Static task
static1
Behavioral task
behavioral1
Sample
af23d92a5a40949f739c40d75230f2b5d2b327f556a741ac5f1554645930ec83.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
af23d92a5a40949f739c40d75230f2b5d2b327f556a741ac5f1554645930ec83.exe
Resource
win10v2004-20240426-en
General
-
Target
af23d92a5a40949f739c40d75230f2b5d2b327f556a741ac5f1554645930ec83
-
Size
448KB
-
MD5
80891412b42f90b5b9a1d8d2b8d78876
-
SHA1
e23425934f7380cb60a974f25b7b863a66495255
-
SHA256
af23d92a5a40949f739c40d75230f2b5d2b327f556a741ac5f1554645930ec83
-
SHA512
78911e3e8c9e3580a497ec92f560703b5627767141a82e6c69a4e92157894db528c8ffccda3cab8cc4c458fd4f7c2fbebd6b0f6f59ac7503ff2fef8b46946f14
-
SSDEEP
6144:c7NimAmA/ehu7wjwONfY+kLIv971Gm5n653ImM:ONim5AywuY02FImM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource af23d92a5a40949f739c40d75230f2b5d2b327f556a741ac5f1554645930ec83
Files
-
af23d92a5a40949f739c40d75230f2b5d2b327f556a741ac5f1554645930ec83.exe windows:1 windows x86 arch:x86
291791f9d9806141ff322408c2b1ea4f
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
kernel32
CreateMutexA
GetCurrentProcessId
WaitForSingleObject
ReleaseMutex
LocalAlloc
LocalFree
GetStartupInfoA
GetCommandLineA
CloseHandle
FreeLibrary
GetModuleHandleA
OpenMutexA
ExitProcess
CreateEventA
WaitForMultipleObjects
GetProcAddress
GetModuleFileNameA
LoadLibraryA
lstrlenA
OpenEventA
InitializeCriticalSection
DeleteCriticalSection
SetLastError
TlsGetValue
GetLastError
InterlockedIncrement
InterlockedDecrement
LeaveCriticalSection
EnterCriticalSection
cvirte
_UP_memcmp
_UP_GetTreeItemFromLabel
GetStdioPort
rewind
strcspn
SetEnableResourceTracking
RectEmpty
__CVI_Debug_DisconnectEx
GetCurrentPlatform
CmtScheduleThreadPoolFunction
CmtGetTSQAttribute
CVIUSTElocaltime
_UP_GetTreeItemNumDescendents
_UP_ResetTextBox
SetPrintAttributeEx
SetUpDDEWarmLink
_UP_GetFontTypefaceNameLength
_UP_getenv
__CVI_Debug_DiscardSharedMemory
GetAnnotationIndexFromCaption
mbstowcs
NIWatchdog_AddResetAction
_UP_ServerTCPRead
strchr
_UP_GetMonitorFromPanel
NewStatusBar
CmtNewTSV
_UPLibBreakpoint
NIWatchdog_Enable
CreateUDPChannelConfig
_UP_UDPWrite
PlotText
RegisterTCPServer
bsearch
_UP_CmtNewTSV
_UP_RectSetRight
_UP_NewPanel
_UP_mblen
InsertAxisItem
__SimulateRTShuttingDown
DeleteTabPage
DeleteStatusBarCellListItem
_UP_ReadFromPhysicalMemory
GetBitmapInfo
__GetLocalThreadEnvSlot
__GetAppDirPathString
_UPLibReportError
NewBitmap
FileSelectPopup
_UP_SubtractCVITimeIntervals
GetRTUtilErrorString
_UP_GetTCPHostName
isupper
GetExternalModuleAddrEx
_UP_TraceConfigure
_87TOPSW
_UP_CanvasGetPixel
GetTreeItemFromTag
SetGraphCursor
_UP_UnloadExternalModule
atan_FLTREG_
_UP_strtoul
_UP_GetLegendItemFromPoint
GetCtrlAttribute
ComRdTerm
_UP_InsertTabPage
GetRTFileAPIErrorString
__CVI_Debug_NewSharedMemory
CmtGetTSQWritePtr
_UP_CreateRTSystemImage
GetTableCellFromPoint
_UP_PrintCtrl
_UP_FlushOutQ
_UP_PlotIntensity
vfprintf
CanvasScroll
RegisterWinMsgCallback
_UP_PlotY
GetScaledPanelDisplayBitmap
FindAllRTSystemsOnSubnet
__CVI_Resource_Acquire
__GetResDirPathString
PlotRectangle
GetCtrlDisplayBitmap
RegisterLibraryRunStateFunction
_UP_SetRTSystemSettingVarg
SuspendTimerCallbacks
GetKey
longjmp
_UP_ConnectToDDEServer
_UP_PlotBitmap
_UP_NIWatchdog_Close
freopen
NewActiveXCtrlFromFile
_UP_GetCVIVersionYear
CVIUSTEdiscardtimer
_UP_ClipboardGetBitmap
_UP_NIWatchdog_Open
_GetDoubleEps
CmtSetTSQAttribute
IncrementCVIAbsoluteTime
RectBottom
_UP_CmtTryToGetLock
GetCtrlArrayIndex
SetTextCtrlHeight
CmtReleaseTSQWritePtr
PromptPopup
SetTreeColumnAttribute
_UP_ComToFile
_mbsnbicmp
CanvasUpdate
ConnectToTCPServerEx
CanvasGetPenPosition
__CanSkipDisablePatch3EK8PMIO
RTControllerQuery
ScanIn
tmpfile
fgets
_UP_strchr
_UP_CmtDiscardThreadPool
EnableInterrupts
GetValidatedPrintAttribute
DiscardAllUserInterfaceObjects
_UP_acos_FLTREG_
_UP_GetTreeItemLevel
_UP_CompareStrings
GetTableColumnFromLabel
GetCVIVersion
_UP_GetNumTableColumns
_UP_UnregisterTCPServerEx
_UP_NIWatchdog_Disable
_UP_SavePanelState
CVI__mbstok
AllocBitmapData_WithAlloc
GetKeyPressEventModifiers
StringUpperCase
_UP_SetFontPopupDefaultsEx
InsertStatusBarCellListItem
RectEqual
ReadFromPhysicalMemory
__GetVaArgInfoPtr
_UP_GetProjectDir
GetBitmapData
LaunchExecutableEx
_UP_GetCtrlArrayIndex
_UP_GetBitmapData
GetExportedNamesFromBinaryFile
RoundRealToNearestInteger
ResumeTimerCallbacks
_UP_CmtDiscardLock
GetTCPHostName
SetStdioPort
GetWindowDisplaySetting
strerror
_UP_CVI_WriteFile
SaveBitmapToBMPFile
InsertTreeCellRingItem
_UP_CompareBytes
TCPFreeMemory
GetLabelFromIndex
CanvasDrawTextAtPoint
SetCVILogReportingLocation
_UP_SetTCPDisconnectMode
_UP_CreateMetaFontWithCharacterSet
_UPReturnPointerSizeInfo
_UP_CmtWaitForThreadPoolFunctionCompletionEx
_UP_CompareCVIAbsoluteTimesWithTolerance
GetCheckedItemAreaWidth
_UP_NIWatchdog_SetAttribute
_UP_CmtGetTSQAttribute
_UP_DSGetBoundPlotID
fabs_FLTREG_
_UP_ClipboardPutText
TraceUserEvent
SetPanelMenuBar
_UP_NIWatchdog_AddResetAction
_UP_GetCtrlDisplayBitmap
_UP_AddToFilePopupDirHistory
CVI__mbsinc
GetNumImagesInFile
CVIProfGetCurrentThreadProfiling
GetUDPSocketHandle
_UP_setbuf
__DebugInfoReleaseLock
ReplaceListItem
_UP_AddGraphAnnotation
CmtNewThreadLocalVar
_GetFloatMax
_GetDoubleInf
ComWrtByte
_UP_CopyBytes
_UPLibChkString
CVITimeIntervalToSeconds
GetCVILogOutputFormat
NIWatchdog_Start
strncat
_UP_GetBitmapInfo
CreateMetaFontEx
_UP_RectCenter
SetOwnerForNextCreatedWindow
_UPLibEndChkVaArgs
GetTreeCellRingValueFromIndex
snprintf
atan2_FLTREG_
GetSharedMenuBarEventPanel
_UP_CmtFlushTSQ
_DBLLNG87
MinimizeAllWindows
_UP_GetGraphCoordsFromPoint
_UP_signal
_UP_GetBitmapFromFileEx
puts
GetSubMenuId
_UP_GetTableColumnFromLabel
__CVI_Debug_SynchronizeMemory
_UP_GetIndexFromPoint
_mbsdec
DisconnectFromTCPServer
_UP_CmtNewThreadPool
_UP_system
_UP_ldiv_8STRCTEAXEDX_
mktime
lldiv
MultiplyCVITimeInterval
CanvasDrawLine
DuplicatePanel
GetNumMenuItems
_UP_RectMove
_UP_CVI_strtoll
_UP_isupper
_UP_InsertTreeCellRingItem
DirSelectPopup
GetTableCellRangeRect
OpenComConfig
_UP_CmtSetCurrentThreadPriority
NewCtrlMenuSeparator
cos_FLTREG_
_UP_NIWatchdog_Whack
_UP_GetAxisRange
GetSystemPopupsAttribute
_UP_CVIProfSetCurrentThreadProfiling
_UP_FreeRTUtilMemory
_UP_ExecutableHasTerminated
fclose
setlocale
_UP_GetAllTCPHostAddresses
RectCenter
_UP_CVI_ReadFile
_UP_RunExternalModule
_UP_CmtGetLock
_UP_GetTextDisplaySize
_UP_PrintTextFile
CVI__mbscpy
_UP_CmtGetThreadPoolAttribute
GetTableCellValLength
Set387CW
_UP_SetDrive
SetTabPageAttribute
GetDrive
CloseWinsock
UninstallRTFileFromCVIDir
mbtowc
NIWatchdog_Close
_UP_DuplicatePanel
CVILowLevelSupportDriverLoaded
_UP_ComRd
PlotPackedDigitalLinesMultiBus
_UP_StringLength
CanvasDrawRoundedRect
GetNumTreeColumns
vsscanf
_UP_InstallComCallback
RectSetRight
_RemoveVaArgInfo
_UP_TerminateDDELink
SetActiveTabPage
strtol64
AreTreeItemsRelated
_UP_DSBindPlot
_UP_DisplayImageFile
GetTableCellRingIndexFromValue
_UP_isalpha
GetTreeItemTag
GetTreeItemLevel
LaunchExecutable
CanvasDrawPoint
_UP_strftime
AddToFilePopupDirHistory
_UP_LaunchExecutable
_UP_GetNumAxisItems
AdviseDDEDataReady
SetCtrlMenuAttribute
CVI__mbsnbicmp
RemoveCtrlFromSplitter
CVI_outpd
_UP_FileToArray
MoveTreeItem
GetNumTableColumns
ComFromFile
floor_FLTREG_
TimeStr
RectSetBottom
_PtrChkArith
CVI_llabs
PlotWaveform
_UP_GetImageBits
_UP_DivideCVITimeInterval
_UP_gets
_UP_LoadPanel
isxdigit
XYGraphPopup
CVI_DeleteFile
_UP_UDPMulticastUnsubscribe
_UP_CmtInstallThreadPoolCallback
ReadLine
islower
abort
CVI__mbsbtype
GetTimeUS
RemovePopup
_UP_NewMenu
GetImageBits
_UP_CmtReleaseTSQWritePtr
_UP_WriteToPhysicalMemory
vfscanf
strxfrm
_LocalsRuntimeCheck
GetCtrlValString
calloc
_UP_fsetpos
_UP_CmtGetTSQWritePtr
__RegisterAtExitCleanup
_UP_putchar
GetBreakOnLibraryErrors
_UP_strrchr
__CVI_Debug_BreakIsEnabled
_UP_SetProcessorAffinityForThread
_FLTTO87
scanf
gets
_UP_SetFilePtr
CreateRTSystemImage
frexp_FLTREG_
EnableBreakOnLibraryErrors
_mbsbtype
GetStdioWindowSize
CopyString
_InitBlkInfo
GetOutQLen
PlotLine
_UP_lldiv
_UP_memmove
SetAxisTimeFormat
SetActiveCtrl
GetCtrlArrayBoundingRect
_UP_PlotX
_UP_ctime
IsListItemChecked
InstallComCallback
DebugPrintf
ReportUPError
CVI_strtoul64
_UP_ClientDDERead
_UP_GetRTSystemInfo
_UP_SplitPath
SetTreeCellAttribute
_UP__assert
DeleteTextBoxLines
GetMenuItemIdByString
CmtTryToGetLock
_UP_CompareCVITimeIntervalsWithTolerance
_UP_SetCTSMode
CmtDiscardTSV
MakePoint_8STRCTEAXEDX_
PlotDigitalLines
_UP_IsListItemChecked
_UP_raise
_PtrRValue
GetGraphCursor
modf_FLTREG_
_UP_strtol64
ExecutableHasTerminated
UnregisterTCPServer
WriteLine
CheckListItem
__DBG_DllMainLeave
_UP_GetPanelDisplayBitmap
MenuIsOpen
_UP_CanvasGetClipRect
_UP_ungetc
_UP_CVI_atoll
_UP_RTControllerQuery
_UPLibIsProtectionAvailable
SleepUntilNextMultipleUS
GetTreeItemPath
ClearDigitalGraph
_UP_GetSystemComHandle
_UP_GetStdioWindowOptions
_UP_GetStdioWindowSize
CmtReadTSQData
NewBitmapEx
_UP_DisconnectFromDDEServer
_PtrGetRetValLoc
CVIRTDllAbnormalExit
RectSameSize
EnableTaskSwitching
ClipboardPutText
tmpnam
_UP_PlotPackedDigitalLinesMultiBus
FontSelectPopup
strcmp
__SetUPErrorFile
lseek
GetAnnotationAttribute
GetStatusBarAttribute
XGraphPopup
CVIAbsoluteTimeFromTimeUnit
__AZShadowStart
SetPanelCharacterSet
_UP_asctime
SetStdioWindowSize
GetActiveXCtrlFromObjHandle
qsort
CmtGetTSVPtr
_assert
_UP_PostDeferredCall
_UP_GetTableCellFromPoint
_UP_GetGraphCursorIndex
_UP_bsearch
_mbspbrk
_UP_ComRdByte
ClearStripChart
_UP_strcmp
CVI__mbscspn
_UP_GetActiveTreeCell
DeleteGraphAnnotation
cosh_FLTREG_
_UP_CVI_GetFileSize
_UP_InstallMenuCallback
_UP_PlotScaledIntensity
ValidatePanel
DeleteImage
SetCTSMode
_UP_wctomb
PlotScaledIntensity
ServerDDEWrite
GetActiveGraphCursor
DefaultPanel
GetTCPHostAddr
DeleteTableCellRangeRingItems
_UPLibBreakpointWithElab
strstr
PrintRTSystemInfo
_PassArgCoord
ConnectToDDEServer
CmtExitThreadPoolThread
RectGrow
_GetErrno
SetAnnotationAttribute
ScaleTextPlots
_UP_InsertTableCellRangeRingItem
_UP_GetCurrentCVIAbsoluteTime
DivideCVITimeInterval
DiscardCtrlArray
ComSetEscape
_UP_FormatDateTimeString
_UP_ComWrt
MakeColor
SizeAllCommandButtons
__AdjustPtrInfoDataForAllModules
_mbsicmp
_UP_LoadExternalModuleEx
_UP_feof
DiscardMenuItem
_UP_GetTCPPeerAddr
PostDeferredCallToThread
_UP_RegisterTCPServerEx
CVI_ReadFile
_UP_CanvasDrawText
_UP_CmtReadTSQData
_UP_NIWatchdog_ClearOutputs
UnregisterRTStartupDLL
setvbuf
GetMouseCursor
GetBitmapInfoEx
DeleteTableColumns
_UP_UnlockRTSystem
_UP_GetFileInfo
_UP_BroadcastDDEDataReady
_UP_GetCursorAttribute
FormatRTSystem
_UP_PointPinnedToRect
GetMonitorFromPoint
EnablePrivateEventsForPanel
AddPanelToSplitter
CVIUSTEsettimer
GenericMessagePopup
__CVI_Resource_IsEnabled
_UP_mbstowcs
CVITimeIntervalToFractionalUnitTime
Sections
.text Size: 70KB - Virtual size: 70KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 10KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 21KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ptrdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 52KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 291KB - Virtual size: 291KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
nicvidbg Size: 512B - Virtual size: 281B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ