C:\work\code-jenkins\FactoryTools\DataDownloadTool\Release\DataDownloadTool.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0d70f427f451479bad2fced529f7349cc304619b7e40d3246ff9efe34f9cf015.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0d70f427f451479bad2fced529f7349cc304619b7e40d3246ff9efe34f9cf015.exe
Resource
win10v2004-20240412-en
General
-
Target
0d70f427f451479bad2fced529f7349cc304619b7e40d3246ff9efe34f9cf015
-
Size
3.6MB
-
MD5
0c62597ad749942e884bd85cfb7765ce
-
SHA1
ea512fb74ce31e43efdd536baee3be20a71c3f9e
-
SHA256
0d70f427f451479bad2fced529f7349cc304619b7e40d3246ff9efe34f9cf015
-
SHA512
c7f4d3cbd745651582dffc5d1e50c939721204c2a90dd68f288e26f45ae490ee4550c63f2ba0cfd7d8c2e6f32d3130aea5d444617286c360a7d1aa848f0adaa9
-
SSDEEP
98304:vUAdtitLrd+Iyf0vPyGsfPeOnaRUp2Z3ANNzkvzh0hKzKt:vUAdwtLUf0bseOJzCzh0hF
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0d70f427f451479bad2fced529f7349cc304619b7e40d3246ff9efe34f9cf015
Files
-
0d70f427f451479bad2fced529f7349cc304619b7e40d3246ff9efe34f9cf015.exe windows:6 windows x86 arch:x86
82b41d075f17a27f43c2fd170315efd4
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
wininet
InternetCanonicalizeUrlA
InternetConnectA
InternetSetFilePointer
InternetWriteFile
InternetQueryDataAvailable
InternetFindNextFileA
InternetQueryOptionA
InternetSetOptionA
InternetGetLastResponseInfoA
InternetSetStatusCallback
FtpFindFirstFileA
FtpGetFileA
FtpPutFileA
FtpDeleteFileA
FtpRenameFileA
FtpOpenFileA
FtpCreateDirectoryA
FtpRemoveDirectoryA
FtpSetCurrentDirectoryA
FtpGetCurrentDirectoryA
FtpCommandA
GopherCreateLocatorA
GopherFindFirstFileA
GopherOpenFileA
GopherGetAttributeA
HttpOpenRequestA
HttpAddRequestHeadersA
HttpSendRequestA
HttpSendRequestExA
HttpEndRequestA
HttpQueryInfoA
InternetSetCookieA
InternetGetCookieA
InternetErrorDlg
InternetOpenA
InternetCrackUrlA
InternetOpenUrlA
InternetCloseHandle
InternetReadFile
kernel32
ReadConsoleW
GetConsoleMode
EnumSystemLocalesW
IsValidLocale
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
GetTimeZoneInformation
GetStdHandle
ExitProcess
QueryPerformanceFrequency
HeapQueryInformation
GetFullPathNameW
GetFileType
SetStdHandle
GetConsoleOutputCP
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
VirtualQuery
VirtualAlloc
GetSystemInfo
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
CompareStringEx
GetStringTypeW
GetLocaleInfoEx
LCMapStringEx
OutputDebugStringW
GetDriveTypeW
FindFirstFileExW
FindNextFileW
IsValidCodePage
SetFilePointerEx
FreeEnvironmentStringsW
SetEnvironmentVariableW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
CreateEventW
WaitForSingleObjectEx
ResetEvent
SearchPathA
GetProfileIntA
GetTempPathA
GetUserDefaultLCID
ReplaceFileA
GetEnvironmentStringsW
GetTempFileNameA
GetDiskFreeSpaceA
VerifyVersionInfoA
VerSetConditionMask
GetTickCount64
GetWindowsDirectoryA
FindResourceExW
lstrcpyA
GetCurrentDirectoryA
GetACP
LocalUnlock
LocalLock
GetCPInfo
GetOEMCP
VirtualProtect
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
FindNextFileA
SetErrorMode
SetFileTime
SetFileAttributesA
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExA
GetFileAttributesA
FileTimeToLocalFileTime
GetAtomNameA
LocalReAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
SystemTimeToFileTime
GetPrivateProfileIntA
lstrcmpA
GetVersionExA
GetCurrentThread
ResumeThread
SuspendThread
SetThreadPriority
CreateEventA
SetEvent
CompareStringA
GlobalGetAtomNameA
GlobalFindAtomA
GlobalAddAtomA
FindResourceA
lstrcmpW
GlobalDeleteAtom
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
FileTimeToSystemTime
LocalAlloc
LoadLibraryExW
FreeLibrary
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
GetStringTypeExA
GetThreadLocale
MoveFileA
lstrcmpiA
GetShortPathNameA
LoadLibraryW
LoadLibraryA
LoadLibraryExA
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetCurrentProcess
DuplicateHandle
GetVolumeInformationA
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetFullPathNameA
GetFileSize
FlushFileBuffers
FindFirstFileA
FindClose
GetCurrentProcessId
MultiByteToWideChar
CopyFileA
FormatMessageA
MulDiv
LocalFree
GlobalLock
GlobalUnlock
GlobalSize
SetLastError
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
WriteConsoleW
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
RaiseException
DecodePointer
GetTickCount
WritePrivateProfileStringA
GetPrivateProfileStringA
OpenProcess
TerminateProcess
Sleep
DeleteFileA
CreateDirectoryA
GetUserDefaultLangID
SystemTimeToTzSpecificLocalTime
GetComputerNameA
GlobalFree
GlobalAlloc
GetModuleFileNameA
GetSystemTime
WaitForSingleObject
CloseHandle
OutputDebugStringA
WriteFile
CreateFileA
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
LoadResource
SetConsoleCtrlHandler
CreateFileW
SetCurrentDirectoryW
GetCurrentDirectoryW
GetCommandLineW
user32
IntersectRect
InvalidateRgn
CopyAcceleratorTableA
CharNextA
LoadCursorW
WindowFromPoint
ReleaseCapture
SetCapture
DestroyIcon
DeleteMenu
GetDialogBaseUnits
SetRect
MessageBeep
InvalidateRect
GetTabbedTextExtentA
IsClipboardFormatAvailable
GetAsyncKeyState
RealChildWindowFromPoint
CopyImage
LoadCursorA
GetSysColorBrush
IsDialogMessageA
SetWindowTextA
ScrollWindowEx
IsDlgButtonChecked
CheckRadioButton
CheckDlgButton
GetDlgItemTextA
SetDlgItemTextA
GetDlgItemInt
SetDlgItemInt
MoveWindow
ShowWindow
OffsetRect
SetRectEmpty
SendDlgItemMessageA
SystemParametersInfoA
InflateRect
GetMenuItemInfoA
DestroyMenu
FillRect
ClientToScreen
GetWindowDC
TabbedTextOutA
GrayStringA
DrawTextExA
DrawTextA
KillTimer
SetTimer
WaitMessage
ReleaseDC
GetDC
MapVirtualKeyA
GetKeyNameTextA
MapDialogRect
SetWindowContextHelpId
SetCursor
ShowOwnedPopups
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamA
LoadBitmapW
SetMenuItemInfoA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
IsRectEmpty
GetCursorPos
GetActiveWindow
TranslateMessage
GetMessageA
GetMonitorInfoA
MonitorFromWindow
WinHelpA
GetScrollInfo
SetScrollInfo
LoadIconA
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExA
GetWindow
GetTopWindow
GetClassNameA
GetClassLongA
SetWindowLongA
OpenClipboard
EqualRect
CopyRect
GetSysColor
MapWindowPoints
ScreenToClient
AdjustWindowRectEx
GetWindowRect
GetWindowTextLengthA
GetWindowTextA
RemovePropA
GetPropA
SetPropA
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateA
SetClassLongA
SetWindowRgn
SetParent
wsprintfA
GetForegroundWindow
SetActiveWindow
UpdateWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
GetFocus
SetFocus
GetDlgCtrlID
GetDlgItem
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
GetNextDlgGroupItem
TrackMouseEvent
LoadImageW
CreatePopupMenu
GetMenuDefaultItem
BringWindowToTop
LoadAcceleratorsA
TranslateAcceleratorA
LoadMenuA
InsertMenuItemA
LoadImageA
GetMenuBarInfo
UnpackDDElParam
ReuseDDElParam
RegisterClipboardFormatA
DrawFocusRect
DrawIconEx
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
SetLayeredWindowAttributes
CheckMenuItem
DrawEdge
GetTabbedTextExtentW
DestroyCursor
GetWindowRgn
WindowFromDC
CreateMenu
InSendMessage
MonitorFromRect
SendNotifyMessageA
SubtractRect
IsChild
IsMenu
TranslateMDISysAccel
FindWindowA
GetWindowThreadProcessId
SendMessageA
PostQuitMessage
IsIconic
EnableWindow
GetSystemMetrics
GetSystemMenu
AppendMenuA
DrawIcon
GetClientRect
LoadIconW
UnregisterClassA
SetWindowPlacement
GetParent
GetMenuStringA
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuA
RemoveMenu
IsWindowEnabled
MessageBoxA
GetWindowLongA
GetLastActivePopup
CharUpperA
GetDesktopWindow
RegisterWindowMessageA
DispatchMessageA
PeekMessageA
GetMessagePos
GetMessageTime
PostMessageA
DefWindowProcA
CallWindowProcA
RegisterClassA
GetClassInfoA
GetClassInfoExA
CreateWindowExA
IsWindow
GetWindowPlacement
DefMDIChildProcA
DefFrameProcA
DrawMenuBar
EnumChildWindows
SetWindowPos
DestroyWindow
EnumDisplayMonitors
GetDCEx
GetUpdateRect
CharUpperBuffA
ModifyMenuA
GetDoubleClickTime
SetMenuDefaultItem
LockWindowUpdate
DestroyAcceleratorTable
CreateAcceleratorTableA
LoadAcceleratorsW
ToAsciiEx
GetKeyboardState
MapVirtualKeyExA
IsCharLowerA
GetKeyboardLayout
GetComboBoxInfo
MonitorFromPoint
UpdateLayeredWindow
PostThreadMessageA
UnionRect
FrameRect
CopyIcon
SetCursorPos
LoadMenuW
IsZoomed
PtInRect
DrawFrameControl
gdi32
DeleteDC
DeleteObject
Escape
ExcludeClipRect
GetClipBox
GetClipRgn
GetCurrentPositionEx
GetObjectType
GetPixel
GetStockObject
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
PtVisible
RectVisible
RestoreDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetStretchBltMode
SetTextCharacterExtra
SetTextAlign
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
StartDocA
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
ExtCreatePen
MoveToEx
TextOutA
ExtTextOutA
PolyBezierTo
PolylineTo
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectA
GetTextExtentPoint32A
CreateSolidBrush
GetTextMetricsA
DPtoLP
GetBkColor
GetTextColor
GetRgnBox
CombineRgn
GetMapMode
SetRectRgn
EnumFontFamiliesExA
EndDoc
StartPage
EndPage
AbortDoc
SetAbortProc
CreateCompatibleBitmap
CreateFontA
StretchDIBits
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesA
GetTextCharsetInfo
GetDIBits
SetPixel
StretchBlt
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
OffsetRgn
GetCurrentObject
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
CloseMetaFile
CreateMetaFileA
DeleteMetaFile
GetROP2
GetBkMode
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextExtentPointA
GetTextExtentPoint32W
GetTextFaceA
CreateRectRgn
CreatePatternBrush
CreatePen
CreateHatchBrush
CreateDIBPatternBrushPt
CreateCompatibleDC
BitBlt
PatBlt
CreateRectRgnIndirect
CreateBitmap
GetObjectA
SetTextColor
SetBkColor
GetDeviceCaps
CreateDCA
GetCharWidthA
SaveDC
CopyMetaFileA
msimg32
AlphaBlend
TransparentBlt
winspool.drv
ClosePrinter
DocumentPropertiesA
GetJobA
OpenPrinterA
advapi32
GetFileSecurityA
SetFileSecurityA
RegEnumKeyExA
RegEnumValueA
RegQueryValueA
RegEnumKeyA
RegSetValueExA
RegDeleteValueA
RegDeleteKeyA
RegCreateKeyExA
RegQueryValueExA
RegOpenKeyExW
RegOpenKeyExA
RegSetValueA
RegCloseKey
GetUserNameA
shell32
SHGetFileInfoA
SHAddToRecentDocs
ExtractIconA
SHGetPathFromIDListA
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileA
DragFinish
ShellExecuteA
SHGetMalloc
SHAppBarMessage
SHBrowseForFolderA
ShellExecuteExA
shlwapi
PathIsUNCA
PathStripToRootA
UrlUnescapeA
PathFileExistsA
PathFindFileNameA
PathRemoveExtensionA
PathRemoveFileSpecW
StrFormatKBSizeA
PathFindExtensionA
uxtheme
GetWindowTheme
IsAppThemed
IsThemeBackgroundPartiallyTransparent
GetThemePartSize
GetCurrentThemeName
GetThemeSysColor
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeParentBackground
DrawThemeText
GetThemeColor
ole32
OleIsRunning
GetRunningObjectTable
CreateOleAdviseHolder
CreateDataAdviseHolder
OleGetIconOfClass
OleSetContainedObject
OleSaveToStream
OleSave
OleQueryLinkFromData
OleCreateFromFile
OleCreateLinkToFile
OleCreateStaticFromData
OleCreateLinkFromData
OleCreateFromData
OleCreate
CreateItemMoniker
CreateGenericComposite
GetHGlobalFromILockBytes
WriteClassStm
OleRegEnumVerbs
OleRegGetMiscStatus
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleQueryCreateFromData
CreateFileMoniker
StgIsStorageFile
StgOpenStorage
StgCreateDocfile
OleLockRunning
OleSetMenuDescriptor
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoRevokeClassObject
CoRegisterClassObject
PropVariantCopy
CreateStreamOnHGlobal
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
OleRun
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
StringFromGUID2
CoInitializeEx
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoCreateInstance
CoCreateGuid
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
CoGetMalloc
OleCreateMenuDescriptor
OleLoad
CoUninitialize
oleaut32
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SafeArrayAccessData
SafeArrayUnaccessData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayGetDim
SafeArrayPtrOfIndex
VariantCopy
VarCyFromStr
VarBstrFromCy
VarBstrFromDate
VarBstrFromDec
VarDecFromStr
SafeArrayDestroyDescriptor
SysAllocString
SafeArrayGetElemsize
SafeArrayRedim
SafeArrayDestroy
SafeArrayCopy
SafeArrayAllocDescriptor
SysFreeString
SysStringByteLen
SysAllocStringByteLen
SysAllocStringLen
VariantInit
VariantClear
VariantChangeType
SystemTimeToVariantTime
VariantTimeToSystemTime
SysStringLen
VarDateFromStr
SafeArrayCreate
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
SafeArrayDestroyData
OleCreateFontIndirect
SysReAllocStringLen
SafeArrayAllocData
oledlg
ord8
ws2_32
ntohs
recvfrom
sendto
gethostbyname
WSASetLastError
WSAGetLastError
htonl
getsockname
socket
send
select
recv
inet_addr
htons
inet_ntoa
WSAStartup
getpeername
bind
accept
WSACleanup
WSAAsyncSelect
__WSAFDIsSet
closesocket
connect
ioctlsocket
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
iphlpapi
GetAdaptersInfo
gdiplus
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdiplusShutdown
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipGetImagePaletteSize
GdiplusStartup
GdipFree
GdipAlloc
oleacc
AccessibleObjectFromWindow
CreateStdAccessibleObject
LresultFromObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundA
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 612KB - Virtual size: 612KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 56KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 219KB - Virtual size: 218KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ