Static task
static1
Behavioral task
behavioral1
Sample
c51cb82810ce02e4bfa18791c18deebbfd68188ef7e18c298990ce4c40f672ea.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
c51cb82810ce02e4bfa18791c18deebbfd68188ef7e18c298990ce4c40f672ea.exe
Resource
win10v2004-20231020-en
General
-
Target
c51cb82810ce02e4bfa18791c18deebbfd68188ef7e18c298990ce4c40f672ea
-
Size
105KB
-
MD5
027d05c23614d013719fcebcd65aa1c5
-
SHA1
5c52696e4e19a2a678d745edca874a785a70399a
-
SHA256
c51cb82810ce02e4bfa18791c18deebbfd68188ef7e18c298990ce4c40f672ea
-
SHA512
d42f9543e14367cf4e6c474f8937cc959a2e4a9afcd822c18669a3bfce412cbe8f617e371a416e38db34c501f5943f6539caa0e02036897900e46514feba320c
-
SSDEEP
1536:pnJfp2/cR4MaYVoaQJNuyDyXy3yr7yLsXy7fXzpiqep7HePRcxXABrEUc5wvxtwm:p+0KMaAo1iFePRgOE/5Mxt+q
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c51cb82810ce02e4bfa18791c18deebbfd68188ef7e18c298990ce4c40f672ea
Files
-
c51cb82810ce02e4bfa18791c18deebbfd68188ef7e18c298990ce4c40f672ea.exe windows:6 windows x86
d674e92b0160b481d978771f9c4caa37
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mfc140u
ord8470
ord8386
ord12865
ord8324
ord5357
ord2486
ord12541
ord12542
ord14589
ord7922
ord14595
ord9398
ord4152
ord4090
ord12947
ord7941
ord2034
ord11982
ord11983
ord14466
ord12531
ord8000
ord14667
ord6348
ord14669
ord6350
ord14668
ord6349
ord3852
ord12239
ord12247
ord4589
ord8217
ord10433
ord12251
ord12928
ord5249
ord5549
ord5760
ord9350
ord5525
ord5763
ord5252
ord5411
ord5228
ord7722
ord7723
ord7712
ord5409
ord10250
ord9209
ord6860
ord2246
ord13911
ord7313
ord13442
ord952
ord2205
ord7997
ord1472
ord995
ord7653
ord10379
ord8360
ord12921
ord14411
ord14417
ord8719
ord12884
ord4664
ord2885
ord14606
ord1142
ord498
ord12316
ord12317
ord13110
ord11991
ord2889
ord5699
ord1175
ord545
ord2332
ord290
ord1692
ord1689
ord2990
ord8757
ord286
ord285
ord5921
ord3009
ord4815
ord1526
ord1525
ord8219
ord12219
ord5918
ord2409
ord1523
ord296
ord13763
ord1045
ord280
kernel32
GetLastError
GetPrivateProfileStringA
GetUserDefaultLCID
WideCharToMultiByte
SystemTimeToFileTime
ExitProcess
Sleep
LocalAlloc
GetProcAddress
FreeLibrary
CopyFileW
GetCurrentProcess
GetCurrentDirectoryW
CloseHandle
LocalFileTimeToFileTime
MultiByteToWideChar
OutputDebugStringW
GetModuleFileNameW
GetFileAttributesW
CreateFileW
SetFilePointer
SetFileTime
WriteFile
ReadFile
LocalFree
LoadLibraryW
CreateMutexW
GetPrivateProfileStringW
InitializeCriticalSectionEx
DeleteCriticalSection
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
CreateEventW
InitializeCriticalSectionAndSpinCount
IsProcessorFeaturePresent
TerminateProcess
CreateDirectoryW
user32
wsprintfW
SetWindowLongW
GetWindowLongW
SetTimer
KillTimer
advapi32
OpenProcessToken
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
RegCreateKeyW
RegCloseKey
RegOpenKeyW
LookupPrivilegeValueW
AdjustTokenPrivileges
comctl32
InitCommonControlsEx
oleaut32
SysStringLen
SysFreeString
SysAllocString
VariantClear
SysAllocStringByteLen
msvcp140
?_Xlength_error@std@@YAXPBD@Z
duilib
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PB_W@Z
?SetMaxValue@CProgressUI@DuiLib@@QAEXH@Z
?SetValue@CProgressUI@DuiLib@@QAEXH@Z
?SetShowText@CProgressUI@DuiLib@@QAEX_N@Z
?SetIcon@CWindowWnd@DuiLib@@QAEXI@Z
?GetPaintWindow@CPaintManagerUI@DuiLib@@QBEPAUHWND__@@XZ
?SetForeImage@CControlUI@DuiLib@@QAEXPB_W@Z
??8CDuiString@DuiLib@@QBE_NPB_W@Z
?SendMessageW@CWindowWnd@DuiLib@@QAEJIIJ@Z
?HandleMessage@WindowImplBase@DuiLib@@UAEJIIJ@Z
??0CDuiString@DuiLib@@QAE@PB_WH@Z
??1CDuiString@DuiLib@@QAE@XZ
?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
?SetResourcePath@CPaintManagerUI@DuiLib@@SAXPB_W@Z
??BCDuiString@DuiLib@@QBEPB_WXZ
??HCDuiString@DuiLib@@QBE?AV01@PB_W@Z
?QueryControlText@WindowImplBase@DuiLib@@UAEPB_WPB_W0@Z
?CreateControl@WindowImplBase@DuiLib@@UAEPAVCControlUI@2@PB_W@Z
?MessageHandler@WindowImplBase@DuiLib@@UAEJIIJAA_N@Z
?GetMessageMap@WindowImplBase@DuiLib@@MBEPBUDUI_MSGMAP@2@XZ
?GetStyle@WindowImplBase@DuiLib@@UAEJXZ
?HandleCustomMessage@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseMove@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonUp@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSetFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKillFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKeyDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnCreate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSysCommand@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnChar@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseHover@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseWheel@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnGetMinMaxInfo@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcHitTest@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcPaint@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcCalcSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcActivate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnDestroy@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnClose@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?ResponseDefaultKeyEvent@WindowImplBase@DuiLib@@MAEJI@Z
?GetManagerName@WindowImplBase@DuiLib@@MAEPB_WXZ
?GetSkinType@WindowImplBase@DuiLib@@MAE?AVCDuiString@2@XZ
?IsInStaticControl@WindowImplBase@DuiLib@@MAEHPAVCControlUI@2@@Z
?OnClick@WindowImplBase@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?InitResource@WindowImplBase@DuiLib@@UAEXXZ
?OnFinalMessage@WindowImplBase@DuiLib@@UAEXPAUHWND__@@@Z
?GetClassStyle@WindowImplBase@DuiLib@@UBEIXZ
?GetSuperClassName@CWindowWnd@DuiLib@@MBEPB_WXZ
??1WindowImplBase@DuiLib@@UAE@XZ
??0WindowImplBase@DuiLib@@QAE@XZ
?MessageLoop@CPaintManagerUI@DuiLib@@SAXXZ
?CenterWindow@CWindowWnd@DuiLib@@QAEXXZ
?ShowWindow@CWindowWnd@DuiLib@@QAEX_N0@Z
?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PB_WKKHHHHPAUHMENU__@@@Z
?GetInstancePath@CPaintManagerUI@DuiLib@@SA?AVCDuiString@2@XZ
setupapi
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyW
SetupDiDestroyDeviceInfoList
SetupDiGetClassDevsW
SetupDiGetDeviceInstanceIdW
vcruntime140
_except_handler4_common
__current_exception
__current_exception_context
memset
_CxxThrowException
memmove
__std_exception_destroy
wcsrchr
wcsstr
__CxxFrameHandler3
memcpy
__std_exception_copy
api-ms-win-crt-heap-l1-1-0
malloc
calloc
free
_set_new_mode
_callnewh
api-ms-win-crt-runtime-l1-1-0
_errno
terminate
_controlfp_s
_crt_atexit
_register_onexit_function
_initialize_onexit_table
_invalid_parameter_noinfo
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
_seh_filter_exe
_exit
exit
_initterm_e
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_set_app_type
_invalid_parameter_noinfo_noreturn
api-ms-win-crt-convert-l1-1-0
wcstombs
_wtof
wcstol
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
__p__commode
__stdio_common_vswprintf_s
_set_fmode
__stdio_common_vfprintf
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ