Static task
static1
Behavioral task
behavioral1
Sample
hd.sentinel.pro.4.x-5.x-patch.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
hd.sentinel.pro.4.x-5.x-patch.exe
Resource
win10v2004-20240802-en
General
-
Target
hd.sentinel.pro.4.x-5.x-patch.exe
-
Size
85KB
-
MD5
57824abbb9afe394c8a17a410e60c6fd
-
SHA1
cdb3fe63c22e7d93d4a47bdb966b09f1b478f19f
-
SHA256
becb4e1eaa4fbd915241f1138e2ed7b9833dc1cf66d6da25f9fac1a3e317c3ee
-
SHA512
8b4e82437d6a30e73b65d0abc41b68d8420454622efd43d8d874ecee7a9251f36555d4c35dd13f886250948df1b9606ee61d0bcb2c8abb748b316dadff539c3d
-
SSDEEP
1536:0mckPxiT0Vvh5yPBHqO/S8XA8UgEAK3ptUVJWf3GzR8IaUF+vBIuUMltn:DckPxiT0VvbuqT8Q8UNJZtUnW/yyIaPj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource hd.sentinel.pro.4.x-5.x-patch.exe
Files
-
hd.sentinel.pro.4.x-5.x-patch.exe.exe windows:4 windows x86 arch:x86
7d4a07305a2527d5e078d8bb3de8a74d
Headers
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
imagehlp
ImageRemoveCertificate
comdlg32
GetOpenFileNameA
comctl32
InitCommonControls
ole32
CoTaskMemAlloc
CreateStreamOnHGlobal
gdiplus
GdipCreateBitmapFromStream
GdipCreateHBITMAPFromBitmap
GdipDeleteGraphics
GdipDisposeImage
GdipGetImageHeight
GdipGetImageWidth
GdiplusShutdown
GdiplusStartup
gdi32
CreateCompatibleBitmap
CreateCompatibleDC
CreateSolidBrush
DeleteDC
DeleteObject
GetObjectA
SelectObject
SetBkMode
SetStretchBltMode
SetTextColor
StretchBlt
shlwapi
SHDeleteEmptyKeyA
SHDeleteKeyA
advapi32
RegCloseKey
RegCreateKeyExA
RegDeleteValueA
RegSetValueExA
shell32
SHBrowseForFolderA
SHFileOperationA
SHGetPathFromIDListA
ShellExecuteA
kernel32
CloseHandle
CopyFileA
CreateDirectoryA
CreateFileA
CreateFileMappingA
DeleteFileA
ExitProcess
ExpandEnvironmentStringsA
FindClose
FindFirstFileA
GetCurrentDirectoryA
GetFileAttributesA
GetFileSize
GetFileTime
GetLocaleInfoA
GetModuleHandleA
GetNativeSystemInfo
GetPrivateProfileStringA
GetProcAddress
GetVersion
GlobalAlloc
GlobalFree
MapViewOfFile
MultiByteToWideChar
RtlZeroMemory
SetFileAttributesA
SetFileTime
UnmapViewOfFile
WriteFile
WritePrivateProfileStringA
lstrcatA
lstrcpyA
user32
CallWindowProcA
CheckDlgButton
DialogBoxIndirectParamA
DialogBoxParamA
EndDialog
FillRect
GetDC
GetDlgItem
GetSysColor
GetSysColorBrush
GetWindowLongA
InvalidateRect
IsDlgButtonChecked
LoadCursorA
LoadIconA
LoadImageA
MessageBeep
MessageBoxA
ReleaseCapture
SendDlgItemMessageA
SendMessageA
SetCursor
SetDlgItemTextA
SetWindowLongA
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ