Static task
static1
Behavioral task
behavioral1
Sample
df647d7d163a95c7c40127126173993988b65930ea162cbd9c0f2db52bc87fd2.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
df647d7d163a95c7c40127126173993988b65930ea162cbd9c0f2db52bc87fd2.exe
Resource
win10v2004-20240508-en
General
-
Target
df647d7d163a95c7c40127126173993988b65930ea162cbd9c0f2db52bc87fd2
-
Size
73KB
-
MD5
2a70a24edbca9f18f6c3c42c31910916
-
SHA1
b8f3234973c9fd113c0c0c9e88395f1c60d22f46
-
SHA256
df647d7d163a95c7c40127126173993988b65930ea162cbd9c0f2db52bc87fd2
-
SHA512
cc3ae450914239f7b0f72ba0fc10167e64da76a8dc892ebf4ea6d83aed979508756447f9026a647ccf743228c10d69f0cc81888e2b149601fded169b2eeeea1e
-
SSDEEP
768:bxhPq7BK5/QuLzsd49fL0/xEgSoMkujgB1sawX417dr9BQ7ZfQPZTGz:bxhaB6/Qe2CPfka+i2Q7ZfQxa
Malware Config
Signatures
Files
-
df647d7d163a95c7c40127126173993988b65930ea162cbd9c0f2db52bc87fd2.exe windows:4 windows x86 arch:x86
366261f6035e864416318d15c53c51bd
Code Sign
79:26:72:28:8a:0a:aa:82:4d:bc:07:83:27:33:ae:78Certificate
IssuerCN=ChipON Micro-Electronic AuthorityNot Before27/12/2017, 06:42Not After31/12/2039, 23:59SubjectCN=ChipON Micro-Electronic SoftWareb3:bf:ed:51:61:c0:c7:5e:3b:90:86:64:db:d0:c3:96:88:5e:1a:50Signer
Actual PE Digestb3:bf:ed:51:61:c0:c7:5e:3b:90:86:64:db:d0:c3:96:88:5e:1a:50Digest Algorithmsha1PE Digest MatchestrueHeaders
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
GetModuleHandleA
MultiByteToWideChar
GetCommandLineA
user32
MessageBoxA
advapi32
RegCloseKey
RegOpenKeyExA
RegQueryValueExA
shell32
ShellExecuteA
mfc42
ord1575
ord6877
ord2784
ord6282
ord561
ord815
ord540
ord800
ord537
ord825
ord535
ord823
ord860
ord924
ord922
ord4278
ord858
ord4277
ord2764
ord941
ord939
ord2915
ord926
ord5856
ord6283
msvcrt
exit
__p___initenv
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_controlfp
_XcptFilter
_exit
?terminate@@YAXXZ
_except_handler3
_onexit
__dllonexit
fprintf
_mkdir
fgets
fopen
fclose
wcslen
sprintf
__CxxFrameHandler
_getcwd
msvcp60
??1_Winit@std@@QAE@XZ
??0_Winit@std@@QAE@XZ
??1Init@ios_base@std@@QAE@XZ
??0Init@ios_base@std@@QAE@XZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@PBD@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?_Copy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Tidy@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEX_N@Z
?append@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@PBDI@Z
?_Xlen@std@@YAXXZ
?_Eos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAEXI@Z
?_Grow@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@AAE_NI_N@Z
?npos@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@2IB
?assign@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV12@ABV12@II@Z
?_C@?1??_Nullstr@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@CAPBDXZ@4DB
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
Sections
.text Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ