Static task
static1
Behavioral task
behavioral1
Sample
72569763a1f318ce2b0531b778300a47edbd5891035117aa9aae4ec46da02fa5.exe
Resource
win7-20240611-en
Behavioral task
behavioral2
Sample
72569763a1f318ce2b0531b778300a47edbd5891035117aa9aae4ec46da02fa5.exe
Resource
win10v2004-20240508-en
General
-
Target
72569763a1f318ce2b0531b778300a47edbd5891035117aa9aae4ec46da02fa5
-
Size
702KB
-
MD5
c17d4b483863f75248811fc1cda65cfa
-
SHA1
f68b4c1c79cc936aeb63472cf1446a93e6602b25
-
SHA256
72569763a1f318ce2b0531b778300a47edbd5891035117aa9aae4ec46da02fa5
-
SHA512
b3cef7e3536422fb71940f3b5a5def376687bb02711781bddc5d1d856ddf00c3c97e0ad1bf6089f609c8845485afc0e8fe6cd09a79349958f27c3495c7e7fca9
-
SSDEEP
12288:JxTuWNoPOPUvAFyWuV93TqJKRqNx2mhqRew2:xNoPOPUvAFg9uAEx2UqRew2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 72569763a1f318ce2b0531b778300a47edbd5891035117aa9aae4ec46da02fa5
Files
-
72569763a1f318ce2b0531b778300a47edbd5891035117aa9aae4ec46da02fa5.exe windows:4 windows x86 arch:x86
6d1aa2053226b76f5a083cbdcfdfd24f
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
tupl107
?CSV_CheckPower@@YAFAAGAAW4CSV_POWER_PATH@@1@Z
?CSV_GetVBat@@YAFAAN@Z
?COM_Version@@YAFAAUSW_VERSION@@@Z
?COM_WinVersion@@YAFAAUSW_VERSION@@@Z
?COM_GetTimeOut@@YAFAAF@Z
?BMM_IsCharSetLoaded@@YAFE@Z
?COM_SetTimeOut@@YAFF@Z
?LDR_DelPrgm@@YAFF@Z
?TXT_DeleteTextModul@@YAFEFW4BOOLE@@@Z
?TXT_DefineLang@@YAFPADEAAE@Z
?FIL_StartList@@YAFPADPAUFIL_DSTAT@@@Z
?FIL_NextList@@YAFPAUFIL_DSTAT@@@Z
?FIL_EndList@@YAFXZ
?FIL_Read@@YAFKGAAUFIL_BUFFER@@J@Z
?FIL_InquireDevice@@YAFPADAAUFIL_DEVINFO@@@Z
?FIL_Delete@@YAFPAD@Z
?FIL_Open@@YAFPADGEAAK@Z
?FIL_Close@@YAFK@Z
?FIL_MkDir@@YAFPAD@Z
?MEM_GetMemInfo@@YAFAAUMEM_INFO@@@Z
?MEM_FlashStatus@@YAFAAUMEM_FLASH_STATUS_TY@@@Z
?COM_CloseConnection@@YAFXZ
?COM_Init@@YAFW4INIT_MODE@@@Z
?COM_SetConnDlgFlag@@YAFW4BOOLE@@@Z
?COM_ShowDialogs@@YAFW4BOOLE@@@Z
?COM_OpenConnection@@YAFW4COM_PORT@@AAW4COM_BAUD_RATE@@F@Z
?COM_End@@YAFXZ
?AUT_SetATRStatus@@YAFW4ON_OFF_TYPE@@@Z
?COM_SwitchOnTPS@@YAFW4COM_TPS_STARTUP_MODE@@@Z
?LDR_Transfer@@YAFULDR_BUFFER@@GW4LDR_MEMORY_TY@@@Z
?EDM_GetDevice@@YAFAAUEDM_DEVICE_TYPE@@@Z
?ATA_GetSWVersion@@YAFAAF00@Z
?CSV_GetSWCreationDate@@YAFPAD@Z
?CSV_GetSWVersion@@YAFAAF00@Z
?COM_GetBaudRate@@YAFAAW4COM_BAUD_RATE@@@Z
?COM_SetBaudRate@@YAFW4COM_BAUD_RATE@@@Z
?LDR_ClearSecurityKey@@YAFK@Z
?LDR_CloseTransfer@@YAFXZ
?COM_Local@@YAFXZ
?MOT_GetGearVersion@@YAFAAW4MOT_GEAR@@@Z
?LDR_GetPrgmInfo@@YAFAAFPAULDR_GEN_OBJ_TY@@PAD@Z
?COM_SwitchOffTPS@@YAFW4COM_TPS_STOP_MODE@@@Z
VB_COM_STOP
?SLDR_CloseTransfer@@YAFXZ
?CTL_ReInitSystem@@YAFW4INIT_MODE@@@Z
?LDR_LoadTextFile@@YAFPAD@Z
?CNF_GetCurrentConfig@@YAFAAF@Z
?MMI_SetLanguage@@YAFE@Z
?CNF_SetCurrentConfig@@YAFF@Z
?CNF_LoadParam@@YAFW4INIT_MODE@@PAD@Z
?COM_Init@@YAFXZ
?LDR_StartSLDR@@YAFXZ
?BMM_WriteText@@YAFGGPBDW4BMM_ATTR_TYPE@@E@Z
?SLDR_OpenTransfer@@YAFXZ
?SLDR_GetSWVersion@@YAFAAF00@Z
?LDR_OpenTransfer_CHSET_1100@@YAFULDR_OBJ_GEN_1100_TYPE@@ULDR_OBJ_CHRSET_1100_TYPE@@@Z
?LDR_OpenTransfer_TXT_1100@@YAFULDR_OBJ_GEN_1100_TYPE@@ULDR_OBJ_TEXT_1100_TYPE@@@Z
?LDR_OpenTransfer_GB_1100@@YAFULDR_OBJ_GEN_1100_TYPE@@ULDR_OBJ_BASIC_1100_TYPE@@@Z
?LDR_OpenTransfer_C_1100@@YAFULDR_OBJ_GEN_1100_TYPE@@ULDR_OBJ_C_1100_TYPE@@@Z
?LDR_OpenTransfer@@YAFULDR_GEN_OBJ_TY@@ULDR_OBJ_CHRSET_TY@@@Z
?LDR_OpenTransfer@@YAFULDR_GEN_OBJ_TY@@ULDR_OBJ_TEXT_TY@@@Z
?LDR_OpenTransfer@@YAFULDR_GEN_OBJ_TY@@ULDR_OBJ_BASIC_TY@@@Z
?LDR_OpenTransfer@@YAFULDR_GEN_OBJ_TY@@ULDR_OBJ_C_TY@@@Z
?COM_SetComFormat@@YAFW4COM_FORMAT@@@Z
?MEM_ReorganizeMemory@@YAFXZ
?LDR_Transfer_1100@@YAFULDR_BUFFER_1100@@GW4LDR_MEMORY_TY@@@Z
?LDR_GetApplSWVersionLimits@@YAFAAF00000@Z
?FIL_Write@@YAFKUFIL_BUFFER@@J@Z
?SLDR_Transfer@@YAFPAD@Z
?MEM_GetMemoryResources@@YAFAAW4FLASHMEM@@AAW4RAMMEM@@@Z
?CSV_GetDeviceConfig@@YAFAAUTPS_DEVICE@@@Z
?CSV_GetInstrumentName@@YAFPAD@Z
?CSV_GetInstrumentNo@@YAFAAJ@Z
?CSV_GetUserInstrumentName@@YAFPAD@Z
?LDR_GetSecurityKey@@YAFKPAD@Z
?LDR_GetPrgmInfo_1100@@YAFFAAULDR_OBJ_GEN_1100_TYPE@@@Z
?LDR_GetPrgmInfo@@YAFFAAULDR_GEN_OBJ_TY@@@Z
?LDR_GetApplHandle@@YAFAAFPAD@Z
?LDR_GetLoadedLangToAppl@@YAFFAAFQAUTXT_LANG_TY@@@Z
?TXT_CharSetUsed@@YAFEAAW4BOOLE@@@Z
?TXT_GetCharSet@@YAFEAAE@Z
?TXT_DeleteLang@@YAFE@Z
?BMM_DeleteCharSet@@YAFEW4BOOLE@@0@Z
?BMM_GetCharSetsStat@@YAFPAUBMM_CHARSET_STAT@@@Z
COM_ChkError
?BMM_GetChrMngTabItem@@YAFGAAEPAD@Z
?ATA_PS_SLDR_Transfer@@YAFPAD@Z
?ATA_SLDR_Transfer@@YAFPAD@Z
?EDM_SLDR_Transfer@@YAFPAD@Z
?ATA_PS_SLDR_CloseTransfer@@YAFXZ
?ATA_SLDR_CloseTransfer@@YAFXZ
?EDM_SLDR_CloseTransfer@@YAFXZ
?ATA_SLDR_Erase@@YAFXZ
?EDM_SLDR_Erase@@YAFXZ
?ATA_PS_SLDR_OpenTransfer@@YAFXZ
?ATA_SLDR_OpenTransfer@@YAFW4ATA_LOAD_FW_KIND@@@Z
?EDM_SLDR_OpenTransfer@@YAFW4EDM_LOAD_FW_KIND@@@Z
?COM_NullProc@@YAFXZ
?SLDR_Erase@@YAFXZ
?TXT_GetLangName@@YAFEPAD@Z
?LDR_CancelTransfer@@YAFXZ
?FIL_SetCurrDir@@YAFPAD@Z
?ATA_PS_GetVersionNumber@@YAFAAF00@Z
?EDM_GetSWVersion@@YAFAAF00@Z
?CNF_SaveParam@@YAFPAD@Z
mfc42
ord4151
ord4299
ord1665
ord6143
ord6453
ord6283
ord2086
ord4529
ord3698
ord2107
ord1576
ord2044
ord6394
ord5834
ord5450
ord2448
ord2841
ord326
ord290
ord614
ord1158
ord1147
ord1148
ord5607
ord4277
ord923
ord5856
ord533
ord798
ord2863
ord3573
ord2997
ord2011
ord6067
ord6069
ord813
ord560
ord4432
ord5260
ord1726
ord3748
ord5240
ord4108
ord3663
ord800
ord537
ord860
ord858
ord535
ord922
ord924
ord825
ord3702
ord501
ord773
ord5600
ord1199
ord4204
ord998
ord1083
ord823
ord4160
ord2776
ord1871
ord2614
ord540
ord1979
ord5186
ord665
ord4202
ord5710
ord354
ord5651
ord3127
ord3616
ord350
ord3126
ord3613
ord940
ord5265
ord4376
ord4998
ord2514
ord6052
ord4078
ord1775
ord4407
ord5241
ord2385
ord5163
ord6374
ord4353
ord3798
ord4837
ord4441
ord2648
ord2055
ord6376
ord3749
ord5065
ord1727
ord5261
ord2446
ord2124
ord5277
ord2982
ord3147
ord3259
ord4465
ord3136
ord3262
ord2985
ord3081
ord2976
ord3830
ord3831
ord3825
ord3079
ord4080
ord4627
ord4425
ord3597
ord656
ord641
ord324
ord2302
ord4234
ord6199
ord2414
ord2096
ord384
ord4710
ord4287
ord5280
ord3317
ord4853
ord3874
ord3571
ord3626
ord1641
ord1146
ord6055
ord1776
ord5290
ord3402
ord4424
ord3610
ord567
ord538
ord536
ord2846
ord2915
ord4129
ord2764
ord926
ord939
ord810
ord4271
ord4224
ord2818
ord3303
ord4125
ord3290
ord3297
ord1941
ord2864
ord3398
ord3733
ord2862
ord6008
ord616
ord6215
ord3092
ord2411
ord2023
ord4218
ord2578
ord4398
ord3582
ord2645
ord3495
ord5067
ord4635
ord4607
ord4716
ord4750
ord4608
ord5016
ord4375
ord4852
ord2515
ord4834
ord3615
ord355
ord4229
ord5683
ord5981
ord5953
ord1768
ord755
ord5802
ord470
ord941
ord2365
ord2642
ord6334
ord692
ord2340
ord3803
ord1771
ord6366
ord2413
ord2024
ord4219
ord2581
ord4401
ord3639
ord2652
ord1669
ord1168
ord1200
ord2108
ord2884
ord2379
ord807
ord366
ord765
ord795
ord3721
ord2358
ord2299
ord1175
ord4275
ord715
ord5597
ord415
ord1081
ord6222
ord2763
ord859
ord5641
ord2117
ord6282
ord801
ord541
ord3584
ord803
ord543
ord5053
ord6307
ord4167
ord1105
ord521
ord5861
ord2370
ord1907
ord5161
ord4905
ord4742
ord4948
ord4358
ord4377
ord4854
ord5287
ord4835
ord768
ord489
ord4258
ord5850
ord4976
ord609
ord2301
ord6142
ord5860
ord2575
ord4396
ord3574
ord5162
ord1908
ord4715
ord1690
ord2528
ord5288
ord4439
ord2054
ord4431
ord772
ord771
ord500
ord496
ord497
ord4259
ord1008
ord3742
ord818
ord640
ord5875
ord323
ord3619
ord1640
ord5785
ord4448
ord4671
ord4676
ord1842
ord4242
ord2723
ord2390
ord3059
ord5100
ord4467
ord4303
ord3350
ord5012
ord975
ord5472
ord3403
ord2879
ord2878
ord4961
ord4077
ord5237
ord5282
ord2649
ord4964
ord4436
ord4427
ord796
ord674
ord554
ord529
ord4543
ord4526
ord5103
ord5252
ord2494
ord2627
ord2626
ord5871
ord6000
ord5301
ord2120
ord4457
ord296
ord4413
ord4163
ord5160
ord3699
ord2637
ord5849
ord2882
ord4524
ord5442
ord6197
ord2109
ord3921
ord6402
ord6403
ord1232
ord1153
ord1140
ord5773
ord4612
ord4610
ord4274
ord6375
ord4486
ord2554
ord2512
ord5731
ord3922
ord1089
ord5199
ord2396
ord3346
ord5300
ord5302
ord2725
ord4079
ord4698
ord5307
ord5289
ord5714
ord4622
ord3738
ord815
ord561
ord2558
ord617
ord4858
ord5214
ord2399
ord986
ord520
ord6117
ord4159
ord2621
ord1134
ord1825
ord4238
ord4696
ord3058
ord3065
ord6336
ord2510
ord2542
ord5243
ord5740
ord1746
ord5577
ord3172
ord5653
ord4420
ord4953
ord1945
ord4273
ord4387
ord3454
ord3198
ord6080
ord6175
ord4623
ord4426
ord652
ord338
ord4823
ord4892
ord5076
ord4589
ord4588
ord4899
ord4370
ord4531
ord4341
ord4349
ord4890
ord4545
msvcrt
fseek
sscanf
strlen
abs
fclose
fopen
fscanf
rewind
_filelength
setlocale
atoi
_purecall
atof
_mbschr
strncmp
strncpy
rename
fgets
?set_new_handler@@YAP6AXXZP6AXXZ@Z
memcpy
__dllonexit
_onexit
_exit
_XcptFilter
__p__acmdln
__getmainargs
_initterm
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
_except_handler3
_controlfp
_setmbcp
exit
__CxxFrameHandler
_mbscmp
_mbsicmp
sprintf
strcmp
_mbstok
strcpy
_chdir
_chdrive
_splitpath
strcat
_itoa
_ftol
memset
_getcwd
kernel32
ReadFile
GetStartupInfoA
GetModuleHandleA
GetTempPathA
CopyFileA
SetFilePointer
DeleteFileA
GetFileSize
PurgeComm
GetCommState
SetCommState
SetCommTimeouts
WriteFile
LocalFree
SetEvent
CreateEventA
OpenMutexA
CreateMutexA
GetCurrentThreadId
ReleaseMutex
GetVersion
GetModuleFileNameA
GetWindowsDirectoryA
MulDiv
Sleep
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetPrivateProfileIntA
GetPrivateProfileStringA
GetLogicalDrives
SetErrorMode
GetVolumeInformationA
WritePrivateProfileStringA
CreateFileA
CloseHandle
GetTickCount
FindFirstFileA
FindNextFileA
FindClose
SetCurrentDirectoryA
GetCurrentDirectoryA
GetLastError
FormatMessageA
user32
ScreenToClient
SetActiveWindow
GetMenu
CheckMenuItem
FillRect
GetSysColor
FindWindowExA
ShowWindow
BringWindowToTop
SetForegroundWindow
LoadIconA
LoadCursorA
CopyRect
UpdateWindow
PeekMessageA
TranslateMessage
DispatchMessageA
IsZoomed
IsIconic
SystemParametersInfoA
ReleaseDC
LoadBitmapA
InvalidateRect
RedrawWindow
GetFocus
GetKeyState
IsWindow
GetClientRect
GetWindowRect
GetParent
PostMessageA
MessageBoxA
SendMessageA
EnableWindow
gdi32
GetTextCharset
CreateSolidBrush
GetTextMetricsA
GetTextExtentPointA
BitBlt
GetDeviceCaps
CreateCompatibleDC
GetObjectA
CreateFontA
advapi32
RegEnumValueA
RegOpenKeyExA
RegCloseKey
comctl32
ord8
ImageList_AddMasked
mfcx002
?OnInitDialog@CDialogEx@@MAEHXZ
?messageMap@CDialogEx@@1UAFX_MSGMAP@@B
??0CDialogEx@@QAE@IPAVCWnd@@@Z
??1CDialogEx@@UAE@XZ
?GetRuntimeClass@CDialogEx@@UBEPAUCRuntimeClass@@XZ
?OnEnableOk@CDialogEx@@UAEHXZ
?OnComboSelChange@CDialogEx@@UAEXI@Z
?OnComboEditChange@CDialogEx@@UAEXI@Z
?OnButtonDraw@CDialogEx@@UAEXIPAUtagDRAWITEMSTRUCT@@@Z
?LoadCustomProperties@CDialogEx@@UAEXPAVCWinApp@@PBD@Z
?StoreCustomProperties@CDialogEx@@UAEXPAVCWinApp@@PBD@Z
?OnInvalidNumber@CDialogEx@@MAEXIPAUHWND__@@@Z
?OnValidNumber@CDialogEx@@MAEXIPAUHWND__@@@Z
?OnEmptyField@CDialogEx@@MAEXIPAUHWND__@@@Z
?OnNoneEmptyField@CDialogEx@@MAEXIPAUHWND__@@@Z
?OnUpdateView@CUavClient@@MAEHPAVCWnd@@PAVCUavHint@@@Z
?OnUpdateView@CUavClient@@MAEHPAVCWnd@@KPAX@Z
?OnUpdateViewNotify@CUavClient@@MAEXG@Z
?OnAddFriends@CUavClient@@MAEXPAX@Z
??0CDialogEx@@QAE@XZ
?OnCreate@CDialogEx@@IAEHPAUtagCREATESTRUCTA@@@Z
?OnEmptyField@CPropertyPageEx@@MAEXIPAUHWND__@@@Z
?OnValidNumber@CPropertyPageEx@@MAEXIPAUHWND__@@@Z
?OnInvalidNumber@CPropertyPageEx@@MAEXIPAUHWND__@@@Z
?OnEnableOk@CPropertyPageEx@@MAEHXZ
?OnButtonDraw@CPropertyPageEx@@UAEXIPAUtagDRAWITEMSTRUCT@@@Z
?OnComboEditChange@CPropertyPageEx@@UAEXI@Z
?OnComboSelChange@CPropertyPageEx@@UAEXI@Z
?OnKillActive@CPropertyPageEx@@MAEHXZ
?OnSetActive@CPropertyPageEx@@MAEHXZ
?OnApply@CPropertyPageEx@@MAEHXZ
?OnApplyButton@CPropertySheetEx@@MAEXXZ
?OnEnableOk@CPropertySheetEx@@MAEHXZ
?OnInitDialog@CPropertySheetEx@@MAEHXZ
?GetMessageMap@CPropertySheetEx@@MBEPBUAFX_MSGMAP@@XZ
?GetRuntimeClass@CPropertySheetEx@@UBEPAUCRuntimeClass@@XZ
??0CPropertySheetEx@@QAE@IPAVCWnd@@I@Z
??1CPropertySheetEx@@UAE@XZ
??1CAboutDialog@@UAE@XZ
?DoModal@CAboutDialog@@UAEHXZ
??0CAboutDialog@@QAE@PAUHINSTANCE__@@@Z
??1CBrowseDialog@@UAE@XZ
?GetPath@CBrowseDialog@@QAEPBDXZ
?DoModal@CBrowseDialog@@UAEHXZ
??0CBrowseDialog@@QAE@PBD0K0PAVCWnd@@@Z
?RemoveApplyButton@CPropertySheetEx@@QAEXH@Z
?OnUpdateOnlyOneInstanceOfClass@CUavClient@@MAEHXZ
msvcirt
??6ostream@@QAEAAV0@P6AAAV0@AAV0@@Z@Z
?cerr@@3Vostream_withassign@@A
?endl@@YAAAVostream@@AAV1@@Z
??6ostream@@QAEAAV0@PBD@Z
afs32v10
?GetMessageMap@CComSettingsPage@@MBEPBUAFX_MSGMAP@@XZ
?DoDataExchange@CComSettingsPage@@MAEXPAVCDataExchange@@@Z
?OnInitDialog@CComSettingsPage@@MAEHXZ
?GetRuntimeClass@CComSettingsPage@@UBEPAUCRuntimeClass@@XZ
??0CComSettingsPage@@QAE@XZ
??1CComSettingsPage@@UAE@XZ
?GetSettings@CAfIni@@SAHABVCString@@AAUSETTINGS@@@Z
?SetMode@CComSettingsPage@@QAEXH@Z
??1SETTINGS@@QAE@XZ
??0SETTINGS@@QAE@XZ
?OnInitDialog@CMySheet@@UAEHXZ
?DoModal@CMySheet@@UAEHXZ
?GetMessageMap@CMySheet@@MBEPBUAFX_MSGMAP@@XZ
?GetRuntimeClass@CMySheet@@UBEPAUCRuntimeClass@@XZ
??0CMySheet@@QAE@PBD@Z
??1CMySheet@@UAE@XZ
?OnOK@CComSettingsPage@@MAEXXZ
?GetSelectedPortInstrument@CAfIni@@SAHAAIAAVCString@@@Z
Sections
.text Size: 351KB - Virtual size: 350KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 15KB - Virtual size: 15KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 269KB - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ