Static task
static1
Behavioral task
behavioral1
Sample
PosLabel.exe
Resource
win7-20231023-en
Behavioral task
behavioral2
Sample
PosLabel.exe
Resource
win10v2004-20231025-en
General
-
Target
PosLabel.exe
-
Size
7.5MB
-
MD5
45f67ed58864ec74f7f44e32f55b3ef4
-
SHA1
1f474a7ff215e650c95a5bc9c38c50f74c814ca4
-
SHA256
e3fae958f250c32185c4f770198b730e836ae64f5cbe884e4c5f082a4e738003
-
SHA512
d7b688b09cdfd8fa0c74777f31a3d5487b912287362ebb9d086d9b9894acdd8bd03fab41d402e0b9a9f753c4ae9a735b19645f4a218c3de68f489e9266befea1
-
SSDEEP
196608:entkQ4AWsc/m9M9S9M969M9j9M9iPpHocG6vWtiQeM4rkalYh8A:HcEPphG6vWtiQeM4rkalYh8A
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PosLabel.exe
Files
-
PosLabel.exe.exe windows:5 windows x86
dd1588a9e16a6c52260ed3c7a7860119
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FileTimeToLocalFileTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
SetEnvironmentVariableA
CompareStringW
SetCurrentDirectoryA
GetConsoleOutputCP
WriteConsoleA
GetLocaleInfoW
GetDriveTypeA
HeapReAlloc
HeapSize
GetConsoleMode
GetConsoleCP
VirtualFree
HeapCreate
HeapDestroy
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsA
QueryPerformanceCounter
GetTimeZoneInformation
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
InitializeCriticalSectionAndSpinCount
LCMapStringW
LCMapStringA
GetStringTypeW
GetStringTypeA
GetProcessHeap
HeapAlloc
HeapFree
IsValidCodePage
GetACP
SetConsoleCtrlHandler
FatalAppExitA
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
OutputDebugStringW
WriteConsoleW
OutputDebugStringA
GetStdHandle
ExitThread
CreateThread
GetFileType
SetStdHandle
VirtualQuery
GetSystemInfo
VirtualAlloc
IsBadReadPtr
HeapValidate
GetStartupInfoA
GetCommandLineA
GetDateFormatA
GetTimeFormatA
GetSystemTimeAsFileTime
ExitProcess
Sleep
DebugBreak
IsDebuggerPresent
RaiseException
RtlUnwind
GetCurrentDirectoryA
LoadLibraryW
GetSystemDirectoryW
FindResourceExA
GetModuleHandleW
GetOEMCP
GetCPInfo
GetModuleFileNameW
SetErrorMode
GlobalFlags
GetProfileIntA
FindNextFileA
GetTickCount
TlsGetValue
LocalReAlloc
TlsSetValue
EnterCriticalSection
LeaveCriticalSection
TlsFree
GlobalHandle
DeleteCriticalSection
TlsAlloc
InitializeCriticalSection
InterlockedExchange
GetCurrentThread
GetLocaleInfoA
LoadLibraryExA
ConvertDefaultLocale
EnumResourceLanguagesA
WaitForSingleObject
FileTimeToSystemTime
InterlockedIncrement
InterlockedDecrement
GetDiskFreeSpaceA
GetTempFileNameA
GetAtomNameA
WritePrivateProfileStringA
GetPrivateProfileStringA
GetPrivateProfileIntA
SetFileAttributesA
SetFileTime
SystemTimeToFileTime
LocalFileTimeToFileTime
GetFileAttributesExA
GetFileTime
GetFileSizeEx
GetFileAttributesA
GetShortPathNameA
lstrcmpiA
GetThreadLocale
GetStringTypeExA
GetFullPathNameA
FindFirstFileA
FindClose
DeleteFileA
MoveFileA
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
ReadFile
DuplicateHandle
GetHandleInformation
lstrcpyW
GlobalReAlloc
lstrcmpA
GetCurrentProcessId
lstrlenW
CopyFileA
FormatMessageA
SuspendThread
ResumeThread
GetThreadPriority
SetThreadPriority
CompareStringA
SetLastError
lstrcmpW
GetCurrentThreadId
GlobalGetAtomNameA
GlobalAddAtomA
GlobalFindAtomA
GlobalDeleteAtom
FreeResource
GetTempPathA
GetProcAddress
CreateFileA
SetupComm
SetCommMask
GetCommState
SetCommState
GetCommTimeouts
WriteFile
WaitForMultipleObjects
CancelIo
GetOverlappedResult
CloseHandle
CreateEventA
LocalAlloc
LocalFree
SetEvent
lstrcpyA
GetVolumeInformationA
GetComputerNameA
GetVersionExA
GetModuleHandleA
VirtualProtect
GetLastError
GetSystemDefaultLangID
GetCurrentProcess
SetPriorityClass
FindResourceA
GetModuleFileNameA
lstrcatA
GetWindowsDirectoryA
LoadLibraryA
FreeLibrary
GlobalSize
GlobalLock
GlobalUnlock
GlobalAlloc
IsDBCSLeadByte
GlobalFree
lstrlenA
WinExec
MultiByteToWideChar
lstrcpynA
CreateDirectoryA
MulDiv
WideCharToMultiByte
LoadResource
LockResource
SizeofResource
OpenEventA
user32
FlashWindow
WindowFromPoint
SetParent
GetLastActivePopup
FindWindowExA
FindWindowA
ChildWindowFromPointEx
ChildWindowFromPoint
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
DlgDirSelectComboBoxExA
DlgDirSelectExA
DlgDirListComboBoxA
DlgDirListA
SetCapture
KillTimer
SetTimer
DrawCaption
DrawAnimatedRects
EnableScrollBar
RedrawWindow
LockWindowUpdate
GetDCEx
ShowOwnedPopups
IsWindowVisible
ValidateRgn
ValidateRect
InvalidateRgn
InvalidateRect
GetUpdateRgn
GetUpdateRect
UpdateWindow
GetWindowDC
EndPaint
BeginPaint
ClientToScreen
BringWindowToTop
GetWindowRgn
SetWindowRgn
ArrangeIconicWindows
IsZoomed
HiliteMenuItem
GetSystemMenu
DrawMenuBar
DragDetect
GetMenuCheckMarkDimensions
LoadBitmapA
SetMenuItemBitmaps
RegisterWindowMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
LoadIconA
SendDlgItemMessageA
GetClientRect
MapWindowPoints
DispatchMessageA
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetScrollInfo
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
ChangeClipboardChain
CloseWindow
TrackPopupMenuEx
TrackPopupMenu
SetWindowPlacement
GetWindowTextLengthA
GetWindowTextA
SetWindowsHookExA
CallNextHookEx
GetClassLongA
GetClassNameA
SetPropA
UnhookWindowsHookEx
GetPropA
CallWindowProcA
RemovePropA
DefWindowProcA
SetMenu
GetMenu
GetMessageTime
GetMessagePos
SetWindowPos
OffsetRect
IntersectRect
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindowRect
TabbedTextOutA
PostMessageA
MapDialogRect
EndDialog
GetDesktopWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetWindowLongA
GetDlgItem
IsWindowEnabled
GetActiveWindow
wvsprintfA
DrawTextA
GetIconInfo
GetCapture
OpenIcon
CheckDlgButton
CheckRadioButton
GetDlgItemInt
GetKeyState
GetSysColor
ReleaseDC
MsgWaitForMultipleObjects
IsWindowUnicode
GetMessageW
DispatchMessageW
SubtractRect
UnionRect
InflateRect
DestroyMenu
RegisterClipboardFormatA
wsprintfA
GetSystemMetrics
DestroyIcon
MessageBoxA
ShowWindow
PtInRect
GetWindow
GetDlgCtrlID
EnableWindow
PeekMessageA
LoadCursorA
CopyIcon
SetWindowLongA
MessageBeep
SetClipboardViewer
OpenClipboard
GetOpenClipboardWindow
GetClipboardOwner
GetClipboardViewer
CreateCaret
GetCaretPos
SetCaretPos
HideCaret
ShowCaret
IsWindow
SendMessageA
SetForegroundWindow
GetForegroundWindow
SendNotifyMessageA
SetWindowContextHelpId
GetWindowContextHelpId
GetParent
PostThreadMessageA
SetRect
FillRect
GetDC
ReleaseCapture
SetCursor
IsChild
GetFocus
GetDlgItemTextA
SetDlgItemInt
SetDlgItemTextA
IsDlgButtonChecked
ScrollWindowEx
IsDialogMessageA
SetWindowTextA
MoveWindow
PostQuitMessage
GetMenuItemID
InsertMenuA
AppendMenuA
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemCount
IsMenu
RemoveMenu
DefFrameProcA
TranslateMDISysAccel
TranslateAcceleratorA
DefMDIChildProcA
LoadAcceleratorsA
GetWindowThreadProcessId
LoadMenuA
ReuseDDElParam
UnpackDDElParam
GetMenuBarInfo
GetSysColorBrush
WindowFromDC
ExcludeUpdateRgn
FrameRect
InvertRect
DrawIcon
DrawStateA
DrawEdge
DrawFrameControl
DrawFocusRect
DrawTextExA
GetTabbedTextExtentA
GrayStringA
ScrollDC
CreateMenu
CreatePopupMenu
DeleteMenu
CheckMenuItem
EnableMenuItem
SetMenuDefaultItem
GetMenuDefaultItem
GetMenuItemInfoA
SetMenuItemInfoA
InsertMenuItemA
ModifyMenuA
LoadMenuIndirectA
SetMenuContextHelpId
GetMenuContextHelpId
CheckMenuRadioItem
CharUpperA
GetAsyncKeyState
GetKeyNameTextA
MapVirtualKeyA
WaitMessage
GetCursorPos
TranslateMessage
GetMessageA
SetRectEmpty
InSendMessage
DestroyCursor
CopyAcceleratorTableA
IsClipboardFormatAvailable
GetDialogBaseUnits
GetClipboardFormatNameA
CharNextA
IsRectEmpty
UnregisterClassA
WinHelpA
gdi32
CreateDIBitmap
CreateDIBSection
GetDIBits
RealizePalette
SetDIBitsToDevice
ExtSelectClipRgn
CreateRectRgnIndirect
GetClipBox
StretchBlt
SetBkColor
CreateCompatibleBitmap
RectVisible
SetTextColor
CreateFontIndirectA
PlayEnhMetaFile
CreatePalette
GetEnhMetaFilePaletteEntries
ExtTextOutA
DeleteEnhMetaFile
SetWinMetaFileBits
GetEnhMetaFileHeader
SetEnhMetaFileBits
CombineRgn
CreateRectRgn
TextOutA
GetTextExtentPoint32A
GetTextMetricsA
SetTextCharacterExtra
CreateMetaFileA
CloseMetaFile
CreateEnhMetaFileA
CloseEnhMetaFile
GetDCOrgEx
CopyMetaFileA
UnrealizeObject
GetObjectType
CreatePen
CreatePenIndirect
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreatePatternBrush
CreateDIBPatternBrushPt
CreateFontA
CreateBitmapIndirect
SetBitmapBits
SetBitmapDimensionEx
GetBitmapDimensionEx
CreateDiscardableBitmap
CreateHalftonePalette
GetPaletteEntries
SetPaletteEntries
AnimatePalette
GetNearestPaletteIndex
ResizePalette
CreateEllipticRgn
CreateEllipticRgnIndirect
CreatePolygonRgn
CreatePolyPolygonRgn
CreateRoundRectRgn
PathToRegion
ExtCreateRegion
GetRegionData
SetRectRgn
EqualRgn
OffsetRgn
GetRgnBox
PtInRegion
RectInRegion
CreateICA
GetBrushOrgEx
SetBrushOrgEx
EnumObjects
GetNearestColor
UpdateColors
GetBkColor
GetBkMode
GetPolyFillMode
GetROP2
GetStretchBltMode
GetTextColor
GetMapMode
GetGraphicsMode
GetWorldTransform
GetViewportOrgEx
GetViewportExtEx
GetWindowOrgEx
GetWindowExtEx
DPtoLP
LPtoDP
GetDeviceCaps
InvertRgn
PaintRgn
PtVisible
GetCurrentPositionEx
Arc
Polyline
Chord
Pie
Polygon
PolyPolygon
PatBlt
GetPixel
SetPixel
FloodFill
ExtFloodFill
GetTextAlign
GetTextFaceA
GetTextCharacterExtra
GetCharWidthA
GetFontLanguageInfo
GetCharacterPlacementA
GetAspectRatioFilterEx
Escape
SetBoundsRect
GetBoundsRect
ResetDCA
GetOutlineTextMetricsA
GetCharABCWidthsA
GetFontData
GetKerningPairsA
GetGlyphOutlineA
StartDocA
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
MaskBlt
PlgBlt
SetPixelV
AngleArc
GetArcDirection
PolyPolyline
GetColorAdjustment
GetCurrentObject
PolyBezier
DrawEscape
ExtEscape
GetCharABCWidthsFloatA
GetCharWidthFloatA
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetMiterLimit
GetPath
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
GdiComment
SaveDC
RestoreDC
SetPolyFillMode
SetROP2
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
CreateDCA
AddFontResourceA
AddFontMemResourceEx
LineTo
SetTextAlign
SetTextJustification
SetMapperFlags
ArcTo
SetArcDirection
GetBitmapBits
SetStretchBltMode
StretchDIBits
EnumFontFamiliesExA
DeleteMetaFile
RoundRect
Ellipse
Rectangle
FillRgn
CreateCompatibleDC
SetBkMode
SelectObject
CreateBrushIndirect
BitBlt
SelectPalette
DeleteDC
GetObjectA
GetStockObject
CreateBitmap
FrameRgn
GetTextExtentPointA
PlayMetaFile
EnumMetaFile
PlayMetaFileRecord
SelectClipPath
GetClipRgn
PolyBezierTo
SetColorAdjustment
PolylineTo
PolyDraw
DeleteObject
comdlg32
GetFileTitleA
winspool.drv
GetPrinterDriverA
GetJobA
EndDocPrinter
EnumPrintersA
GetPrinterA
OpenPrinterA
WritePrinter
StartDocPrinterA
AddFormA
SetFormA
DocumentPropertiesA
ClosePrinter
DeviceCapabilitiesA
advapi32
RegSetValueExA
RevertToSelf
RegCloseKey
RegQueryValueA
RegOpenKeyExA
RegCreateKeyA
RegSetValueA
RegQueryValueExA
GetUserNameA
RegOpenKeyA
RegCreateKeyExA
RegDeleteValueA
RegDeleteKeyA
SetFileSecurityA
GetFileSecurityA
RegEnumKeyA
SetThreadToken
OpenThreadToken
shell32
DragQueryFileA
SHBrowseForFolderA
ShellExecuteA
SHGetSpecialFolderPathA
ExtractIconA
DragAcceptFiles
SHGetFileInfoA
SHGetPathFromIDListA
DragFinish
comctl32
InitCommonControlsEx
shlwapi
PathStripToRootA
PathFindExtensionA
PathRemoveFileSpecW
PathRemoveExtensionA
PathIsUNCA
PathFindFileNameA
oledlg
ord3
ord7
ord6
ord5
ord9
ord4
ord8
ord1
ole32
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
CreateFileMoniker
CoGetMalloc
CoFreeUnusedLibraries
OleUninitialize
OleInitialize
StringFromGUID2
CoDisconnectObject
OleRun
CLSIDFromString
CoUninitialize
CoInitializeEx
ReleaseStgMedium
RegisterDragDrop
CoTreatAsClass
StringFromCLSID
ReadClassStg
ReadFmtUserTypeStg
OleRegGetUserType
WriteClassStg
WriteFmtUserTypeStg
SetConvertStg
CreateBindCtx
CoTaskMemFree
OleDuplicateData
CLSIDFromProgID
CoCreateInstance
OleSetClipboard
OleFlushClipboard
CoLockObjectExternal
RevokeDragDrop
OleLockRunning
OleSetMenuDescriptor
OleSetContainedObject
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateFromFile
OleCreateLinkToFile
OleCreate
OleLoad
OleSave
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgIsStorageILockBytes
GetHGlobalFromILockBytes
OleGetIconOfClass
WriteClassStm
OleSaveToStream
CreateStreamOnHGlobal
CreateGenericComposite
CreateItemMoniker
OleIsRunning
OleGetClipboard
OleQueryCreateFromData
OleIsCurrentClipboard
OleQueryLinkFromData
CoGetClassObject
CoRegisterMessageFilter
CoRegisterClassObject
CoRevokeClassObject
GetClassFile
OleRegEnumVerbs
CoUnmarshalInterface
CoMarshalInterface
CoReleaseMarshalData
OleRegGetMiscStatus
OleTranslateAccelerator
IsAccelerator
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
DoDragDrop
GetRunningObjectTable
CreateDataAdviseHolder
CoTaskMemAlloc
CreateOleAdviseHolder
oleaut32
VarDateFromStr
RegisterTypeLi
VarDecFromStr
LoadRegTypeLi
OleCreateFontIndirect
VarBstrFromDec
SafeArrayDestroyDescriptor
SafeArrayDestroyData
SafeArrayDestroy
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayPtrOfIndex
SafeArrayGetElement
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayCopy
VarBstrFromCy
VarCyFromStr
SysReAllocStringLen
VariantCopy
SafeArrayCreate
SafeArrayRedim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElemsize
SafeArrayGetDim
SysAllocString
VarBstrFromDate
SysStringByteLen
SysAllocStringByteLen
SysStringLen
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
LoadTypeLi
SystemTimeToVariantTime
DosDateTimeToVariantTime
VariantTimeToSystemTime
VarUdateFromDate
VarDateFromUdate
SysFreeString
odbc32
ord4
ord48
ord49
ord20
ord17
ord59
ord8
ord44
ord19
ord46
ord12
ord68
ord43
ord41
ord2
ord1
ord23
ord50
ord51
ord15
ord9
ord14
ord3
ord11
ord18
ord13
ord61
ord5
ord16
ord10
ord54
ord45
ord40
ord72
ws2_32
listen
ioctlsocket
bind
getsockopt
setsockopt
getsockname
getpeername
connect
sendto
recvfrom
socket
select
WSAGetLastError
WSAAsyncSelect
send
recv
gethostbyname
closesocket
htonl
inet_addr
htons
accept
ntohs
inet_ntoa
WSAStartup
WSASetLastError
WSACleanup
shutdown
version
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
Sections
.textbss Size: - Virtual size: 2.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 5.4MB - Virtual size: 5.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 801KB - Virtual size: 801KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 467KB - Virtual size: 580KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.didat Size: 1024B - Virtual size: 793B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 853KB - Virtual size: 852KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.khe Size: - Virtual size: 1B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE