Static task
static1
Behavioral task
behavioral1
Sample
77c58cdd316bf7d03e34a3e9b74753be9812ec6a8e0ab5ea0f8e4fdd61f4afcd.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
77c58cdd316bf7d03e34a3e9b74753be9812ec6a8e0ab5ea0f8e4fdd61f4afcd.exe
Resource
win10v2004-20231215-en
General
-
Target
77c58cdd316bf7d03e34a3e9b74753be9812ec6a8e0ab5ea0f8e4fdd61f4afcd
-
Size
4.3MB
-
MD5
3e372409179605f1db30b0cae5bcf24f
-
SHA1
d1aaba1838b895642972e4b2235ef5502b6913ee
-
SHA256
77c58cdd316bf7d03e34a3e9b74753be9812ec6a8e0ab5ea0f8e4fdd61f4afcd
-
SHA512
0b140f6df221c18886d32f9a06483b26204caeab4420c235504b92675520a60335dff56b3833ff5a63d65ef82610e3fa731c35bfcd89771eb28ec43eaed08fc7
-
SSDEEP
24576:G5j2QGB/aefEnfy5pP9l2GQ+/NerWWFRPpBrFWcA+aNrHt8Z4+jcbGaywLXfdnT9:FQAUfy59L2/CWx4NrHbGa7Lf13m3uu
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 77c58cdd316bf7d03e34a3e9b74753be9812ec6a8e0ab5ea0f8e4fdd61f4afcd
Files
-
77c58cdd316bf7d03e34a3e9b74753be9812ec6a8e0ab5ea0f8e4fdd61f4afcd.exe windows:6 windows x86 arch:x86
39e525a78c2f9e6da696b5630203c491
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
winmm
timeSetEvent
timeKillEvent
timeGetTime
comctl32
_TrackMouseEvent
ord17
gdiplus
GdipCreateMatrix
GdipDeleteMatrix
GdipAlloc
GdipFree
GdipCloneImage
GdipDisposeImage
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipImageGetFrameDimensionsCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameCount
GdipImageSelectActiveFrame
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetPropertyItemSize
GdipGetPropertyItem
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFileICM
GdipCreateHBITMAPFromBitmap
GdiplusStartup
GdipCreatePath
GdipDeletePath
GdipClosePathFigure
GdipAddPathLineI
GdipAddPathArcI
GdipCloneBrush
GdipDeleteBrush
GdipCreateSolidFill
GdipCreatePen1
GdipDeletePen
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetSmoothingMode
GdipDrawLineI
GdipDrawBezierI
GdipDrawRectangleI
GdipDrawEllipseI
GdipDrawPath
GdipFillRectangle
GdipFillEllipseI
GdipFillPath
GdipCreateFontFromDC
GdipCreateFontFromLogfontA
GdipDeleteFont
GdipDrawString
GdipMeasureString
GdipStringFormatGetGenericTypographic
GdipDeleteStringFormat
GdipCloneStringFormat
GdipSetStringFormatFlags
GdipSetStringFormatAlign
GdipSetStringFormatLineAlign
GdipSetStringFormatTrimming
GdipClonePen
GdipSetPenWidth
GdipGetPenWidth
GdipSetPenStartCap
GdipSetPenEndCap
GdipSetPenDashCap197819
GdipGetPenStartCap
GdipGetPenEndCap
GdipGetPenDashCap197819
GdipSetPenLineJoin
GdipGetPenLineJoin
GdipSetPenColor
GdipGetPenDashStyle
GdipSetPenDashStyle
GdipCreateTexture
GdipCreateBitmapFromHBITMAP
GdipTranslateMatrix
GdipScaleMatrix
GdipRotateMatrix
GdipClonePath
GdipResetPath
GdipGetPathFillMode
GdipSetPathFillMode
GdipStartPathFigure
GdipAddPathLine2I
GdipAddPathBezierI
GdipAddPathCurveI
GdipAddPathRectangleI
GdipAddPathEllipseI
GdipAddPathPieI
GdipAddPathPolygonI
GdipTransformPath
GdiplusShutdown
GdipDrawImageRect
GdipDrawArc
GdipSetWorldTransform
GdipImageRotateFlip
GdipLoadImageFromFileICM
GdipLoadImageFromFile
GdipCreatePen2
GdipSetLineBlend
GdipCreateLineBrushFromRect
GdipIsOutlineVisiblePathPointI
GdipIsVisiblePathPointI
GdipGetPathWorldBoundsI
shlwapi
PathFileExistsW
PathIsRelativeW
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmSetOpenStatus
ImmSetCompositionWindow
ImmGetContext
msimg32
AlphaBlend
libcurl
curl_easy_getinfo
curl_easy_cleanup
curl_easy_perform
curl_easy_setopt
curl_easy_init
curl_slist_append
curl_mime_filedata
curl_mime_name
curl_mime_addpart
curl_mime_free
curl_mime_init
swplay_ud
?getSrcHeight@VideoDisplayWinBase@@QAEHXZ
?started@SWDataSource@@UAE_NXZ
?havePic@VideoDisplayWinBase@@QAE_NXZ
?getSrcWidth@VideoDisplayWinBase@@QAEHXZ
?getFrameHeight@VideoDisplayWinBase@@QAEHXZ
?getFrameWidth@VideoDisplayWinBase@@QAEHXZ
?getFrameBuffer@VideoDisplayWinBase@@QAEPAEXZ
?OnTouchEvent@VideoDisplay@@QAEXHHQAH0QAM@Z
??1VideoDisplayWinBase@@UAE@XZ
?stop@SWDataSource@@UAEXXZ
?start@SWDataSource@@UAEHXZ
?setVideoLevels@SWDataSource@@UAEHPAUVideoLevel@@H@Z
?setVideoLevel@SWDataSource@@UAEHH@Z
?setId@SWDataSource@@UAEXI@Z
?setFixedResolution@SWDataSource@@UAEX_N@Z
?sendVideo@SWDataSource@@UAEHHPBDH@Z
?sendTouchEvent@SWDataSource@@UAEHHHQAH0QAM@Z
?sendPicture@SWDataSource@@UAEHPBDH@Z
?sendKeyEvent@SWDataSource@@UAEHHH@Z
?sendInputMagnetometer@SWDataSource@@UAEHMMM@Z
?sendInputLocation@SWDataSource@@UAEHMMMMMMMMPBD@Z
?sendInputGyro@SWDataSource@@UAEHMMM@Z
?sendInputGravity@SWDataSource@@UAEHMMM@Z
?sendInputEmpty@SWDataSource@@UAEHPBDH@Z
?sendInputAltimeter@SWDataSource@@UAEHMM@Z
?sendInputAccelerometer@SWDataSource@@UAEHMMM@Z
?sendControlGrant@SWDataSource@@UAEH_N@Z
?sendAudio@SWDataSource@@UAEHHPBDH@Z
?screenSharing@SWDataSource@@UAEHH@Z
?screenCast@SWDataSource@@UAEHH@Z
?popVideoFrame@SWDataSource@@UAEHPAV?$shared_ptr@VAPacket@@@std@@H@Z
?popAudioFrame@SWDataSource@@UAEHPAV?$shared_ptr@VAPacket@@@std@@H@Z
?onSensorInput@SWDataSourceListener@@UAEXHH@Z
?onScreenSharing@SWDataSourceListener@@UAEX_N0@Z
?onScreenRotation@SWDataSourceListener@@UAEXH@Z
?onReconnecting@SWDataSourceListener@@UAEXH@Z
?onPlayInfo@SWDataSourceListener@@UAEXPBD@Z
?onDisconnected@SWDataSourceListener@@UAEXHPBD@Z
?onDisconnected@SWDataSourceListener@@UAEXH@Z
?onCopyToRemoteRes@SWDataSourceListener@@UAEXH@Z
?onControlVideo@SWDataSourceListener@@UAEXHH@Z
?onControlUserCount@SWDataSourceListener@@UAEXH@Z
?onControlTime@SWDataSourceListener@@UAEXH@Z
?onControlQueryAuthReq@SWDataSourceListener@@UAEXH@Z
?onControlAuthChangeNotify@SWDataSourceListener@@UAEXH@Z
?onConnected@SWDataSourceListener@@UAEXXZ
?getVideoLevelResult@SWDataSource@@UAEHPAUVideoLevel@@@Z
?getVideoLevel@SWDataSource@@UAEHXZ
?getVideoFrameCount@SWDataSource@@UAEHXZ
?getScreenRotation@SWDataSource@@UAEHXZ
?getId@SWDataSource@@UAEIXZ
?getEventHandler@SWDataSource@@UAEPAVSWTouchEvent@@XZ
?getAudioFrameCount@SWDataSource@@UAEHXZ
?detach@SWDataSource@@UAE_NI@Z
?currentControlMode@SWDataSource@@UAEHXZ
?copyToRemote@SWDataSource@@UAEHPBDH@Z
?collectDecodeTime@SWDataSource@@UAEXH@Z
?attach@SWDataSource@@UAE_NI@Z
?OnTouchEvent@SWDataSource@@UAEXHHQAH0QAM@Z
?AVTransReq@SWDataSource@@UAEHH@Z
?obtainID@SWRuntime@@QAEIXZ
?lockFrameBuffer@VideoDisplayWinBase@@QAEXXZ
??0VideoDisplayWinBase@@QAE@XZ
?stop@SWPlayer@@QAEXXZ
?unlockFrameBuffer@VideoDisplayWinBase@@QAEXXZ
?render@VideoDisplayWinBase@@UAEXPAUVideoFrame@@@Z
?start@SWPlayer@@QAEHXZ
?setOnVideoSizeChangedListener@SWPlayer@@QAEXPAVOnVideoSizeChangedListener@@@Z
?setDisplay@SWPlayer@@QAEXPAVVideoDisplay@@@Z
?setDataSource@SWPlayer@@QAEXABV?$shared_ptr@VDataSource@@@std@@@Z
?getDataSource@SWPlayer@@QAEPAVDataSource@@XZ
??1SWPlayer@@QAE@XZ
??0SWPlayer@@QAE@XZ
?setBufferSize@SWDataSource@@QAEHH@Z
?setBusinessType@SWDataSource@@QAEXH@Z
?setPlayParams@SWDataSource@@QAEHPBDHHHHHHHHHHHH@Z
?setLoginParams@SWDataSource@@QAEHPBDGH00H@Z
??1SWDataSource@@UAE@XZ
??0SWDataSource@@QAE@IPAVSWDataSourceListener@@@Z
??1SWDataSourceListener@@UAE@XZ
??0SWDataSourceListener@@QAE@XZ
?unlock@Mutex@@QAEXXZ
?lock@Mutex@@QAEHXZ
??1Mutex@@QAE@XZ
??0Mutex@@QAE@XZ
___sw_log_assert@16
?getInstance@SWRuntime@@SAPAV1@XZ
?deinit@SWRuntime@@QAEXXZ
?setLogId@VideoDisplayWinBase@@UAEXI@Z
?setDstFormat@VideoDisplayWinBase@@QAEXHHHH@Z
?init@SWRuntime@@QAEXHPBD@Z
kernel32
GetConsoleMode
GetCurrentThread
ExitProcess
FreeLibraryAndExitThread
ResumeThread
ExitThread
CreateThread
WriteConsoleW
GetFileType
GetSystemInfo
HeapValidate
GetModuleHandleExW
LoadLibraryExW
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
InitializeSListHead
GetStartupInfoW
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
OutputDebugStringW
IsDebuggerPresent
GetCPInfo
CompareStringEx
GetStringTypeW
GetLocaleInfoEx
CreateSymbolicLinkW
GetFileSizeEx
CloseThreadpoolWait
SetThreadpoolWait
CreateThreadpoolWait
SetConsoleCtrlHandler
WaitForThreadpoolTimerCallbacks
SetThreadpoolTimer
CreateThreadpoolTimer
CloseThreadpoolWork
SubmitThreadpoolWork
CreateThreadpoolWork
FreeLibraryWhenCallbackReturns
GetTickCount64
GetCurrentProcessorNumber
FlushProcessWriteBuffers
CreateSemaphoreExW
CreateEventExW
InitOnceExecuteOnce
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
SetFileInformationByHandle
LCMapStringEx
EncodePointer
LocalFree
SleepConditionVariableSRW
SleepConditionVariableCS
WakeAllConditionVariable
WakeConditionVariable
InitializeConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
InitializeSRWLock
GetNativeSystemInfo
GetExitCodeThread
SwitchToThread
WaitForSingleObjectEx
FormatMessageA
SetFilePointerEx
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
CloseThreadpoolTimer
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapQueryInformation
ReadConsoleW
FindFirstFileExW
GetConsoleOutputCP
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
SetStdHandle
FlushFileBuffers
GetFileInformationByHandleEx
TlsFree
GetEnvironmentVariableW
GetModuleHandleA
OpenProcess
GetCurrentProcessId
SetFileTime
SetFilePointer
GetFileSize
GlobalSize
GetTickCount
MulDiv
VerifyVersionInfoW
GlobalFree
SetCurrentDirectoryW
VerSetConditionMask
CopyFileW
WriteFile
ReadFile
FindFirstFileW
FindClose
DeleteFileW
CreateFileW
CreateDirectoryW
GetModuleHandleW
PostQueuedCompletionStatus
GetQueuedCompletionStatus
CreateIoCompletionPort
SystemTimeToFileTime
FileTimeToSystemTime
GetSystemTimeAsFileTime
QueryPerformanceFrequency
QueryPerformanceCounter
LocalFileTimeToFileTime
FileTimeToLocalFileTime
GetComputerNameW
SetProcessWorkingSetSize
VirtualQuery
GetVersionExW
CreateProcessW
GetCurrentProcess
GetStdHandle
TryEnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
WaitForMultipleObjects
CreateEventW
ResetEvent
SetEvent
SetEndOfFile
TlsSetValue
TlsGetValue
TlsAlloc
TerminateThread
SetThreadPriority
WaitForSingleObject
LoadLibraryW
GetProcAddress
GetModuleFileNameW
FreeLibrary
GetWindowsDirectoryW
GetSystemDirectoryW
GetTempPathW
GetFileAttributesW
GetCurrentThreadId
WideCharToMultiByte
MultiByteToWideChar
WritePrivateProfileStringW
GlobalLock
GlobalUnlock
GlobalAlloc
FindResourceW
SizeofResource
LockResource
LoadResource
FindResourceExW
GetCurrentDirectoryW
CreateMutexW
ReleaseMutex
CloseHandle
Sleep
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
SetLastError
GetLastError
RaiseException
DecodePointer
user32
CloseClipboard
SetClipboardData
OpenClipboard
FindWindowW
GetDesktopWindow
GetSysColor
ClientToScreen
GetAsyncKeyState
wsprintfW
GetParent
MapWindowPoints
SetWindowRgn
SetForegroundWindow
IsZoomed
IsWindowVisible
UnionRect
SetCursor
CharNextW
OffsetRect
GetMonitorInfoW
MonitorFromWindow
PostQuitMessage
LoadCursorW
GetWindow
SetWindowLongW
GetWindowLongW
PtInRect
IsRectEmpty
ScreenToClient
GetCursorPos
GetWindowRect
SetWindowTextW
GetPropW
SetPropW
InvalidateRect
GetUpdateRect
EndPaint
BeginPaint
GetSystemMetrics
EnableWindow
ReleaseCapture
SetCapture
GetKeyState
GetFocus
SetFocus
IsIconic
SetWindowPos
MoveWindow
UpdateLayeredWindow
ShowWindow
IsWindow
GetClassInfoExW
RegisterClassW
CallWindowProcW
MonitorFromPoint
ReleaseDC
GetDC
KillTimer
SetTimer
MsgWaitForMultipleObjectsEx
GetQueueStatus
CallMsgFilterW
DestroyWindow
CreateWindowExW
RegisterClassExW
DefWindowProcW
WaitMessage
PostMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
IntersectRect
GetClientRect
MessageBoxW
GetForegroundWindow
IsClipboardFormatAvailable
EmptyClipboard
LoadImageW
UnregisterClassW
SendMessageW
GetClipboardData
gdi32
GetDeviceCaps
BitBlt
CreateRoundRectRgn
CreateDIBSection
CreateCompatibleDC
DeleteDC
GetObjectW
GetWindowOrgEx
RestoreDC
SaveDC
StretchBlt
SetStretchBltMode
GetObjectA
SetWindowOrgEx
CreateRectRgnIndirect
ExtSelectClipRgn
GetTextMetricsW
SelectObject
GetStockObject
GetObjectType
DeleteObject
CreateFontIndirectW
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
shell32
SHGetPathFromIDListW
SHGetFolderPathW
SHBrowseForFolderW
ord165
SHFileOperationW
ShellExecuteW
ole32
CreateStreamOnHGlobal
CoCreateInstance
CoTaskMemFree
oleaut32
SysAllocStringLen
Sections
.textbss Size: - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 3.4MB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 438KB - Virtual size: 437KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 31KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.msvcjmc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 1024B - Virtual size: 777B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: 512B - Virtual size: 265B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 327KB - Virtual size: 327KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 119KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ