HandleMessage@CWindowWnd@DuiLib@@MAEJIIJ@Z
?OnFinalMessage@WindowImplBase@DuiLib@@UAEXPAUHWND__@@@Z
?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PB_WKKHHHHPAUHMENU__@@@Z
?GetMessageMap@WindowImplBase@DuiLib@@MBEPBUDUI_MSGMAP@2@XZ
?OnClick@WindowImplBase@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?IsInStaticControl@WindowImplBase@DuiLib@@MAEHPAVCControlUI@2@@Z
?ResponseDefaultKeyEvent@WindowImplBase@DuiLib@@MAEJI@Z
?GetClassStyle@WindowImplBase@DuiLib@@UBEIXZ
?CreateControl@WindowImplBase@DuiLib@@UAEPAVCControlUI@2@PB_W@Z
?QueryControlText@WindowImplBase@DuiLib@@UAEPB_WPB_W0@Z
?MessageHandler@WindowImplBase@DuiLib@@UAEJIIJAA_N@Z
?OnClose@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnDestroy@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcActivate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcCalcSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcPaint@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcHitTest@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnGetMinMaxInfo@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseHover@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnChar@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSysCommand@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnCreate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonUp@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseMove@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?HandleCustomMessage@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?GetStyle@WindowImplBase@DuiLib@@UAEJXZ
?SetFont@CLabelUI@DuiLib@@QAEXH@Z
?SetValue@CSliderUI@DuiLib@@QAEXH@Z
??0CStdStringPtrMap@DuiLib@@QAE@H@Z
??1CStdStringPtrMap@DuiLib@@QAE@XZ
?GetBkImage@CControlUI@DuiLib@@QAEPB_WXZ
?SetBorderColor@CControlUI@DuiLib@@QAEXK@Z
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PB_W@Z
?MessageHandler@CPaintManagerUI@DuiLib@@QAE_NIIJAAJ@Z
?MessageLoop@CPaintManagerUI@DuiLib@@SAXXZ
?SetResourcePath@CPaintManagerUI@DuiLib@@SAXPB_W@Z
?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
?GetInstancePath@CPaintManagerUI@DuiLib@@SA?AVCDuiString@2@XZ
??1CDuiString@DuiLib@@QAE@XZ
xinput1_4
ord2
Sections
.text Size: 141KB - Virtual size: 141KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 50KB - Virtual size: 49KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 265KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ