__GetPropA@12
Static task
static1
Behavioral task
behavioral1
Sample
Kaspersky Anti-Virus Personal Pro 4.5.0.94 FR.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Kaspersky Anti-Virus Personal Pro 4.5.0.94 FR.exe
Resource
win10v2004-20240226-en
General
-
Target
bdc7b4686e7944c00eddcf94a80531a3
-
Size
132KB
-
MD5
bdc7b4686e7944c00eddcf94a80531a3
-
SHA1
ce7e4839d76ec38c326187a61179a0f2e4696292
-
SHA256
28c45bbc28a2c698b731adadc242e5f78e197b2d447e47b37c84f824a5bfc4bd
-
SHA512
fb3c9c29807979de1615b85f72fdd4b8a27cf563c7232478a093dad74c3cfe13204ae738b2b52c0827a7e24bbcb1a0d0eaa3dd3bad7f08a9dd71f84a76b439e4
-
SSDEEP
3072:iagjM5VXOvnvTBH99KeeGsg01CgOBhEPR9B+q5lsFT34ZDAcTL:AM5xIn4ggOBhSRp4FT3J8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/Kaspersky Anti-Virus Personal Pro 4.5.0.94 FR.exe
Files
-
bdc7b4686e7944c00eddcf94a80531a3.zip
-
Kaspersky Anti-Virus Personal Pro 4.5.0.94 FR.exe.exe windows:5 windows x86 arch:x86
36adf98bf14b958e200e7ac070c22d45
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
shlwapi
PathCanonicalizeA
StrFormatByteSizeW
StrFormatKBSizeW
PathStripToRootW
shell32
ord716
kernel32
FatalAppExitW
SetFileApisToOEM
CreateEventW
SetCommConfig
OpenEventW
SetHandleCount
SetFileTime
GetProfileStringW
TlsGetValue
CreateTimerQueue
SetupComm
FileTimeToDosDateTime
SetProcessWorkingSetSize
LoadLibraryW
WaitForSingleObjectEx
CreateDirectoryW
lstrcpynA
CreateMutexA
lstrcmpiW
GetLogicalDriveStringsA
DisconnectNamedPipe
RequestDeviceWakeup
user32
DlgDirListW
EndMenu
EnableWindow
ClipCursor
TileWindows
UnionRect
MapVirtualKeyA
ScrollDC
GetDC
GetScrollRange
EnumWindows
LoadBitmapA
CopyImage
DialogBoxIndirectParamW
ChangeMenuW
DragObject
IsCharUpperA
GetDlgItemTextA
LookupIconIdFromDirectory
EnumPropsW
SwapMouseButton
DestroyAcceleratorTable
LockWorkStation
LoadMenuIndirectW
CopyAcceleratorTableA
DrawTextExW
TranslateMessage
SetRect
InvalidateRect
GetAltTabInfoA
PeekMessageW
GetRawInputDeviceInfoA
GetTabbedTextExtentA
GetMenuContextHelpId
EnableScrollBar
PostThreadMessageW
MessageBoxW
MapWindowPoints
DispatchMessageW
GetTopWindow
GetWindowRect
gdi32
GetTextExtentPointW
GetMetaRgn
GetOutlineTextMetricsA
CreateBitmapIndirect
SetMetaFileBitsEx
AnimatePalette
GetBitmapBits
ScaleWindowExtEx
GetBrushOrgEx
SetLayout
EnumEnhMetaFile
AbortPath
ExtTextOutW
GetTextExtentExPointI
RealizePalette
advapi32
ClearEventLogA
InitializeAcl
AddAccessAllowedObjectAce
CopySid
GetCurrentHwProfileA
IsTextUnicode
AddAce
Exports
Exports
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.extext Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 332B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.bmem Size: 512B - Virtual size: 68B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedat Size: 1024B - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 124KB - Virtual size: 123KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ