D:\cpuid2\cpu_z\cpu_z_cn_vc2008\Release\cpuz_x32.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8ace5a815f02a80d7033fa9ff4f0cb50b27303151f866bccc2218cf8ca9830ad.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
8ace5a815f02a80d7033fa9ff4f0cb50b27303151f866bccc2218cf8ca9830ad.exe
Resource
win10v2004-20240802-en
General
-
Target
8ace5a815f02a80d7033fa9ff4f0cb50b27303151f866bccc2218cf8ca9830ad
-
Size
4.0MB
-
MD5
c28358562d00b1fc3701eeabdb899fb4
-
SHA1
73bfbc1e433c3a505c484a178d7728ff1c91a1b6
-
SHA256
8ace5a815f02a80d7033fa9ff4f0cb50b27303151f866bccc2218cf8ca9830ad
-
SHA512
8f86f50166d24cec30b4178d57770a171233501ac97254cc39880ea6718f1ebe31b5f9cd5b14204de0014b7af9e78c7f7024a108292aec6b1f3fe0442663f7ef
-
SSDEEP
49152:EtaeiTQUQZ2H1rqrJy6btlKgc+dQXQxTv/PwIMfaLvHkp80oCP0VXbpX5Sl35mj1:+aeaZQZ24tbKgc+dTA5skq0ot
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8ace5a815f02a80d7033fa9ff4f0cb50b27303151f866bccc2218cf8ca9830ad
Files
-
8ace5a815f02a80d7033fa9ff4f0cb50b27303151f866bccc2218cf8ca9830ad.exe windows:5 windows x86 arch:x86
57e1938d5a9ef930b3269f46b3048603
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
winmm
timeGetTime
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA
kernel32
lstrlenA
GlobalFlags
WritePrivateProfileStringW
SetEndOfFile
SetErrorMode
GetStartupInfoW
HeapAlloc
RaiseException
HeapReAlloc
ExitProcess
HeapSize
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
SetHandleCount
GetFileType
GetStartupInfoA
HeapCreate
HeapDestroy
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
IsDebuggerPresent
GetConsoleCP
GetConsoleMode
GetTimeZoneInformation
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringA
LCMapStringW
InitializeCriticalSectionAndSpinCount
SetStdHandle
GetConsoleOutputCP
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
InterlockedIncrement
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
TlsGetValue
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryExW
CompareStringA
InterlockedExchange
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
GetCurrentThreadId
FreeResource
GlobalLock
GlobalUnlock
FormatMessageW
lstrcmpiA
GetSystemDirectoryA
CreateDirectoryA
GetTempPathA
GetModuleHandleA
FindResourceA
GetWindowsDirectoryA
RemoveDirectoryA
GetComputerNameA
SetCurrentDirectoryA
GetCurrentDirectoryA
GetModuleFileNameA
DeleteFileA
GetSystemWindowsDirectoryA
GetFileAttributesA
GetCurrentProcessId
CancelIo
SetEnvironmentVariableA
SetThreadAffinityMask
GetThreadPriority
ReadFile
CreateEventA
GetSystemInfo
QueryPerformanceFrequency
QueryPerformanceCounter
VirtualAlloc
VirtualFree
GetTickCount
DeviceIoControl
GetDiskFreeSpaceA
CreateFileA
LocalAlloc
LocalFree
WriteConsoleA
LoadLibraryA
SetFilePointer
GetVersionExA
CreateMutexA
OpenMutexA
ReleaseMutex
GetProcessHeap
HeapFree
FlushFileBuffers
WriteFile
CreateFileW
InterlockedExchangeAdd
ReleaseSemaphore
CreateSemaphoreW
WaitForMultipleObjects
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
QueueUserAPC
WaitForSingleObjectEx
ResetEvent
CreateEventW
GlobalMemoryStatus
GetTempPathW
GetFileAttributesW
GetSystemWindowsDirectoryW
GetVersionExW
WinExec
lstrlenW
lstrcatW
lstrcpyW
WriteConsoleW
ExitThread
GetStdHandle
GetPriorityClass
GetLocalTime
MulDiv
WideCharToMultiByte
MultiByteToWideChar
GetModuleFileNameW
CloseHandle
InterlockedDecrement
FreeLibrary
SetLastError
LoadLibraryW
GetLastError
GetProcAddress
GetModuleHandleW
GlobalSize
GlobalReAlloc
GlobalAlloc
GlobalFree
Sleep
ResumeThread
SetThreadPriority
SetPriorityClass
GetCurrentThread
GetCurrentProcess
WaitForSingleObject
SetEvent
CreateThread
SetCurrentDirectoryW
GetComputerNameW
GetCurrentDirectoryW
LockResource
SizeofResource
LoadResource
FindResourceW
RtlUnwind
user32
LoadCursorW
GetSysColorBrush
UnregisterClassW
DestroyMenu
PostQuitMessage
LoadIconW
SendDlgItemMessageA
WinHelpW
GetClassLongW
GetClassNameW
GetForegroundWindow
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
TrackPopupMenu
SetMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
SetScrollInfo
DefWindowProcW
CallWindowProcW
GetMenu
SystemParametersInfoA
GetWindowPlacement
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
MoveWindow
GetDlgCtrlID
IsDialogMessageW
SetDlgItemTextW
SendDlgItemMessageW
GetDesktopWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetNextDlgTabItem
EndDialog
GetWindowTextLengthW
GetWindowTextW
GetScrollPos
SetScrollPos
GetWindow
EndPaint
BeginPaint
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
GetWindowThreadProcessId
GetLastActivePopup
SetPropW
GetCapture
GetActiveWindow
SetActiveWindow
SetWindowPos
ShowWindow
GetPropW
RemovePropW
GetFocus
SetFocus
GetDlgItem
IsWindowEnabled
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
UnhookWindowsHookEx
wsprintfA
ModifyMenuW
WindowFromPoint
PostMessageW
ReleaseCapture
DrawEdge
FrameRect
DrawFrameControl
FillRect
CheckMenuItem
EnableMenuItem
AppendMenuW
ClientToScreen
CreatePopupMenu
CreateCursor
SetCursor
DestroyCursor
UpdateWindow
SetRect
OffsetRect
SetWindowTextW
DrawIcon
GetSystemMetrics
IsIconic
MessageBoxW
wsprintfW
InflateRect
DrawFocusRect
GetSysColor
IsRectEmpty
CopyRect
GetParent
PtInRect
DestroyIcon
SetWindowLongW
GetWindowLongW
LoadImageW
ReleaseDC
CloseClipboard
SetClipboardData
EmptyClipboard
OpenClipboard
GetClientRect
GetDC
GetWindowDC
KillTimer
SetTimer
InvalidateRect
EnableWindow
GetWindowRect
SetForegroundWindow
LoadBitmapW
SendMessageW
RegisterWindowMessageW
ScreenToClient
SetDlgItemInt
gdi32
CreatePen
MoveToEx
LineTo
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
DeleteObject
CreatePalette
GetSystemPaletteEntries
GetDeviceCaps
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
GetClipBox
SetMapMode
SetTextColor
SetBkMode
SetBkColor
RestoreDC
SaveDC
CreateDCA
SelectObject
CreateSolidBrush
SetPixel
GetCurrentObject
CreateFontIndirectW
GetPixel
CreateBitmap
CreateFontW
GetTextExtentPoint32W
GetDIBits
RealizePalette
SelectPalette
GetObjectW
GetStockObject
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
advapi32
RegSetValueExW
RegCreateKeyExW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegQueryValueExW
ImpersonateSelf
OpenThreadToken
AllocateAndInitializeSid
InitializeSecurityDescriptor
GetLengthSid
InitializeAcl
AddAccessAllowedAce
SetSecurityDescriptorDacl
SetSecurityDescriptorGroup
SetSecurityDescriptorOwner
IsValidSecurityDescriptor
AccessCheck
FreeSid
RevertToSelf
OpenSCManagerA
ControlService
StartServiceA
OpenServiceA
DeleteService
CreateServiceW
CloseServiceHandle
LookupPrivilegeValueA
AdjustTokenPrivileges
OpenProcessToken
RegOpenKeyExA
RegQueryInfoKeyA
RegEnumKeyExA
RegQueryValueExA
RegCloseKey
RegQueryValueW
RegOpenKeyExW
shell32
ShellExecuteW
shlwapi
PathFindExtensionW
PathFindFileNameW
PathRemoveFileSpecW
ole32
CoTaskMemFree
CoInitialize
CoInitializeEx
CoInitializeSecurity
CoCreateInstance
CoSetProxyBlanket
CoUninitialize
StringFromGUID2
oleaut32
SysStringLen
SysAllocString
SysAllocStringByteLen
SysStringByteLen
SysFreeString
VariantChangeType
VariantClear
VariantInit
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 345KB - Virtual size: 344KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 183KB - Virtual size: 218KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ