Static task
static1
Behavioral task
behavioral1
Sample
a68da3c795b88e637e75cf222efa4a80N.exe
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
a68da3c795b88e637e75cf222efa4a80N.exe
Resource
win10v2004-20240802-en
General
-
Target
a68da3c795b88e637e75cf222efa4a80N.exe
-
Size
2.3MB
-
MD5
a68da3c795b88e637e75cf222efa4a80
-
SHA1
19f6d56e0a80033c5dd80c35cf8c7f6d15db7982
-
SHA256
a818da798fa82611e083746b343360c421a46480d347558396fd5dafdec698ef
-
SHA512
23ac3aaf5e6a1581b9495743594fd0b44a35c6aaf3f3091e5c7266db17de9df8820959bf27057aa182ba5772f77aaa021749228dd257e85efbe9791de5cc91fd
-
SSDEEP
49152:qvCCskQjC5iZvNbpBOZ5e4MaCxoWY4Sjj/KYDBZcIlb+GO:KoFzvNTOZ5e4MaCxoWY4SjjikBZcIIGO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a68da3c795b88e637e75cf222efa4a80N.exe
Files
-
a68da3c795b88e637e75cf222efa4a80N.exe.exe windows:5 windows x86 arch:x86
43c412430877f27e20045c5565191790
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
msvcr90
clock
_access
isalpha
setlocale
toupper
_CItan
frexp
_hypot
ldexp
_CIasin
_CIacos
ceil
_CIsqrt
_CIcos
_CIsin
vsprintf
_chmod
_write
_read
_getpid
_close
_stricmp
??3@YAXPAX@Z
_exit
_unlock
__dllonexit
_encode_pointer
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_amsg_exit
__getmainargs
_cexit
_XcptFilter
__initenv
_initterm
_initterm_e
_configthreadlocale
__setusermatherr
_adjust_fdiv
__p__commode
__p__fmode
__set_app_type
?_name_internal_method@type_info@@QBEPBDPAU__type_info_node@@@Z
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_invoke_watson
_controlfp_s
_ltoa
_chsize
_lseek
_sopen
_strdup
_endthreadex
_beginthreadex
__RTtypeid
realloc
rename
strerror
_utime32
fseek
_vsnprintf
??0exception@std@@QAE@XZ
memcpy
_fullpath
_strupr
strstr
_difftime32
_errno
_CxxThrowException
??0exception@std@@QAE@ABV01@@Z
??1exception@std@@UAE@XZ
_splitpath
fgets
strrchr
_CIfmod
strncat
isgraph
__RTDynamicCast
abort
strtok
malloc
free
sscanf
strpbrk
isdigit
floor
memmove
memset
getenv
_tempnam
_cwait
_unlink
fopen
fread
fclose
qsort
_purecall
strncpy
_stat32
strchr
signal
exit
atoi
atof
__iob_func
fprintf
sprintf
_CIatan2
strncmp
??_U@YAPAXI@Z
??_V@YAXPAX@Z
??2@YAPAXI@Z
__CxxFrameHandler3
_time32
_ctime32
wsock32
gethostbyaddr
gethostbyname
ioctlsocket
gethostname
WSAStartup
WSAGetLastError
send
WSACleanup
getservbyname
ntohs
connect
inet_addr
recv
htons
socket
closesocket
shutdown
select
htonl
ntohl
mpr
WNetGetUserA
WNetGetConnectionA
bdif_execcode_nx_c9
?GetSizeOfCode@CBDIF_ExecCode@@QAEHXZ
??0CBDIF_ExecCode@@QAE@XZ
?RequestCode@CBDIF_ExecCode@@QAEXPADHPBD@Z
??1CBDIF_ExecCode@@UAE@XZ
mfc90
ord2481
ord4392
ord601
ord310
ord817
ord316
ord1603
ord820
ord2539
ord4506
kernel32
GetFileAttributesA
CreateFileA
DeviceIoControl
GetCurrentThread
GetCurrentProcess
CloseHandle
ExpandEnvironmentStringsA
GetLongPathNameA
Sleep
GetModuleFileNameA
GetLastError
CreateProcessA
CopyFileA
GetProcAddress
LoadLibraryA
GetFullPathNameA
SystemTimeToFileTime
GetSystemTime
HeapAlloc
HeapCreate
TerminateProcess
HeapFree
WaitForSingleObject
HeapSize
InterlockedExchange
InterlockedCompareExchange
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
FreeLibrary
user32
LoadStringA
MessageBoxA
advapi32
AdjustTokenPrivileges
GetUserNameA
RegOpenKeyExA
RegQueryValueExA
RegCloseKey
LookupPrivilegeValueA
OpenProcessToken
OpenThreadToken
SetFileSecurityA
GetFileSecurityA
msvcp90
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
?getline@?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV12@PADH@Z
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@M@Z
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?_Unlock@_Mutex@std@@QAEXXZ
?_Lock@_Mutex@std@@QAEXXZ
bmb_nx_c9
?GetHeatLoadFraction@BMBCapacitance@@QAENXZ
?GetArea@BMBCapacitance@@QAENXZ
?GetResistanceName@BMBPart@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?ScanElement@BMBMapResistance@@QAEPAVBMBResistance@@PBD@Z
?GetNameCapacitance@BMBResistance@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z
?GetResistance@BMBResistance@@QAENXZ
?GetRatingName@BMBPart@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?ScanElement@BMBMapRating@@QAEPAVBMBRating@@PBD@Z
?GetPower@BMBRating@@QAENXZ
?GetMinPower@BMBRating@@QAENXZ
?GetMaxPower@BMBRating@@QAENXZ
?GetHeatDssp@BMBRating@@QAENXZ
?GetMinHeatDssp@BMBRating@@QAENXZ
?GetMaxHeatDssp@BMBRating@@QAENXZ
?GetOwner@BMBElement@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetRotation@BMBPart@@QAEMXZ
?GetX@BMBPart@@QAEMXZ
?GetY@BMBPart@@QAEMXZ
?GetMountSide@BMBPart@@QAEEXZ
?IsLocateLock@BMBPart@@QAE_NXZ
?IsAngleLock@BMBPart@@QAE_NXZ
?IsSideLock@BMBPart@@QAE_NXZ
?GetMapMaterial@BMBProduct@@QAEPAVBMBMapMaterial@@XZ
?ScanRecord@BMBTableLayer@@QAEPAVBMBLayer@@PBD@Z
?GetMaterialName@BMBLayer@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?ScanElement@BMBMapMaterial@@QAEPAVBMBMaterial@@PBD@Z
?GetMassDensity@BMBMaterial@@QAENXZ
?GetYoungModulus@BMBMaterial@@QAENXZ
?GetThermalConductivity@BMBMaterial@@QAENH@Z
?GetSpecificHeat@BMBMaterial@@QAENXZ
?GetSurfaceEmissivity@BMBMaterial@@QAENXZ
?GetSurfaceRoughness@BMBMaterial@@QAENXZ
?GetText@BMBComment@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetAngle@BMBComment@@QAENXZ
?GetP1@BMBComment@@QAENXZ
?GetP2@BMBComment@@QAENXZ
?GetLength@BMBComment@@QAENXZ
?GetCapacitance@BMBCapacitance@@QAENXZ
?GetWidth@BMBComment@@QAENXZ
??0BMB2DGeUnit@@QAE@XZ
?GetGeUnit@BMB2DGeometry@@QAE?AVBMB2DGeUnit@@H@Z
??1BMB2DGeUnit@@UAE@XZ
??0BMB2DArea@@QAE@XZ
?GetArea@BMBSheet@@QAEXAAVBMB2DArea@@@Z
??1BMB2DArea@@UAE@XZ
?GetBoard@BMBSheet@@QAEPAVBMBBoard@@XZ
?GetThickness@BMBBoard@@QAEMXZ
??1BMBFile@@UAE@XZ
?XMLInput@BMBFile@@UAEXPAVEMXMLAttribute@@@Z
?XMLOutput@BMBFile@@UAEXPAVEMXMLWriter@@@Z
??0BMBFile@@QAE@E@Z
?PutFilePath@BMBFile@@QAEXPBD@Z
?XMLRead@BMBFile@@QAE_NXZ
?GetPCB@BMBFile@@QAEPAVBMBProduct@@XZ
?GetSheet@BMBProduct@@QAEPAVBMBSheet@@H@Z
?GetTableLayer@BMBProduct@@QAEPAVBMBTableLayer@@XZ
?GetWorkLayerNumber@BMBSheet@@QAEFXZ
?ScanRecord@BMBTableLayer@@QAEPAVBMBLayer@@F@Z
?ScanElement@BMBMapCapacitance@@QAEPAVBMBCapacitance@@PBD@Z
?GetCapacitanceName@BMBPart@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetMaterialName@BMBPart@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetUserProperty@BMBPart@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetDevName@BMBPart@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetShapeName@BMBPart@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetPartName@BMBPart@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetRefName@BMBPart@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetPart@BMBSheet@@QAEPAVBMBPart@@H@Z
?CountElement@BMBSheet@@QAEHE@Z
?Count2DShape@BMBElement@@QAEHXZ
?GetType@BMBSymbol@@QAEEXZ
?GetHole@BMBSheet@@QAEPAVBMBHole@@H@Z
?GetID@BMBElement@@QAEJXZ
?GetVectorSide@BMBBendLine@@QAEXAAU_BMB_3DVectorD_t@@@Z
?GetPointSide@BMBBendLine@@QAEXAAU_BMB_3DVectorD_t@@@Z
?GetVectorDirection@BMBBendLine@@QAEXAAU_BMB_3DVectorD_t@@@Z
?GetPointDirection@BMBBendLine@@QAEXAAU_BMB_3DVectorD_t@@@Z
?GetLayerNumber@BMBBendLine@@QAEFXZ
?GetBendLine@BMBBoard@@QAEPAVBMBBendLine@@H@Z
?CountBendLine@BMBBoard@@QAEHXZ
?GetSubArea@BMBBoard@@QAEPAVBMB2DConstraint@@H@Z
?CountSubArea@BMBBoard@@QAEHXZ
?GetMaterialName@BMBBoard@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetRank@BMB2DConstraint@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@H@Z
?GetElementColor@BMBElement@@QAEKXZ
?GetRadius@BMBBendLine@@QAENXZ
?GetMapRating@BMBProduct@@QAEPAVBMBMapRating@@XZ
?GetMapResistance@BMBProduct@@QAEPAVBMBMapResistance@@XZ
?GetMapCapacitance@BMBProduct@@QAEPAVBMBMapCapacitance@@XZ
?Get2DShape@BMBElement@@QAEPAVBMB2DGeometry@@H@Z
?GetHeight@BMBComment@@QAENXZ
?GetEMID@BMBElement@@QAE?AV?$CStringT@DV?$StrTraitMFC_DLL@DV?$ChTraitsCRT@D@ATL@@@@@ATL@@XZ
?GetComment@BMBSheet@@QAEPAVBMBComment@@H@Z
?GetLayerNumber@BMBComment@@QAEFXZ
?Get2DConstraint@BMBSheet@@QAEPAVBMB2DConstraint@@H@Z
?GetLayerNumber@BMBSymbol@@QAEFXZ
?CountSymbol@BMBLayer@@QAEHXZ
?GetSymbol@BMBLayer@@QAEPAVBMBSymbol@@H@Z
?GetHeight@BMB2DConstraint@@QAEMXZ
?GetStandOff@BMB2DConstraint@@QAEMXZ
?GetAngle@BMBBendLine@@QAENXZ
emxml_c9
?GetSerialID@EMXMLInterface@@UAEHXZ
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 228KB - Virtual size: 228KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 44KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 73KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE