Static task
static1
Behavioral task
behavioral1
Sample
bluetooth-driver-installer-1-0-0-151.exe
Resource
win10v2004-20230915-en
General
-
Target
bluetooth-driver-installer-1-0-0-151.exe
-
Size
3.2MB
-
MD5
9c362485ed8046c4dd51ef71d015d8a7
-
SHA1
431b341a94e13c8e4da4ef2a2608d5e74054df25
-
SHA256
92999781d1f53bf713562fe8502cbad8e2b1338558189a96fe303232b02cd3bd
-
SHA512
751efda9879e89204e171d7632ad0437ee3a4e887b9a9883b2660082ac2b2498e7fff2e517872970a3695566707a3b2aa543abffe5e7590b01c55ad325e6451b
-
SSDEEP
98304:KOZL/qM8sRQNJVtHsGRB8AL9Jax+VXnge:K+LqM8smNFHzB88f2e
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bluetooth-driver-installer-1-0-0-151.exe
Files
-
bluetooth-driver-installer-1-0-0-151.exe.exe windows:5 windows x64
c9bf23986cfa0c32ef04aab1829bd1d4
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
kernel32
ReleaseMutex
Sleep
WaitForSingleObject
CreateMutexA
OpenMutexA
GetCurrentProcessId
CreateThread
SetErrorMode
__C_specific_handler
IsBadReadPtr
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetShortPathNameA
SearchPathA
GetTempPathA
GetTempPathW
GetTempFileNameA
GetTempFileNameW
GetWindowsDirectoryA
CreateFileA
GetPrivateProfileStringA
WritePrivateProfileStringA
DeleteFileA
MoveFileA
GetModuleFileNameA
CreateProcessA
GetStartupInfoA
GetCommandLineA
SetEvent
CloseHandle
CreateEventA
GetSystemTimeAsFileTime
ExitProcess
GetLocalTime
GetCurrentThreadId
GetTickCount
SetEnvironmentVariableA
GetFileSize
CompareStringA
SetEndOfFile
FlushFileBuffers
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
SetStdHandle
GetConsoleMode
GetConsoleCP
SetFilePointer
GetLocaleInfoW
HeapReAlloc
IsValidLocale
EnumSystemLocalesA
GetLocaleInfoA
GetUserDefaultLCID
GetTimeZoneInformation
HeapSize
FreeLibrary
SetConsoleCtrlHandler
FatalAppExitA
QueryPerformanceCounter
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
HeapDestroy
HeapCreate
HeapSetInformation
RtlVirtualUnwind
GetStdHandle
WriteFile
IsValidCodePage
GetOEMCP
SetLastError
LoadLibraryA
GetLastError
GetProcAddress
VirtualAlloc
VirtualProtect
GetEnvironmentVariableA
FreeConsole
GetCommandLineW
ReadFile
GetModuleHandleA
GetACP
FlsAlloc
GetCurrentThread
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetFileAttributesA
GetFileAttributesW
GetFileAttributesExW
CreateFileW
GetCurrentDirectoryW
SetCurrentDirectoryW
GetFileAttributesExA
GetCurrentDirectoryA
SetCurrentDirectoryA
FindClose
GetFileTime
SetFileTime
GetDiskFreeSpaceExW
GetFullPathNameW
RemoveDirectoryW
DeleteFileW
CreateDirectoryW
CreateHardLinkW
GetDiskFreeSpaceExA
GetFullPathNameA
RemoveDirectoryA
CreateDirectoryA
CreateHardLinkA
MoveFileW
CopyFileW
CopyFileA
GetFileInformationByHandle
GetShortPathNameW
FindFirstFileW
FindNextFileW
FindFirstFileA
FindNextFileA
LocalFree
FormatMessageA
RtlLookupFunctionEntry
RtlUnwindEx
RaiseException
RtlPcToFileHeader
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RtlCaptureContext
HeapFree
HeapAlloc
GetProcessHeap
GetDateFormatA
GetTimeFormatA
GetCPInfo
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
FlsGetValue
TlsAlloc
FlsSetValue
TlsFree
FlsFree
TlsSetValue
CompareStringW
user32
MessageBoxA
DestroyWindow
PeekMessageA
TranslateMessage
DispatchMessageA
BeginPaint
EndPaint
KillTimer
LoadCursorA
GetAsyncKeyState
GetSystemMetrics
SetTimer
PostMessageA
IsWindow
DefWindowProcA
DefDlgProcA
DrawTextA
CreateDialogParamA
CreateWindowExA
RegisterClassExA
RegisterClassA
DialogBoxParamA
SendMessageW
GetWindowTextLengthA
GetWindowTextA
SetWindowTextA
GetDlgItem
CreateDialogIndirectParamA
ShowWindow
UpdateWindow
LoadStringA
LoadStringW
FindWindowA
SendMessageA
WaitForInputIdle
gdi32
SelectObject
BitBlt
DeleteObject
CreatePalette
CreateDCA
SelectPalette
RealizePalette
CreateDIBitmap
DeleteDC
CreateCompatibleDC
comdlg32
GetSaveFileNameA
GetOpenFileNameA
Sections
.sktfir Size: - Virtual size: 3.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.fesov Size: - Virtual size: 169KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bss Size: - Virtual size: 41KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.acumd Size: - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.dlnkw Size: - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: - Virtual size: 484B
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.celzf Size: 4KB - Virtual size: 40B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rvltp Size: - Virtual size: 109KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rhsb Size: 688KB - Virtual size: 704KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.xzigk Size: 4KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.wdovn Size: 204KB - Virtual size: 256KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bpolna Size: 60KB - Virtual size: 128KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.jedgbm Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.wjkeh Size: 12KB - Virtual size: 112KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ