Static task
static1
Behavioral task
behavioral1
Sample
0bf01c6fae71d3c1b0b15adc8999aa30N.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
0bf01c6fae71d3c1b0b15adc8999aa30N.exe
Resource
win10v2004-20240704-en
General
-
Target
0bf01c6fae71d3c1b0b15adc8999aa30N.exe
-
Size
382KB
-
MD5
0bf01c6fae71d3c1b0b15adc8999aa30
-
SHA1
85a441b66ca935b109a6b961cbdc7a1858c23723
-
SHA256
cdf5595510e6a5445a88241863a1437eafe08aab721736f179dcb8187998534e
-
SHA512
b79404990887e808742c9178c09bab1e34919c1bb6a599628e62d1ba86dc5bac5e877134832e97863a93ed25c7d8952c327270072798d378b415fedf79701a0c
-
SSDEEP
6144:4avHbWxfT5dIHFlOIbyzCtqje+2GVk02WGN/LE9184mkJIvZYDX7btCsLbQekRbz:4avHbWlT5iLyP32GVk02WmjEGZitD/fC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0bf01c6fae71d3c1b0b15adc8999aa30N.exe
Files
-
0bf01c6fae71d3c1b0b15adc8999aa30N.exe.exe windows:1 windows x86 arch:x86
9c2d5bee173db3629e4ca720589fab0d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
user32
wsprintfA
kernel32
WaitForSingleObject
GetCurrentProcessId
EnterCriticalSection
GetLastError
ExitProcess
GetStartupInfoA
TlsGetValue
CreateFileMappingA
LoadLibraryA
DeleteCriticalSection
GetCommandLineA
LocalFree
InterlockedDecrement
GetProcAddress
GetACP
lstrlenA
CloseHandle
FreeLibrary
CreateMutexA
OpenEventA
InitializeCriticalSection
GetModuleHandleA
UnmapViewOfFile
Sleep
OpenMutexA
CreateEventA
LocalAlloc
GetCPInfo
LeaveCriticalSection
GetModuleFileNameA
ReleaseMutex
InterlockedIncrement
WaitForMultipleObjects
MapViewOfFile
cvirte
read
open
ldiv_8STRCTEAXEDX_
_UP_time
_UP_putchar
_UP_PostDeferredCallToThread
_UP_NewCtrlMenuItem
_UP_CmtPreAllocThreadPoolThreads
_UP_ClientDDEExecute
_UP_CVI_WriteFile
_UP_AreTreeItemsRelated
ProcessDrawEvents
GetValidatedPrintAttribute
GetStdioWindowPosition
GetFileInfo
Delay
AreTreeItemsRelated
mbstowcs
_UP_GetTreeItemNumDescendents
_UP_GetStdioWindowVisibility
_UP_ExecutableHasTerminated
_UP_ConfirmPopup
SortTableCells
RectSameSize
QuitUserInterface
MapPhysicalMemory
GetGlobalMouseState
ComBreak
CmtGetMainThreadID
setvbuf
__SetUPErrorFile
__CVI_Debug_DiscardSharedMemory
_UP__assert
_UP_SetDrive
_UP_PlotXY
_UP_GetMonitorFromPanel
_UP_GetActiveTableCell
_GetFloatEps
SetTableCellRangeAttribute
GetTabPageAttribute
GetPanelDisplayBitmap
CmtNewTSV
strtod_FLTREG_
__CleanupUPAfterWatchpointException
_UP_isalnum
_UP_fclose
_UP_WriteLine
_UP_SetBitmapData
_UP_GetIndexFromPoint
_UP_DSUnbind
_UP_CmtSetThreadPoolAttribute
SetCtrlMenuAttribute
SavePanelState
RetireExecutableHandle
RectEqual
GetCtrlBitmap
DSGetBoundPlotID
CanvasClear
AddGraphAnnotation
fread
atol
_UP_ComToFile
SetActiveTabPage
PostDeferredCallToThread
OpenCom
GetTableCellRingValueFromIndex
GetFmtIOErrorString
CVIDynamicMemoryInfo
vprintf
tanh_FLTREG_
PlotXY
DiscardSubMenu
CopyBytes
CanvasUpdate
abort
__AddItemToPseudoListBox
_UP_memcpy
_UP_CmtReleaseTSQWritePtr
_UPLibChkVaArg
LaunchExecutableEx
GetNumTableColumns
FlushInQ
DeleteTableColumns
strchr
_mbsnbcpy
_UP_SetXMode
_UP_GetRelativeMouseState
_GetDoubleEps
SetFileDate
_UP_strcoll
_UP_ispunct
_UP_StringLowerCase
_UP_LaunchExecutable
_UP_GetValueLengthFromIndex
_UP_GetOutQLen
_UP_DisconnectFromTCPServer
_UPLibReportError
SetIdleEventRate
ReplaceTextBoxLine
GetScaledCtrlDisplayBitmap
difftime_FLTREG_
_mbscpy
_UP_ftell
_UP_SetImageBits
_UP_LoadMenuBar
_UP_GetDir
_UP_CloseWinsock
SetMenuBarAttribute
PlotDigitalLinesMultiBus
InsertTextBoxLine
InsertTableCellRangeRingItem
InsertAxisItem
getchar
_UP_DuplicateBitmap
_PassParamInfo
GetTreeItemFromLabel
GetActiveGraphCursor
DeleteListItem
DOSColorToRGB
ComWrt
_UP_log_FLTREG_
_UP_SaveBitmapToBMPFile
_UP_GetGlobalMouseState
_UP_GetCtrlIndex
_UPLibBreakpoint
_DBLLNG87
RectUnion
PlotPackedDigitalLinesMultiBus
NewMenu
LoadPanel
DiscardCtrlMenuItem
CVI__mbscmp
strncat
perror
localeconv
islower
fgetc
_UP_strncpy
_UP_SetSystemDate
_UP_ReplaceTextBoxLine
_UP_MakeDir
_UP_GetTableSelection
_UP_GetFileInfo
_UP_CVI_OpenFile
TCPFreeMemory
SetSystemPopupsAttribute
FreeTableValStrings
CanvasGetClipRect
__GetHeapState
_UP_strtol
_UP_setvbuf
_UP_atol
_UP_ServerDDEWrite
_UP_ComFromFile
SetTreeColumnAttribute
SetAxisScalingMode
ServerTCPWrite
GetModuleDir
CmtDiscardTSQ
_UP_fopen
_UP_RegisterWinMsgCallback
_PtrChkArith
RectBottom
MultiFileSelectPopup_WithAlloc
GetSystemComHandle
GetSharedMenuBarEventPanel
GetInterruptState
GetCtrlVal
CmtUninstallThreadPoolCallback
CmtReleaseLock
CmtGetTSVPtr
ClipboardGetTableVals
ClearFilePopupDirHistory
CVI_WriteFile
realloc
_UP_DSBindCtrl
GetAxisTimeFormat
DeleteAxisItem
ClipboardPutText
CVI__mbsspn
CVI_OpenFile
bsearch
__RegisterContextInfo
_UP_tmpfile
_UP_ProcessTCPEvents
_UP_FlushInQ
_UP_CmtNewTSQ
_ResetCalledFunPtr
_PtrIgnoreStruct
ValidatePanel
RunUserInterface
GetObjHandleFromActiveXCtrl
GetDDEErrorString
GetBitmapInfoEx
EnterAsyncCallback
DuplicatePanelTree
ConnectToDDEServer
ClientDDERead
CVI_inpw
time
strtok
signal
mbtowc
free
_UP_PlotPackedDigitalLines
_UP_GetAnnotationIndexFromCaption
_UP_ClipboardGetBitmap
InstallMainCallback
GetExternalModuleAddr
DirSelectPopup
_UP_UnloadExternalModule
_UP_InsertTableCellRingItem
_UP_GetHostTCPSocketHandle
_UP_GetComStat
_PtrStructMemInfoPtr
XYGraphPopup
FileSelectPopup
CmtSetTSV
CmtInstallTSQCallback
CVI__mbsnbcat
CVI_CopyFile
abs
_UP_wctomb
_UP_puts
_UP_NewActiveXCtrlFromFile
_InitPtrInfo
StringLowerCase
SetWindowsErrorMode
SetPrintAttributeEx
RemovePanelFromSplitter
InstallPanelCallback
GetMenuBarAttribute
ComFromFile
AllocBitmapDataEx_WithAlloc
vscanf
_UP_RectUnion
_UP_ReadLine
_UP_CmtGetTSVPtr
SetPanelPos
RegisterTCPServerEx
PlotStripChart
GetTextBoxLineOffset
EnableEventQueuingForPanel
strcmp
_UP_feof
_UP__putenv
_UP_TerminateExecutable
_UP_CVI_DeleteFile
OpenComConfig
MakeDir
GetTreeCellAttribute
GetFilePopupDirHistory_WithAlloc
GetActiveXCtrlFromObjHandle
CmtNewThreadLocalVar
CanvasScroll
_UP_isalpha
_UP_PlotBitmap
_GetFloatMax
PlotY
NewBitmap
GetTableColumnAttribute
_UP_PlotY
_UP_GetBitmapInfo
_UP_CanvasDrawText
UnMapPhysicalMemory
RectGrow
GetTCPHostName
DisplayPCXFile
CanvasDrawRoundedRect
CanvasDrawLineTo
_mbsnbicmp
_mbscspn
_UP_memmove
_UP_SetFileAttrs
_UP_InstallCtrlCallback
_UP_AddGraphAnnotation
_UPLibGetNumBytes
WriteToPhysicalMemoryEx
RectSet
GetTreeItemTag
GetTableSelection
GetImageBits
FlushOutQ
getenv
fgetpos
div_8STRCTEAXEDX_
__DBG_DllMainLeave
_UP_RectMove
_UP_GetStdioWindowOptions
_UP_GetNumTableCellRingItems
KeyHit
GetPrintAttribute
GetNumListItems
GetMouseCursor
CopyString
CanvasDefaultPen
pow_FLTREG_
_assert
__SimulateRTShuttingDown
__GetAppDirPathString
_UP_log10_FLTREG_
_UP_fwrite
_UP_XModemReceive
_UP_DateStr
SortTreeItems
strncmp
isprint
_UP_strcpy
_UP_isspace
_UP_WriteToPhysicalMemory
_UP_GetTableCellRangeRect
_UP_GetTCPPeerAddr
_UP_CmtDiscardThreadPool
_UP_CanvasGetPixel
ProcessSystemEvents
GetTableCellRangeRect
GetCtrlBoundingRect
GetComConnectionState
DisableTaskSwitching
ComWrtByte
_UP_GetTreeItemFromTag
_UP_ComWrt
_UP_CmtGetLock
_UP_CVI__putenv
_UPLibChkVaArgEx
_GetDoubleInf
_DBLTO87
SetStdioWindowSize
ScaleTextPlots
ReadFromPhysicalMemory
CmtFlushTSQ
CheckForDuplicateAppInstance
tmpfile
freopen
_UP_bsearch
_UP_SortTableCells
_UP_GetNumCheckedItems
_UP_GetDrive
UnregisterDDEServer
SetTableRowAttribute
SetFilePtr
NewMenuBar
MenuIsOpen
HideBuiltInCtrlMenuItem
DisconnectFromDDEServer
CmtGetNumProcessors
remove
localtime
acos_FLTREG_
_UP_NewMenu
_UP_GetTextDisplaySize
_UP_GetAxisTimeFormat
_UP_ConnectToTCPServerEx
GetTreeItemNumDescendents
DSUnbind
CVI__mbscpy
ArrayToFile
strtol
sin_FLTREG_
memchr
calloc
_UP_strtol64
_UP_strpbrk
_UP_fputc
_UP_SetBitmapDataEx
_UP_PlotStripChart
_UP_GetTableCellValLength
_UP_CmtScheduleThreadPoolFunctionAdv
_UP_ClientDDERead
SetCtrlVal
SetActiveTableCell
RefreshGraph
LoadPanelEx
GetGraphCoordsFromPoint
_UP_signal
_UP_GetPanelDisplayBitmap
_UP_GetNumTreeColumns
_UP_Get3dBorderColors
_PtrAssignPtr
GetTabPageFromPoint
GetStdioWindowSize
GetCVIVersion
AddPanelToSplitter
_UP_MakePathname
_UPLibReturnArg
SetBreakOnLibraryErrors
GetFontTypefaceName
DOSCompatWindow
vsprintf
__CVI_Debug_RegisterThread
_UP_ArrayToFile
_PtrChkAssign
SetImageBits
InsertListItem
GetValueFromIndex
GetPanelHandleFromTabPage
CVI_outp
CVI__mbsstr
strcoll
__GetKludgeState
_UP_tmpnam
_UP_qsort
_UP_LoadMenuBarEx
_UP_GetMonitorFromPoint
_UP_GetLabelLengthFromIndex
_UP_GetActiveTreeItem
_UP_CmtDiscardLock
_UPLibBreakpointWithElab
TerminateDDELink
ReturnRS232Err
RectCenter
LoadExternalModule
GetNumTableRows
GetMonitorAttribute
GetLabelFromIndex
GetCtrlValString
DeleteTableRows
DeleteTabPage
CVILowLevelSupportDriverLoaded
eof
_UP_UnregisterTCPServerEx
_UP_SetStdioWindowOptions
_UP_CmtWaitForThreadPoolFunctionCompletion
SetTableCellRangeVals
SetMouseCursor
GetAxisItem
CmtGetThreadLocalVar
CmtDiscardTSV
printf
__GetVaArgInfoPtr
_VaArgPassArgInfo
_UP_ferror
_UP_StringUpperCase
_UP_InstallPanelCallback
_UP_GetFirstFile
ReportUPError
InsertTreeColumn
CmtSetThreadPoolAttribute
CmtScheduleThreadPoolFunction
__AdjustPtrInfoDataForAllModules
_UP_LaunchExecutableEx
_UP_GetCurrentDateTime
_UP_FlushOutQ
_UP_FileSelectPopup
Set387CW
PointEqual
MakePathname
CmtReleaseTSQReadPtr
CVI__getmbcp
CVI_ReadFile
gets
_UP_PrintCtrl
_UP_GetSystemComHandle
_UP_DuplicateCtrl
_UP_ComRd
_UP_CVI_ReadFile
_LocalsRuntimeCheck
WaveformGraphPopup
SetComTime
PrintCtrl
CVI__mbsnbcmp
fgets
_mbsdec
_UP_acos_FLTREG_
_UP_SetTCPDisconnectMode
_UP_DSBindPlot
_UP_CmtTerminateThreadPoolThread
_UP_CmtNewTSV
_UP_CmtInstallTSQCallback
_PtrInvalidStruct
DeleteDir
ClientDDEWrite
CanvasGetPenPosition
CVI_DeleteFile
_getmbcp
__CVI_Debug_Disconnect
_UP_iscntrl
_UP_GetTreeItemParent
_UP_CmtReleaseTSVPtr
YGraphPopup
KeyPressEventIsLeadByte
GetTreeItemFromTag
GetKey
GetActivePanel
GenericMessagePopup
DiscardMenu
ComRd
CloseCVIRTDll
strncpy
sinh_FLTREG_
ispunct
asctime
_mbspbrk
_UP_ServerTCPRead
_UP_GetCtrlBitmap
_ReturnPtrInfo
_GetFloatMin
SetPanelSize
SetAxisTimeFormat
SaveBitmapToBMPFile
wipmama
wpm_GetSlotForUnit
wpm_GetUnitInfo
wpm_UnitFinish
wpm_GetErrorCode
wpm_UnitChangeId
wpm_UnitCheckin
wpm_GetErrorText
i18n_cvi
i18n
i18n_init
i18n_setLanguage
conv_control
conv_SetSignalVal
conv_GetSignalVal
conv_Init
Sections
.text Size: 170KB - Virtual size: 169KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.bss Size: - Virtual size: 937B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 125KB - Virtual size: 125KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.ptrdata Size: 18KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
nicvidbg Size: 512B - Virtual size: 281B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ