Static task
static1
Behavioral task
behavioral1
Sample
45e5c8ca50775b258fe74bd93dd9daca2a076c8fa3914a886ffbe1db268578f3.exe
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
45e5c8ca50775b258fe74bd93dd9daca2a076c8fa3914a886ffbe1db268578f3.exe
Resource
win10v2004-20240508-en
General
-
Target
45e5c8ca50775b258fe74bd93dd9daca2a076c8fa3914a886ffbe1db268578f3
-
Size
187KB
-
MD5
237c2c6ee287e6f5404bee1a7247214d
-
SHA1
ff8049b58e4b52b06e7a94d8338026b7d5484baf
-
SHA256
45e5c8ca50775b258fe74bd93dd9daca2a076c8fa3914a886ffbe1db268578f3
-
SHA512
9c14491459b67091bce2244c8790006d7cd0572937c447b80e9b596469725a62aec20e465499826ff27cebe6473649aede43e587d3c71da662aed8a29cce4976
-
SSDEEP
3072:905SSGQkSwE3sxN16PScKZh1Vz80PqZ8hmmL5tz1rJtnLqLiI/jynW0I:9YGcw6kJdZJnPqZ8wmL5tz1rJtqm8jyr
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 45e5c8ca50775b258fe74bd93dd9daca2a076c8fa3914a886ffbe1db268578f3
Files
-
45e5c8ca50775b258fe74bd93dd9daca2a076c8fa3914a886ffbe1db268578f3.exe windows:1 windows x86 arch:x86
5c1df3738248d19fabfee82440efe743
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
TranslateMessage
PeekMessageA
MsgWaitForMultipleObjects
MessageBoxA
DispatchMessageA
wsprintfA
kernel32
EnterCriticalSection
CreateEventA
MapViewOfFile
InterlockedDecrement
GetModuleFileNameA
GetCPInfo
ReleaseMutex
GetCurrentProcessId
UnmapViewOfFile
LocalFree
OpenFileMappingA
TlsGetValue
lstrlenA
InterlockedIncrement
GetModuleHandleA
CloseHandle
GetACP
GetLastError
FreeLibrary
WaitForMultipleObjects
DeleteCriticalSection
InitializeCriticalSection
ExitProcess
LoadLibraryA
LocalAlloc
WaitForSingleObject
DebugBreak
CreateFileMappingA
GetProcAddress
lstrcatA
GetStartupInfoA
LeaveCriticalSection
OpenMutexA
IsDBCSLeadByte
OpenEventA
GetCommandLineA
cvirte
strncat
perror
localeconv
islower
fgetc
_UP_ferror
_UP_PlotY
_UP_GetAxisItemLabelLength
_UP_CVI_WriteFile
SetDrive
LoadExternalModule
GetTCPPeerName
CmtInstallThreadPoolCallback
CmtGetCurrentThreadID
CanvasClear
CVI__mbstok
__RegisterContextInfo
_UP_NewCtrlMenuItem
_UP_GetMonitorFromRect
_UP_DisplayImageFile
_RemoveVaArgInfo
_PtrGetRetValLoc
_FTEST0
WriteToPhysicalMemory
SetTableRowAttribute
RectOffset
GetNumMenuItems
GetDrive
_UP__assert
_UP_BroadcastDDEDataReady
SetPlotAttribute
RectSetFromPoints
NewMenuBar
GetStdioPort
CmtNewThreadPool
realloc
_UP_WriteLine
_PtrSetRetValLoc
_DBLINT87
TimeStr
ServerTCPWrite
MakePoint_8STRCTEAXEDX_
GetRS232ErrorString
GetMouseCursor
CanvasUpdate
bsearch
_UP_iscntrl
_UP_CmtNewThreadPool
_UP_CmtFlushTSQ
SuspendTimerCallbacks
SetPanelAttribute
GetCtrlBitmap
DisplayPCXFile
CmtWaitForThreadPoolFunctionCompletion
vsscanf
strtok
signal
mbtowc
free
_UP_UnregisterDDEServer
_UP_GetListItemImage
_UP_FlushInQ
_UPLibFreeDynPtrInfo
UnRegisterWinMsgCallback
InsertSeparator
GetCtrlValString
CVI__ismbblead
AdviseDDEDataReady
_UP_memset
_UP_mblen
_UP_CompareStrings
_UP_CmtReleaseTSQReadPtr
KeyPressEventIsLeadByte
_mbsnbcmp
_UP_getc
_UP_TimeStr
XModemSend
GetBitmapData
EnablePrivateEventsForPanel
ComRdByte
CVI__mbsnbcpy
abort
_UP_strcspn
_UP_SetDrive
_UP_PlotStripChart
_InitBlkInfo
DisableTaskSwitching
CmtGetTSQAttribute
CVI_SetCommitMode
strcmp
_UP_isupper
SetTableCellRangeAttribute
ResetTextBox
ReadLine
MultiFileSelectPopup_WithAlloc
GetFullPathFromProject
CmtDiscardThreadLocalVar
_UP_ServerTCPWrite
_UP_GetCtrlBoundingRect
SetWaitCursor
RoundRealToNearestInteger
FontSelectPopup
DisconnectFromDDEServer
CanvasGetClipRect
_mbscmp
__SwitchExecutionContext
__GetAppDirPathString
_UP_fputs
_UP_clearerr
_UP_GetStdioWindowOptions
_UP_GetDir
_GetFloatEps
PlotPolygon
GetValueLengthFromIndex
GetScalingFactorsForPrintJob
GetActiveCtrl
Delay
CVI_GetFileSize
_UP_ComSetEscape
_UP_CVI_OpenFile
SetGraphCursorIndex
SetBreakOnLibraryErrors
InstallPanelCallback
HidePanel
DOSColorToRGB
tolower
getenv
fgetpos
div_8STRCTEAXEDX_
_UP_ungetc
_UP_strxfrm
_UP_strrchr
_UP_sinh_FLTREG_
_UP_LoadPanelEx
_UP_GetTCPPeerAddr
_UP_GetGlobalMouseState
GetMonitorAttribute
GetLabelFromIndex
FillTableCellRange
EnableBreakOnLibraryErrors
pow_FLTREG_
_UP_GetTextDisplaySize
_UP_GetFileInfo
_UP_CmtSetTSV
PlotText
DeleteTableColumns
CloseCom
strncmp
isprint
_UP_raise
_UP_SetXMode
_UP_SetImageBits
_UP_GetTableCellValLength
_UPLibChkVaArg
SortTableCells
InstallCtrlCallback
GetTextBoxLineOffset
ClientTCPRead
__AZShadowStop
_UP_PrintCtrl
_UP_InstallMainCallback
_UP_InsertAxisItem
_GetDoubleEps
SetListItemImage
CmtGetThreadPoolAttribute
CVI__mbsdec
freopen
_UP_StringUpperCase
_UP_NewActiveXCtrl
_UPLibReportError
QueueUserEvent
NewBitmap
GetTableColumnAttribute
remove
localtime
_UP_fflush
_UP_GetImageBits
_UP_GetActiveGraphCursor
SetFileAttrs
SetCtrlBitmap
ScaleTextPlots
RenameFile
PlotArc
MainThreadId
GetOutQLen
GetFileDate
CmtReleaseTSQWritePtr
strtol
sin_FLTREG_
memchr
calloc
_UP_ReadFromPhysicalMemory
_PassParamInfo
PrintTextBuffer
GetTableSelection
GetKey
GetExportedNamesFromBinaryFile
ClearListCtrl
CanvasScroll
CVI_inp
wcstombs
__GetKludgeState
_UP_SetSystemDate
_UP_RectSet
_UP_PointPinnedToRect
_UPLibBreakpoint
_DBLLNG87
Timer_FLTREG_
CompareStrings
CmtTerminateThreadPoolThread
CanvasDrawLineTo
abs
_UP_acos_FLTREG_
_UP_RunExternalModule
_UP_RectCenter
_UP_CmtScheduleThreadPoolFunction
_UP_CloseCom
_UP_CVI_DeleteFile
GetFmtIOError
CanvasDrawRoundedRect
__GetVaArgInfoPtr
_UP_DisconnectFromDDEServer
_UP_CmtGetTSQWritePtr
_UP_ClientTCPWrite
SetSystemDate
RectRight
NewMenuItem
MakeRect
GetSubMenuId
DiscardMenu
CanvasDefaultPen
CVIRTDllAbnormalExit
strcoll
_UP_mbstowcs
_UP_isdigit
_UP_getchar
_UP_ReplaceAxisItem
_UP_RegisterTCPServer
_UP_PlotBitmap
_UP_CopyString
_UP_CmtDiscardThreadLocalVar
_PtrChkArith
SetAxisRange
GetTableCellRangeRect
GetPersistentVariable
ExitAsyncCallback
DisableBreakOnLibraryErrors
eof
_mbsnbcpy
_UP_mktime
_UP_GetNumTableColumns
RectEmpty
GetStdioWindowOptions
GetNumTableColumns
ConvertUICoordinates
printf
__CreatePtrInfoForCommandLine
_UP_GetSystemComHandle
_UP_ComBreak
_UP_CmtNewLock
_ResetCalledFunPtr
_PtrIgnoreStruct
ValidatePanel
GetUserBitmapFromText
GetTCPSystemErrorString
_mbscpy
_UP_XModemReceive
_UP_CmtUninstallThreadPoolCallback
_UP_CmtGetThreadPoolFunctionAttribute
_UP_CanvasGetPenPosition
SetPrintAttribute
PointSet
DeleteAxisItem
ComRdTerm
CheckForDuplicateAppInstance
gets
_UP_strftime
_UP_WriteToPhysicalMemory
_UP_FlushOutQ
_UP_FileSelectPopup
_PtrStructMemInfoPtr
XYGraphPopup
GetNextFile
GetMenuId
CmtScheduleThreadPoolFunctionAdv
CVI__mbsbtype
Breakpoint
toupper
fgets
_UP_isxdigit
_UP_fread
_UP_UnMapPhysicalMemory
_UP_GetTextBoxLineIndexFromOffset
_UP_GetBitmapInfo
_UP_CanvasDrawPoly
_InitPtrInfo
Set387CW
RecallPanelState
LoadExternalModuleEx
GetTextDisplaySize
GetTCPErrorString
GetCtrlBoundingRect
GetCheckedItemAreaWidth
GetBreakOnProtectionErrors
GetAxisItem
CmtPreAllocThreadPoolThreads
CVI__mbsnbicmp
_UP_sqrt_FLTREG_
_UP_LoadExternalModuleEx
_UP_GetScaledCtrlDisplayBitmap
SetTableSelection
SetPanelMenuBar
GetCurrentPlatform
DisplayPanel
strncpy
sinh_FLTREG_
ispunct
__SetCurrentDebuggingLevel
_UP_SetFileAttrs
_UP_IsListItemChecked
_UP_CmtGetErrorMessage
SetStdioWindowPosition
RectSetRight
GetImageBits
_UP_wcstombs
_UP_cosh_FLTREG_
_UP_NewMenu
_UP_GetDrive
_GetFloatMax
InsertTableColumns
InStandaloneExecutable
GetBitmapFromFile
CmtGetErrorMessage
rename
frexp_FLTREG_
acos_FLTREG_
_UP_system
_UP_strspn
_UP_remove
_UP_DisplayPCXFile
ResetTimer
GetRelativeMouseState
CloseWinsock
strtoul
memcmp
ceil_FLTREG_
_UP_AddToFilePopupDirHistory
_UPLibGetNumBytes
WriteToPhysicalMemoryEx
SetWindowsErrorMode
RegisterTCPServer
PlotWaveform
PlotRectangle
ClipboardPutBitmap
_UP_GetOutQLen
_UP_GetNextFile
_UP_CmtPreAllocThreadPoolThreads
_UP_ClientDDEExecute
GetActiveGraphCursor
AllocBitmapData_WithAlloc
log_FLTREG_
_UP_ConfirmPopup
TruncateRealNumber_FLTREG_
SyncWait
GetKeyPressEventCharacter
DOSCompatWindow
CVI__mbsicmp
CVI_SetFileTime
wctomb
_UP_fgetc
_UP_GetModuleDir
PlotBitmap
FreeTableValStrings
CVI_inpd
CVI_GetFileTime
exp_FLTREG_
_UP_asctime
_UP_SortTableCells
_UP_PlotText
_UP_GetAxisRange
_UP_CmtSetThreadPoolAttribute
_UPLibChkVaArgEx
_GetDoubleInf
_DBLTO87
NewCtrl
CmtGetTSQReadPtr
strcpy
__AddItemToPseudoListBox
_UP_UnregisterTCPServer
_UP_ComToFile
ReplaceAxisItem
GetOwnerOfMenuObject
DiscardAllUserInterfaceObjects
CanvasGetPenPosition
putc
gmtime
_UP_SetBitmapData
_UP_MakeDir
_UP_GetFirstFile
_UP_CVI_ReadFile
UnloadExternalModule
KeyPressEventIsTrailByte
FindPattern
CmtNewLock
ClientTCPWrite
__GetCVIDebugSectionBaseAddress
_UP_PrintPanel
_UP_CmtReleaseTSQWritePtr
SplitPath
Scan
MakeApplicationActive
GetFileInfo
floor_FLTREG_
_mbsnbicmp
_mbscspn
_PtrAssignPtr
SetFileDate
MapPhysicalMemory
GetLabelLengthFromIndex
GetGlobalMouseState
sopen
_UP_perror
_UP_isgraph
_UP_getenv
_UP_SetStdioWindowOptions
_UP_RectSetBottom
_UP_GetTCPPeerName
_UPLibReturnArg
SetIdleEventRate
SetCtrlIndex
RectSameSize
QuitUserInterface
GetSystemAttribute
EnableTaskSwitching
ClearStripChart
CanvasSetClipRect
ungetc
_assert
_UP_mbtowc
_UP_CloseWinsock
_PtrChkAssign
SetTableCellRangeVals
SetMenuBarAttribute
InstallPopup
GetMonitorFromPanel
DisconnectFromTCPServer
DiscardMenuBar
DeleteTableRows
CmtDiscardThreadPool
asctime
__GetLocalThreadEnvSlot
_UP_GetCtrlDisplayBitmap
_UPLibBreakpointWithElab
SetActiveCtrl
RectEqual
PrintTextFile
NewPanel
GetMenuIdByString
GetFmtIOErrorString
strnicmp
isspace
fscanf
clearerr
_UP_strcat
_UP_freopen
_UP_InsertTextBoxLine
_UP_GetImageInfo
SetBreakOnProtectionErrors
RunExternalModule
PostDeferredCall
InstallMainCallback
GetWaitCursorState
ConfigurePrinter
rewind
log10_FLTREG_
_UP_SystemHelp
_UP_RectGrow
_UP_NewActiveXCtrlFromFile
SetSystemPopupsAttribute
SetAxisScalingMode
ComSetEscape
memcpy
__JPrintf
_UP_strlen
_UP_ctime
_UP_GetTraceAttribute
_UP_GetStdioWindowPosition
_UP_GetGraphCursor
_UP_ComFromFile
GetTextBoxLine
GetScreenSize
BroadcastDDEDataReady
strxfrm
fabs_FLTREG_
_UP_ldexp_FLTREG_
_UP_SetTCPDisconnectMode
_UP_PlotIntensity
_UP_CreateMetaFont
_LocalsRuntimeCheck
WaveformGraphPopup
Sections
.text Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 2.0MB
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 100KB - Virtual size: 100KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ptrdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 35KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
nicvidbg Size: 512B - Virtual size: 281B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ