Static task
static1
Behavioral task
behavioral1
Sample
0c5bf31dcc87230d119e817c5d9084dddb56eda5e80129ec0f44221633cf099f.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
0c5bf31dcc87230d119e817c5d9084dddb56eda5e80129ec0f44221633cf099f.exe
Resource
win10v2004-20240426-en
General
-
Target
0c5bf31dcc87230d119e817c5d9084dddb56eda5e80129ec0f44221633cf099f
-
Size
663KB
-
MD5
4144dd46c3ca026122614daae43cd448
-
SHA1
c3b0cf5d398d61e718aaa026a11addce4f70ba71
-
SHA256
0c5bf31dcc87230d119e817c5d9084dddb56eda5e80129ec0f44221633cf099f
-
SHA512
b10dacd8845b32a0e38005a734c05e47300578d4ec3f098876afc7cb8ebf2627ca1f57ece04c9deec9eabbdd252a834015659aefb9685b614f7cfa36788de7a2
-
SSDEEP
12288:mgj27oi2npPEmn+UX3hKa+XhSwHG7MQ+3Cq:5npT+s7Mh
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0c5bf31dcc87230d119e817c5d9084dddb56eda5e80129ec0f44221633cf099f
Files
-
0c5bf31dcc87230d119e817c5d9084dddb56eda5e80129ec0f44221633cf099f.exe windows:1 windows x86 arch:x86
eb6489e4283acfb5b74f7b68f580b925
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
Imports
advapi32
RegDeleteValueA
RegEnumKeyExA
RegEnumValueA
RegOpenKeyExA
RegQueryInfoKeyA
RegQueryValueExA
GetUserNameA
RegSetValueExA
RegCloseKey
RegCreateKeyExA
RegDeleteKeyA
user32
GetSysColor
GetCursorPos
SystemParametersInfoA
GetDC
CreatePopupMenu
LoadImageA
wsprintfA
TrackPopupMenu
GetIconInfo
GetWindowLongA
CallWindowProcA
SetForegroundWindow
GetKeyboardType
SetMenuDefaultItem
PostMessageA
SetMenuItemInfoA
GetMenuDefaultItem
GetMenuItemCount
GetMenuItemInfoA
InsertMenuItemA
DefWindowProcA
DestroyIcon
DestroyMenu
SetWindowLongA
kernel32
GetUserDefaultLCID
GetDiskFreeSpaceA
GetVersionExA
GetLastError
Sleep
GetModuleHandleA
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetWindowsDirectoryA
GetModuleFileNameA
FreeLibrary
GlobalMemoryStatus
ExitProcess
GetStartupInfoA
GetCommandLineA
GetProcAddress
LoadLibraryA
CloseHandle
OpenMutexA
ReleaseMutex
WaitForSingleObject
CreateMutexA
GetCurrentProcessId
lstrlenA
LocalAlloc
LocalFree
InterlockedExchange
GetComputerNameA
GetSystemDirectoryA
SetLastError
gdi32
DeleteObject
GetDIBits
DeleteDC
cvirte
GetComStat
GetCtrlAttribute
GetCtrlBoundingRect
_UP_InstallPanelCallback
GetCtrlIndex
_UP_LaunchExecutable
GetCtrlVal
_UP_LaunchExecutableEx
GetCurrentPlatform
_UP_LoadPanel
GetDateTimeElements
_UP_CloseCom
_UP_CmtDiscardLock
_UP_MakeDateTime
_UP_MakeDir
_UP_CmtDiscardTSV
_UP_CmtDiscardThreadLocalVar
_UP_MessagePopup
_UPLibBreakpoint
GetFileDate
GetFileInfo
_UPLibChkSize
GetFirstFile
_UP_CmtGetLock
GetTextDisplaySize
_UPLibClearArgs
CVI__mbsnbicmp
CVI__mbsrchr
_UP_CmtGetTSVPtr
CVI__mbsstr
GetTreeColumnAttribute
_UP_CmtGetThreadLocalVar
GetTreeItem
GetTreeItemAttribute
CVI_inp
CVI_outp
GetTreeItemNumChildren
_UP_CmtNewLock
AddTreeImage
_UP_CmtNewTSV
GetTreeItemParent
_UP_NewBitmap
_UP_CmtNewThreadLocalVar
GetTreeItemPath
GetTreeItemPathLength
_UP_NewCtrl
_UP_NewCtrlMenuItem
_UP_CmtReleaseLock
_UP_NewPanel
GetUILErrorString
_UP_OpenComConfig
_UP_CVIAbsoluteTimeFromLocalCalendar
GetUserEvent
_UP_CmtReleaseTSVPtr
CVIAbsoluteTimeFromLocalCalendar
_UP_CVIAbsoluteTimeFromTimeUnit
GetValueFromIndex
CVIAbsoluteTimeFromTimeUnit
_UP_CVIAbsoluteTimeToLocalCalendar
GetValueLengthFromIndex
CVIAbsoluteTimeToLocalCalendar
GetWaitCursorState
_UP_CVIAbsoluteTimeToTimeUnit
CVIAbsoluteTimeToTimeUnit
InStandaloneExecutable
_UP_CmtSetTSV
CVIRTDllAbnormalExit
InitCVIRTDll
InsertListItem
_UP_PointPinnedToRect
_UP_CVI_GetFileSize
_UP_PostDeferredCallToThread
_UP_CVI_GetFileTime
_UP_ComRd
InsertTreeColumn
_UP_PromptPopup
InsertTreeItem
_UP_ComWrt
InstallCtrlCallback
CVI_GetFileSize
CVI_GetFileTime
InstallPanelCallback
InstallPopup
_UP_RectGrow
CloseCVIRTDll
CloseCom
CVI__ismbblead
CVI__mbsbtype
CmtDiscardLock
CVI__mbschr
CmtDiscardTSV
CmtDiscardThreadLocalVar
RemovePopup
LaunchExecutable
RenameFile
CVI__mbsdec
LaunchExecutableEx
CVI__mbsicmp
_UP_CreateMetaFont
CVI__mbsinc
ReplaceListItem
CVI__mbslen
CmtGetCurrentThreadID
CVI__mbsnbcmp
ResetTextBox
LoadPanel
_UP_RenameFile
CmtGetLock
_UP_ResetTextBox
MakeColor
MakeDateTime
RunUserInterface
MakeDir
CmtGetTSVPtr
MakePoint_8STRCTEAXEDX_
CmtGetThreadLocalVar
MakeRect
MenuIsOpen
MessagePopup
CmtNewLock
CmtNewTSV
CmtNewThreadLocalVar
SetActiveCtrl
SetActivePanel
_UP_SetComTime
CmtReleaseLock
SetActiveTreeItem
CmtReleaseTSVPtr
_UP_SetImageBits
_UP_FileSelectPopup
SetBreakOnLibraryErrors
CmtSetTSV
_UP_FindPattern
NewBitmap
SetColumnWidthToWidestCellContents
NewCtrl
SetComTime
NewCtrlMenuItem
SetCtrlAttribute
NewCtrlMenuSeparator
_UP_Get3dBorderColors
ComRd
SetCtrlVal
NewPanel
_UP_SplitPath
ComWrt
SetEnableResourceTracking
OpenComConfig
_UP_GetActiveTreeItem
SetImageBits
_UP_GetBitmapData
SetMouseCursor
_UP_GetBitmapInfo
SetPanelAttribute
PointPinnedToRect
CreateMetaFont
_UP_GetComStat
SetPanelPos
_UP_GetCtrlBoundingRect
PostDeferredCallToThread
_assert
_UP_GetCtrlIndex
CurrThreadId
ProcessSystemEvents
_UP_GetDateTimeElements
PromptPopup
QueueUserEvent
QuitUserInterface
_UP_GetFileDate
_UP_GetFileInfo
_UP_GetFirstFile
abort
abs
Delay
_UP__assert
RectBottom
RectContainsPoint
calloc
DeleteListItem
ceil_FLTREG_
clock
_UP_GetImageBits
RectGrow
_UP_GetImageInfo
RectRight
fclose
_UP_fclose
fgets
floor_FLTREG_
DisableBreakOnLibraryErrors
fopen
_UP_fgets
fprintf
SetTreeCellAttribute
_UP_fopen
_UP_GetMonitorFromPoint
SetTreeColumnAttribute
fread
free
SetTreeItemAttribute
_UP_fread
_UP_GetNextFile
fseek
_UP_fseek
ftell
fwrite
_UP_ftell
DiscardBitmap
_UP_fwrite
SetWaitCursor
DiscardCtrl
_UP_GetNumListItems
isdigit
_UP_isdigit
DiscardPanel
GetImageBits
isspace
GetImageInfo
_UP_isspace
SplitPath
localtime
DisplayPanel
_UP_localtime
malloc
memchr
memcmp
memcpy
_UP_memchr
memmove
_UP_memcmp
memset
GetLabelFromIndex
_UP_memcpy
mktime
_UP_memmove
_UP_memset
pow_FLTREG_
_UP_mktime
printf
_UP_pow_FLTREG_
_UP_GetRelativeMouseState
EnableBreakOnLibraryErrors
_UP_GetScaledCtrlDisplayBitmap
realloc
Timer_FLTREG_
remove
_UP_remove
_UP_GetScaledPanelDisplayBitmap
setlocale
GetMonitorAttribute
_UP_strcat
GetMonitorFromPoint
sprintf
_UP_strcmp
GetMouseCursor
_UP_strcpy
sscanf
GetNextFile
strcat
_UP_strftime
strcmp
FileSelectPopup
_UP_strlen
strcpy
_UP_strncmp
_UP_strncpy
strftime
stricmp
GetNumListItems
strlen
FindPattern
strncmp
strncpy
Fmt
_UP_time
time
_UP_toupper
Get3dBorderColors
GetPanelAttribute
toupper
WhichRuntimeSupportDll
GetActivePanel
GetActiveTreeItem
_UP_GetTextDisplaySize
_UP_GetTreeItem
_UP_GetTreeItemNumChildren
GetRelativeMouseState
_UP_GetTreeItemParent
GetScaledCtrlDisplayBitmap
GetBitmapData
_UP_GetTreeItemPathLength
GetScaledPanelDisplayBitmap
__CVI_Resource_Acquire
_UP_GetUserEvent
GetBitmapInfo
_UP_GetValueLengthFromIndex
_GetErrno
__CVI_Resource_Release
_GetFilesArray
GetBreakOnLibraryErrors
GetSystemAttribute
_UP_InsertTreeColumn
_UP_InstallCtrlCallback
Sections
.text Size: 198KB - Virtual size: 197KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 1KB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ptrdata Size: 512B - Virtual size: 2B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 10KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 213KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ