C:\Eigene Dateien\Entwickl\EqualizerAPO\trunk\x64\Release\Configurator.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Configurator.exe
Resource
win10v2004-20240802-en
General
-
Target
Configurator.exe
-
Size
209KB
-
MD5
ba3612cdc39e1a84d48301c19fd8d18a
-
SHA1
4f4cec3ea98d0faf5fa0bce8adac1737c4c0cebd
-
SHA256
8e51a516783e89fd550082be2bcf10ae6171c6a1cdde6f870bbaf02085e830e5
-
SHA512
3c1a3d2ad25dfca83ac6ba56a2ead688c29546c310b98b0ec0461b56c2f9960f7cd65ba316af2f82b39bc8fdce0cc8174408246c7cdf83ede41da7e6c8a5236c
-
SSDEEP
3072:1BVXhG6RClO2nh7JViRpCa+uKTb+TbYclCMUrlXTnmMSzdjMvS:18/42nbViSa+usUYFXTnkz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Configurator.exe
Files
-
Configurator.exe.exe windows:6 windows x64 arch:x64
3d7594dd4692cacc611c4cbe05d1a595
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
shlwapi
PathRemoveFileSpecW
comctl32
InitCommonControlsEx
kernel32
DeleteFileW
FreeLibrary
LoadLibraryW
CreateToolhelp32Snapshot
Process32FirstW
OpenProcess
ReadProcessMemory
Process32NextW
Thread32First
Thread32Next
TerminateProcess
IsProcessorFeaturePresent
FormatMessageW
LocalAlloc
CloseHandle
GetCurrentProcess
GlobalUnlock
GlobalLock
GlobalAlloc
HeapAlloc
GetProcessHeap
HeapFree
RtlCaptureContext
Sleep
GetLastError
QueryPerformanceCounter
QueryPerformanceFrequency
GetModuleFileNameW
GetSystemTimeAsFileTime
LocalFree
GetCurrentThreadId
GetCurrentProcessId
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlVirtualUnwind
RtlLookupFunctionEntry
GetProcAddress
user32
SendMessageW
PostThreadMessageW
GetDlgItem
LoadStringW
SetClipboardData
SetWindowTextW
MapDialogRect
SetWindowPos
CreateWindowExW
MessageBoxW
OpenClipboard
GetDesktopWindow
CloseClipboard
IsDlgButtonChecked
ShowWindow
SetFocus
IsWindowEnabled
BeginDeferWindowPos
EndDeferWindowPos
GetWindowInfo
AdjustWindowRect
DeferWindowPos
EnableWindow
DialogBoxParamW
EndDialog
advapi32
InitializeSecurityDescriptor
EnumDependentServicesW
ControlService
StartServiceW
QueryServiceStatusEx
OpenServiceW
OpenSCManagerW
CloseServiceHandle
LookupPrivilegeValueW
AdjustTokenPrivileges
InitiateShutdownW
RegQueryValueExW
RegCloseKey
RegSetValueExW
RegDeleteValueW
RegCreateKeyExW
RegDeleteKeyExW
RegGetKeySecurity
GetSecurityDescriptorDacl
AllocateAndInitializeSid
SetEntriesInAclW
SetSecurityDescriptorDacl
RegSetKeySecurity
FreeSid
SetSecurityDescriptorOwner
RegOpenKeyExW
RegEnumKeyExW
RegQueryInfoKeyW
OpenProcessToken
shell32
ShellExecuteW
CommandLineToArgvW
SHGetKnownFolderPath
ole32
CoUninitialize
CLSIDFromString
StringFromCLSID
CoTaskMemFree
PropVariantClear
CoInitializeEx
CoCreateInstance
msvcp140
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@I@Z
?widen@?$ctype@_W@std@@QEBA_WD@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?getloc@ios_base@std@@QEBA?AVlocale@2@XZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAXXZ
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEBA?AVlocale@2@XZ
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEBA_WD@Z
?put@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@_W@Z
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Fiopen@std@@YAPEAU_iobuf@@PEB_WHH@Z
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z
?always_noconv@codecvt_base@std@@QEBA_NXZ
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?out@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_W1AEAPEB_WPEAD3AEAPEAD@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEA_W3AEAPEA_W@Z
??0?$basic_iostream@_WU?$char_traits@_W@std@@@std@@QEAA@PEAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
?uncaught_exception@std@@YA_NXZ
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAAPEA_WXZ
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
??1?$basic_iostream@_WU?$char_traits@_W@std@@@std@@UEAA@XZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAAG_W@Z
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEB_W_J@Z
?_Unlock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UEAAXXZ
?sync@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAGXZ
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAA_JPEA_W_J@Z
?setbuf@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAPEAV12@PEA_W_J@Z
?imbue@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QEAAAEAV12@XZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QEAA_JPEB_W_J@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QEAAXH_N@Z
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IEAA@XZ
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memcpy
memmove
__RTDynamicCast
__std_terminate
__std_exception_copy
__std_exception_destroy
_purecall
__C_specific_handler
__current_exception
__current_exception_context
_CxxThrowException
memset
api-ms-win-crt-heap-l1-1-0
malloc
free
_callnewh
_set_new_mode
api-ms-win-crt-runtime-l1-1-0
_register_onexit_function
_initialize_onexit_table
_register_thread_local_exe_atexit_callback
_invalid_parameter_noinfo_noreturn
terminate
_seh_filter_exe
_set_app_type
_crt_atexit
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_initterm_e
exit
_exit
_c_exit
_cexit
api-ms-win-crt-string-l1-1-0
wcsncmp
wcsncpy_s
_wcslwr_s
_wcsupr_s
api-ms-win-crt-stdio-l1-1-0
fwrite
fputwc
__p__commode
ungetwc
ungetc
fgetc
fgetwc
fgetpos
_fseeki64
fsetpos
setvbuf
_set_fmode
fclose
fflush
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 110KB - Virtual size: 109KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 36KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 452B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ