Static task
static1
Behavioral task
behavioral1
Sample
c8ec281180fada4c507f4cc0ab7d67a2482a426b4b74fdfc34aa8ae7188ff003.exe
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
c8ec281180fada4c507f4cc0ab7d67a2482a426b4b74fdfc34aa8ae7188ff003.exe
Resource
win10v2004-20231215-en
General
-
Target
c8ec281180fada4c507f4cc0ab7d67a2482a426b4b74fdfc34aa8ae7188ff003
-
Size
2.3MB
-
MD5
27a2005f6e55e0f0c2b112961ffbdfac
-
SHA1
6beff86d4f4a266fcc05a3ce0425c1757d8ce3f9
-
SHA256
c8ec281180fada4c507f4cc0ab7d67a2482a426b4b74fdfc34aa8ae7188ff003
-
SHA512
e17f9ad2f0d95bd7d62692bf73f0fb8bebda0af10de2791f2445141075cb22613f1544bd7be7d391cfeda24839e8714fe0813e322b3e74e1828b6f78b96dba51
-
SSDEEP
49152:ZFtVCR4sV4xcZKll7Qk2JJh27d3RVPTH2tjDxzinlqQTSoM4CzkLa0h:A4sV4xYKbQk2Jj27NPTH2Rxzinlqnzk/
Malware Config
Signatures
Files
-
c8ec281180fada4c507f4cc0ab7d67a2482a426b4b74fdfc34aa8ae7188ff003.exe windows:6 windows x86 arch:x86
c2533715fb87e48e63193edf1b022ce0
Code Sign
23:a0:8f:03:5a:44:d8:d9:88:ff:5b:df:62:fc:c9:fb:3f:73:72:ecCertificate
IssuerCN=北京志翔科技股份有限公司,OU=北京志翔科技股份有限公司,O=北京志翔科技股份有限公司,L=北京,ST=北京,C=CNNot Before19-09-2022 08:50Not After18-06-2032 08:50SubjectCN=北京志翔科技股份有限公司,OU=北京志翔科技股份有限公司,O=北京志翔科技股份有限公司,L=北京,ST=北京,C=CN0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5aCertificate
IssuerCN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before01-08-2022 00:00Not After09-11-2031 23:59SubjectCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USKey Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5bCertificate
IssuerCN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=USNot Before23-03-2022 00:00Not After22-03-2037 23:59SubjectCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
KeyUsageCertSign
KeyUsageCRLSign
05:44:af:f3:94:9d:08:39:a6:bf:db:3f:5f:e5:61:16Certificate
IssuerCN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=USNot Before14-07-2023 00:00Not After13-10-2034 23:59SubjectCN=DigiCert Timestamp 2023,O=DigiCert\, Inc.,C=USExtended Key Usages
ExtKeyUsageTimeStamping
Key Usages
KeyUsageDigitalSignature
9b:f6:d2:81:3c:28:90:d8:cb:47:0d:d2:0f:7e:15:28:c3:68:9f:19Signer
Actual PE Digest9b:f6:d2:81:3c:28:90:d8:cb:47:0d:d2:0f:7e:15:28:c3:68:9f:19Digest Algorithmsha1PE Digest MatchestrueHeaders
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
D:\Code\software\SoftDistributer\Software\NetMounter\Release\Mounter.pdb
Imports
kernel32
CreateTimerQueue
WaitForSingleObjectEx
SignalObjectAndWait
SwitchToThread
GetThreadPriority
GetLogicalProcessorInformation
CreateTimerQueueTimer
ChangeTimerQueueTimer
DeleteTimerQueueTimer
GetNumaHighestNodeNumber
SetThreadAffinityMask
RegisterWaitForSingleObject
UnregisterWait
SetEnvironmentVariableW
FindFirstFileExW
SystemTimeToTzSpecificLocalTime
GetThreadTimes
FreeLibraryAndExitThread
VirtualFree
ReleaseSemaphore
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
InterlockedFlushSList
QueryDepthSList
UnregisterWaitEx
GetFileInformationByHandle
PeekNamedPipe
DecodePointer
HeapSize
RaiseException
InitializeCriticalSectionEx
HeapReAlloc
GetDiskFreeSpaceExA
GetVolumeInformationA
GetDriveTypeA
WritePrivateProfileStructA
WritePrivateProfileStringA
GetVersionExW
GetModuleFileNameA
OpenMutexW
CreateMutexW
GetSystemDefaultLCID
GetSystemInfo
GetPrivateProfileStringW
CreateDirectoryW
GetFileAttributesW
RemoveDirectoryW
VirtualQuery
LocalAlloc
UnmapViewOfFile
OpenFileMappingW
MapViewOfFile
CreateFileMappingW
GetTickCount64
OpenEventW
GetCurrentThreadId
GetCurrentProcess
CreateProcessW
CreateSemaphoreW
GetStartupInfoW
TerminateProcess
OpenProcess
HeapFree
GetProcessHeap
HeapAlloc
CreateThread
GetModuleFileNameW
LocalFree
FormatMessageW
GlobalFree
GlobalAlloc
GetWindowsDirectoryW
SetEvent
OutputDebugStringA
CreateEventW
GetCurrentProcessId
GetExitCodeProcess
WaitForSingleObject
GetProcessId
FileTimeToSystemTime
FileTimeToLocalFileTime
GetFileSize
FlushFileBuffers
SetFileAttributesW
GetFileAttributesExW
FreeLibrary
Process32NextW
Process32FirstW
CreateToolhelp32Snapshot
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
OutputDebugStringW
MultiByteToWideChar
WideCharToMultiByte
GetProcAddress
GetLastError
LoadLibraryW
GetModuleHandleW
ReadFile
FindResourceW
LoadResource
LockResource
SizeofResource
Sleep
WriteFile
GetFileSizeEx
SetEndOfFile
SetFilePointerEx
CreateFileW
DeleteFileW
CloseHandle
GetProcessAffinityMask
GetTickCount
SetVolumeLabelW
GetExitCodeThread
GlobalSize
GlobalLock
GlobalUnlock
MulDiv
CopyFileW
SetLastError
LoadLibraryExW
EncodePointer
GetSystemDirectoryW
FreeResource
GetModuleHandleA
GlobalDeleteAtom
lstrcmpW
LoadLibraryA
GlobalAddAtomW
GlobalFindAtomW
FindClose
FindFirstFileW
FindNextFileW
InitializeCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
GlobalHandle
LocalReAlloc
lstrcmpA
GlobalGetAtomNameW
SystemTimeToFileTime
GetFileTime
LocalFileTimeToFileTime
SetFileTime
GetFullPathNameW
GetVolumeInformationW
LockFile
SetFilePointer
UnlockFile
DuplicateHandle
lstrcmpiW
MoveFileW
SetThreadPriority
ResumeThread
GetCurrentThread
CompareStringW
GetLocaleInfoW
GetUserDefaultUILanguage
GlobalFlags
GetCurrentDirectoryW
lstrcpyW
VerSetConditionMask
VerifyVersionInfoW
GetTempFileNameW
GetTempPathW
GetProfileIntW
SearchPathW
VirtualProtect
GetDiskFreeSpaceW
GetUserDefaultLCID
FindResourceExW
MoveFileExW
GetSystemTimeAsFileTime
IsDebuggerPresent
IsProcessorFeaturePresent
ExitProcess
GetModuleHandleExW
AreFileApisANSI
ExitThread
GetCommandLineA
RtlUnwind
SetStdHandle
GetFileType
HeapQueryInformation
VirtualAlloc
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetTimeZoneInformation
LCMapStringW
IsValidLocale
EnumSystemLocalesW
GetStringTypeW
GetConsoleCP
GetConsoleMode
GetStdHandle
ReadConsoleW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
WriteConsoleW
GetDriveTypeW
SetCurrentDirectoryW
SetEnvironmentVariableA
user32
GetMonitorInfoW
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetDC
GetWindowDC
ReleaseDC
BeginPaint
EndPaint
ClientToScreen
FillRect
GetCursorPos
WindowFromPoint
GetSysColorBrush
LoadCursorW
CharUpperW
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
LoadBitmapW
DestroyMenu
GetMenuItemInfoW
InflateRect
CopyImage
SendDlgItemMessageA
GetMessageW
TranslateMessage
GetActiveWindow
PostQuitMessage
RealChildWindowFromPoint
IntersectRect
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
DestroyIcon
ShowOwnedPopups
SetCursor
DeleteMenu
SetTimer
KillTimer
InvalidateRect
IsIconic
GetNextDlgGroupItem
SetCapture
ReleaseCapture
DrawFocusRect
SetRectEmpty
OffsetRect
IsRectEmpty
LoadImageW
DrawIconEx
GetIconInfo
MessageBeep
GetAsyncKeyState
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
CreatePopupMenu
GetMenuDefaultItem
MapVirtualKeyW
LoadMenuW
SetLayeredWindowAttributes
EnumDisplayMonitors
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
MonitorFromWindow
UnionRect
IsMenu
UpdateLayeredWindow
MonitorFromPoint
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
GetKeyNameTextW
TrackMouseEvent
GetComboBoxInfo
IsZoomed
GetSystemMenu
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
SetCursorPos
SetRect
SetParent
LockWindowUpdate
SetClassLongW
GetDoubleClickTime
CopyIcon
SetMenuDefaultItem
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
FrameRect
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
IsClipboardFormatAvailable
GetUpdateRect
SubtractRect
CreateMenu
MapDialogRect
DestroyCursor
GetWindowRgn
DrawIcon
CharToOemBuffA
OemToCharBuffA
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetLastActivePopup
GetTopWindow
GetClassLongW
PtInRect
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
SetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
IsChild
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetWindowThreadProcessId
GetParent
GetWindow
SystemParametersInfoW
GetWindowRect
CallWindowProcW
DefWindowProcW
PostMessageW
GetMessagePos
PeekMessageW
DispatchMessageW
GetClientRect
GetDesktopWindow
GetClassNameW
GetWindowTextW
SetWindowPos
MessageBoxW
GetForegroundWindow
GetSystemMetrics
FindWindowW
MessageBoxA
RegisterWindowMessageW
IsDialogMessageW
SetWindowLongW
GetWindowLongW
GetWindowTextLengthW
SetWindowTextW
IsWindowEnabled
EnableWindow
GetFocus
SetFocus
GetDlgCtrlID
CheckDlgButton
GetDlgItem
MoveWindow
ShowWindow
IsWindow
RemoveMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
GetMenuItemID
GetSubMenu
GetMenuState
GetMenuStringW
SendMessageW
SetWindowRgn
GetMessageTime
gdi32
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetTextExtentPoint32W
CombineRgn
CreateRectRgnIndirect
PatBlt
SetRectRgn
SetWindowExtEx
DPtoLP
GetTextMetricsW
CreatePalette
SetTextAlign
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
GetWindowOrgEx
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
Rectangle
EnumFontFamiliesExW
GetRgnBox
OffsetRgn
CreateRoundRectRgn
CreateFontIndirectW
GetObjectW
CreateCompatibleDC
CreatePen
DeleteDC
SetROP2
SetPolyFillMode
GetLayout
SetLayout
SetMapMode
SetBkMode
SelectPalette
SelectObject
ExtSelectClipRgn
SelectClipRgn
SaveDC
RestoreDC
RectVisible
PtVisible
LineTo
IntersectClipRect
GetWindowExtEx
GetViewportExtEx
GetStockObject
GetPixel
GetObjectType
GetClipBox
ExcludeClipRect
Escape
DeleteObject
CreateSolidBrush
CreateRectRgn
CreatePatternBrush
CreateHatchBrush
CreateBitmap
BitBlt
SetTextColor
SetBkColor
GetDeviceCaps
RoundRect
FrameRgn
PtInRegion
SetPixelV
ExtFloodFill
SetPaletteEntries
FillRgn
GetBoundsRect
CreateDCW
CopyMetaFileW
GetViewportOrgEx
LPtoDP
GetNearestPaletteIndex
GetTextFaceW
advapi32
RegDeleteKeyA
RegSetValueExA
RegCreateKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
LookupAccountSidW
GetTokenInformation
DuplicateTokenEx
OpenProcessToken
CreateProcessAsUserW
StartServiceW
QueryServiceStatusEx
ChangeServiceConfig2W
ChangeServiceConfigW
QueryServiceConfigW
RegDeleteValueW
StartServiceCtrlDispatcherW
SetServiceStatus
RegisterServiceCtrlHandlerW
DeleteService
QueryServiceStatus
ControlService
OpenServiceW
CloseServiceHandle
CreateServiceW
OpenSCManagerW
RegEnumKeyExW
RegDeleteKeyW
RegDeleteTreeW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
shell32
ShellExecuteA
SHChangeNotify
SHGetSpecialFolderPathA
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFolderPathW
ShellExecuteExW
SHGetFileInfoW
ShellExecuteW
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileW
DragFinish
SHAppBarMessage
ole32
RevokeDragDrop
CoTaskMemFree
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
CoInitializeEx
CoCreateInstance
CoUninitialize
CoInitialize
CoTaskMemAlloc
OleLockRunning
DoDragDrop
CreateStreamOnHGlobal
CoDisconnectObject
ReleaseStgMedium
OleDuplicateData
oleaut32
VarBstrFromDate
SysAllocStringLen
VariantChangeType
LoadTypeLi
SystemTimeToVariantTime
VariantCopy
VariantTimeToSystemTime
SysAllocString
SysFreeString
SysStringLen
VariantClear
VariantInit
msimg32
AlphaBlend
TransparentBlt
shlwapi
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
PathFindFileNameW
PathFindExtensionW
PathFileExistsA
StrFormatKBSizeW
uxtheme
GetCurrentThemeName
GetThemeColor
DrawThemeBackground
CloseThemeData
IsAppThemed
DrawThemeParentBackground
DrawThemeText
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
OpenThemeData
GetWindowTheme
gdiplus
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
GdipDrawImageRectI
crypt32
CryptStringToBinaryA
userenv
CreateEnvironmentBlock
DestroyEnvironmentBlock
wtsapi32
WTSFreeMemory
WTSEnumerateSessionsExW
WTSEnumerateProcessesW
WTSFreeMemoryExW
oleacc
LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow
imm32
ImmGetContext
ImmReleaseContext
ImmGetOpenStatus
winmm
PlaySoundW
winspool.drv
DocumentPropertiesW
OpenPrinterW
ClosePrinter
Sections
.text Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 414KB - Virtual size: 413KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 72KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 135KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ