Static task
static1
Behavioral task
behavioral1
Sample
DVRemoteDesktop.exe
Resource
win10-20231023-en
General
-
Target
DVRemoteDesktop.exe
-
Size
82KB
-
MD5
06ce10d98538b69a990e6491bbec145e
-
SHA1
9c0033d9d89e802a83275352c4b2ab64e4a93cd0
-
SHA256
6d2a52e5434778d3f064aab18bff9a4d625d7c0fc1774a6dda0e0567d86d17e8
-
SHA512
2e530d4788120d1abab0215e14ebb9eb352e2ac6862554f2e1f7039efb8c6eeaf41d890ff2827a7b57d338bcd9a57a1ca8fc22527790102d9d8f9e884185507d
-
SSDEEP
1536:WKm8juGRaKuxyMkkkGon6eLQ5jrHSC+6DKmYhz3W:WAnfnY+o5jrvDKhhzW
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DVRemoteDesktop.exe
Files
-
DVRemoteDesktop.exe.exe windows:5 windows x86
42a338dcabeec1f844471142f456e3de
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
comctl32
ord17
shlwapi
StrCpyW
PathAppendW
SHGetValueW
PathRemoveFileSpecW
StrCmpW
SHSetValueW
ws2_32
connect
gethostbyname
inet_addr
htons
socket
WSACleanup
WSAStartup
setsockopt
closesocket
recv
send
kernel32
GetStringTypeA
LCMapStringW
MultiByteToWideChar
LCMapStringA
InitializeCriticalSectionAndSpinCount
RtlUnwind
GetLocaleInfoA
LoadLibraryA
GetTempPathW
GetCurrentProcessId
WideCharToMultiByte
lstrlenW
GetCommandLineW
WaitForSingleObject
CloseHandle
CreateDirectoryW
GetTempFileNameW
CreateFileW
WriteFile
GetModuleFileNameW
SetCurrentDirectoryW
LoadLibraryW
GetProcAddress
FreeLibrary
DeleteFileW
CreateThread
Sleep
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
HeapReAlloc
VirtualAlloc
GetStringTypeW
LeaveCriticalSection
HeapSize
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
VirtualFree
HeapCreate
DeleteCriticalSection
GetFileType
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
ExitProcess
GetModuleFileNameA
GetStdHandle
InterlockedDecrement
GetCurrentThreadId
SetLastError
InterlockedIncrement
TlsFree
TlsSetValue
TlsAlloc
TlsGetValue
GetModuleHandleW
HeapFree
GetLastError
RaiseException
HeapAlloc
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
EnterCriticalSection
TerminateProcess
GetStartupInfoA
GetCommandLineA
user32
GetDlgItemInt
GetDlgItemTextW
SetDlgItemInt
GetDlgItem
SetDlgItemTextW
DefWindowProcW
GetPropW
EndPaint
FillRect
BeginPaint
SetFocus
PostQuitMessage
RemovePropW
DestroyWindow
DialogBoxParamW
SetPropW
GetDesktopWindow
EndDialog
GetMonitorInfoW
MonitorFromWindow
GetWindowRect
IsZoomed
SetWindowPos
SendMessageW
SetWindowLongW
GetWindowLongW
MoveWindow
PostMessageW
wsprintfA
GetClientRect
CreateWindowExW
AdjustWindowRectEx
SystemParametersInfoW
RegisterClassExW
LoadCursorW
LoadIconW
LoadBitmapW
wsprintfW
DispatchMessageW
TranslateMessage
GetMessageW
MessageBoxW
SetWindowTextW
InvalidateRect
ShowWindow
gdi32
DeleteObject
CreateSolidBrush
StretchBlt
GetStockObject
DeleteDC
GetObjectW
SelectObject
CreateCompatibleDC
shell32
CommandLineToArgvW
SHFileOperationW
ole32
CoUninitialize
CoInitialize
Sections
.text Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ