F:\2022\0830\FirmwareUpdate\bin\FirmwareUpdate.pdb
Static task
static1
Behavioral task
behavioral1
Sample
80316010c70f9028dbc6078fdf2c1c78661655618826d4d2071b11b6e0114262.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
80316010c70f9028dbc6078fdf2c1c78661655618826d4d2071b11b6e0114262.exe
Resource
win10v2004-20240226-en
General
-
Target
80316010c70f9028dbc6078fdf2c1c78661655618826d4d2071b11b6e0114262
-
Size
210KB
-
MD5
c61b411f2f0dc8ef79ac1c63946bbb0a
-
SHA1
06d0507ed3e4dafa672bf24f8a4705473c296036
-
SHA256
80316010c70f9028dbc6078fdf2c1c78661655618826d4d2071b11b6e0114262
-
SHA512
415bc558cc95cb8f6753417216a5c91978a739c38de7ffd43f2e499907bf13913ec3471b3a1f60f354a6566a2dd2c81027a1dedf7fb219e279183173f70e611b
-
SSDEEP
6144:1OSAp9UOYurUtHirqDCsv/HaHZq2rgwLc9r:1I5MirqDCsv/6HdrZLc9r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 80316010c70f9028dbc6078fdf2c1c78661655618826d4d2071b11b6e0114262
Files
-
80316010c70f9028dbc6078fdf2c1c78661655618826d4d2071b11b6e0114262.exe windows:5 windows x86 arch:x86
821d7120020d74dd4b3af9fc689f0e67
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
msvcr100
__CxxFrameHandler3
_CxxThrowException
memset
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_controlfp_s
_invoke_watson
_except_handler4_common
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
__set_app_type
_fmode
_commode
__setusermatherr
_configthreadlocale
_initterm_e
_initterm
_wcmdln
exit
_XcptFilter
_exit
_cexit
__wgetmainargs
_amsg_exit
memmove
_wtof
wcstombs
printf
wcstol
swprintf_s
wcsrchr
memcpy_s
??_V@YAXPAX@Z
??_U@YAPAXI@Z
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??1exception@std@@UAE@XZ
?what@exception@std@@UBEPBDXZ
??2@YAPAXI@Z
??3@YAXPAX@Z
wcsstr
malloc
calloc
free
memcpy
mfc100u
ord7624
ord7548
ord11784
ord13854
ord4744
ord2164
ord11476
ord11477
ord13381
ord7108
ord13387
ord8530
ord3684
ord3625
ord11864
ord7126
ord1739
ord14162
ord10976
ord13267
ord11469
ord7179
ord13570
ord13567
ord13571
ord13568
ord3416
ord5261
ord11228
ord11236
ord4086
ord7391
ord9498
ord11240
ord11209
ord11845
ord4642
ord4923
ord5115
ord8483
ord4901
ord5118
ord4645
ord4794
ord4623
ord6931
ord6932
ord6922
ord4792
ord7393
ord9328
ord8346
ord6140
ord1934
ord12753
ord6539
ord12325
ord849
ord1895
ord7176
ord1292
ord890
ord6869
ord9447
ord4151
ord11801
ord7876
ord13220
ord13214
ord11838
ord7524
ord2528
ord13398
ord979
ord420
ord11298
ord11299
ord12022
ord10984
ord2532
ord5056
ord1010
ord462
ord2015
ord290
ord1479
ord1476
ord2614
ord7914
ord286
ord285
ord5264
ord2629
ord4290
ord1313
ord1312
ord1310
ord296
ord13572
ord12616
ord902
ord2089
ord280
ord13569
kernel32
TerminateProcess
GetSystemTimeAsFileTime
lstrlenA
GetCurrentProcessId
GetCurrentThreadId
QueryPerformanceCounter
SetUnhandledExceptionFilter
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
InterlockedCompareExchange
InterlockedExchange
GetPrivateProfileStringW
CreateMutexW
GetCurrentProcess
CopyFileW
FreeLibrary
SetFilePointer
GetProcAddress
LoadLibraryW
InterlockedDecrement
Sleep
ExitProcess
LocalAlloc
LocalFree
GetLastError
GetModuleFileNameW
GetPrivateProfileStringA
GetUserDefaultLCID
GetTickCount
LocalFileTimeToFileTime
IsDebuggerPresent
CloseHandle
GetCurrentDirectoryW
MultiByteToWideChar
CreateFileW
ReadFile
GetFileAttributesW
WideCharToMultiByte
WriteFile
SetFileTime
CreateDirectoryW
SystemTimeToFileTime
UnhandledExceptionFilter
user32
KillTimer
SetTimer
GetWindowLongW
SetWindowLongW
wsprintfW
advapi32
RegQueryValueExW
RegSetValueExW
RegCreateKeyW
RegCloseKey
RegOpenKeyW
OpenProcessToken
LookupPrivilegeValueW
AdjustTokenPrivileges
RegOpenKeyExW
comctl32
InitCommonControlsEx
oleaut32
VariantClear
SysAllocString
SysStringLen
SysAllocStringByteLen
SysFreeString
msvcp100
?_Xlength_error@std@@YAXPBD@Z
?_Xout_of_range@std@@YAXPBD@Z
duilib
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PB_W@Z
?SetMaxValue@CProgressUI@DuiLib@@QAEXH@Z
?SetValue@CProgressUI@DuiLib@@QAEXH@Z
?SetShowText@CProgressUI@DuiLib@@QAEX_N@Z
?SetIcon@CWindowWnd@DuiLib@@QAEXI@Z
?GetPaintWindow@CPaintManagerUI@DuiLib@@QBEPAUHWND__@@XZ
?SetForeImage@CControlUI@DuiLib@@QAEXPB_W@Z
??8CDuiString@DuiLib@@QBE_NPB_W@Z
?SendMessageW@CWindowWnd@DuiLib@@QAEJIIJ@Z
?HandleMessage@WindowImplBase@DuiLib@@UAEJIIJ@Z
??0CDuiString@DuiLib@@QAE@PB_WH@Z
??1CDuiString@DuiLib@@QAE@XZ
?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
?SetResourcePath@CPaintManagerUI@DuiLib@@SAXPB_W@Z
??BCDuiString@DuiLib@@QBEPB_WXZ
??HCDuiString@DuiLib@@QBE?AV01@PB_W@Z
?GetInstancePath@CPaintManagerUI@DuiLib@@SA?AVCDuiString@2@XZ
?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PB_WKKHHHHPAUHMENU__@@@Z
?ShowWindow@CWindowWnd@DuiLib@@QAEX_N0@Z
?CenterWindow@CWindowWnd@DuiLib@@QAEXXZ
?MessageLoop@CPaintManagerUI@DuiLib@@SAXXZ
??1WindowImplBase@DuiLib@@UAE@XZ
?GetSuperClassName@CWindowWnd@DuiLib@@MBEPB_WXZ
?GetClassStyle@WindowImplBase@DuiLib@@UBEIXZ
?OnFinalMessage@WindowImplBase@DuiLib@@UAEXPAUHWND__@@@Z
?InitResource@WindowImplBase@DuiLib@@UAEXXZ
?OnClick@WindowImplBase@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?IsInStaticControl@WindowImplBase@DuiLib@@MAEHPAVCControlUI@2@@Z
?GetSkinType@WindowImplBase@DuiLib@@MAE?AVCDuiString@2@XZ
?GetManagerName@WindowImplBase@DuiLib@@MAEPB_WXZ
?ResponseDefaultKeyEvent@WindowImplBase@DuiLib@@MAEJI@Z
?OnClose@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnDestroy@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcActivate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcCalcSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcPaint@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcHitTest@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnGetMinMaxInfo@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseWheel@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseHover@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnChar@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSysCommand@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?QueryControlText@WindowImplBase@DuiLib@@UAEPB_WPB_W0@Z
?CreateControl@WindowImplBase@DuiLib@@UAEPAVCControlUI@2@PB_W@Z
?MessageHandler@WindowImplBase@DuiLib@@UAEJIIJAA_N@Z
?GetMessageMap@WindowImplBase@DuiLib@@MBEPBUDUI_MSGMAP@2@XZ
?GetStyle@WindowImplBase@DuiLib@@UAEJXZ
?HandleCustomMessage@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseMove@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonUp@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSetFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKillFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKeyDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnCreate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
??0WindowImplBase@DuiLib@@QAE@XZ
setupapi
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInstanceIdW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
SetupDiGetDeviceRegistryPropertyW
Sections
.text Size: 43KB - Virtual size: 43KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 24KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 34KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
szfhlcw Size: 80KB - Virtual size: 80KB
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE