Static task
static1
Behavioral task
behavioral1
Sample
Controller.exe
Resource
win7-20231020-en
Behavioral task
behavioral2
Sample
Controller.exe
Resource
win10v2004-20231023-en
General
-
Target
Controller.exe
-
Size
1.7MB
-
MD5
7baa17772e1b144ced1d270740e0ce4e
-
SHA1
85419f7ccf32e50e745a4c958edb74d0247e1c9c
-
SHA256
7023cb9dbc1a26857ee3213da2147951f8d97fcaeef87d681dca96d3f59f3a2b
-
SHA512
117f8e6a54446099ea07995bde819b33548d2e8a3a7ca135823a635cba90943263507a9a20a415f5d963c173e29aaf97eaa273cd6b2fb9eddbb5a34bed15c195
-
SSDEEP
49152:BjxD6nMcaU32hxhe9qxASfIUMb8IMj29MMUXnQ:dR3cP32hbe9WfIUEYj2eM0nQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Controller.exe
Files
-
Controller.exe.exe windows:5 windows x86
74cd0402d147e9e7b94dcc2fe34a4279
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetCurrentProcessId
user32
FindWindowW
gdi32
DeleteDC
comdlg32
GetSaveFileNameA
advapi32
RegSetValueExW
shell32
DragQueryFileW
shlwapi
PathFileExistsW
winmm
sndPlaySoundW
imm32
ImmDisableIME
plotdll_u
??0CChartWnd@@QAE@XZ
ws2_32
listen
version
GetFileVersionInfoSizeW
d3d9
Direct3DCreate9
ole32
CoCreateInstance
oleaut32
SysFreeString
comctl32
ord17
gdiplus
GdipFree
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
psapi
GetMappedFileNameW
Sections
.text Size: 601KB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1005KB - Virtual size: 1008KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 91KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ