Static task
static1
General
-
Target
Ducky_One2_Mini_RGB_V1.22.exe
-
Size
3.1MB
-
MD5
297f6bcb5b54c829064fff505d663216
-
SHA1
f32667645224c7d6de77a6d248667d4313a181c5
-
SHA256
b1a8f0fd014b366dd4dfaad2bc6f1d97e784a3f7e768fd3a3d4b6a14c1116cd6
-
SHA512
3b9caece28ce0208d6083fc04631c378de1c778813b9f53468297f866bdbc8f0dc85cbc6141fcf8e5a2bac784441765d0fd946487379691fc13c4d54eafc4155
-
SSDEEP
98304:SFTNlE+iMbG+5f2rEICsbT7o+Cup2nlRxI:Sp/I5bT7o+CugnlXI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Ducky_One2_Mini_RGB_V1.22.exe
Files
-
Ducky_One2_Mini_RGB_V1.22.exe.exe windows:6 windows x86 arch:x86
0c72a2dcb111cb6788ee6466d2b95546
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
FindFirstFileExW
GetTimeZoneInformation
GetConsoleCP
SetFilePointerEx
ReadConsoleW
GetConsoleMode
EnumSystemLocalesW
IsValidLocale
ExitProcess
GetStdHandle
SetStdHandle
QueryPerformanceFrequency
VirtualQuery
GetSystemInfo
HeapQueryInformation
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
CreateThread
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
RtlUnwind
GetCPInfo
GetStringTypeW
LCMapStringW
OutputDebugStringW
SetEnvironmentVariableW
GetStartupInfoW
IsDebuggerPresent
GetSystemTimeAsFileTime
InitializeSListHead
QueryPerformanceCounter
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetUserDefaultLCID
GetTempFileNameW
SearchPathW
GetProfileIntW
GetTickCount
GetTempPathW
SystemTimeToTzSpecificLocalTime
IsProcessorFeaturePresent
GetFileTime
GetFileSizeEx
GetFileAttributesExW
FileTimeToLocalFileTime
SetErrorMode
FindResourceExW
GetFileAttributesW
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
GetCurrentProcess
DuplicateHandle
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
DeleteFileW
lstrcmpiW
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GlobalFlags
FileTimeToSystemTime
GlobalGetAtomNameW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
EnterCriticalSection
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetCurrentThread
GetVersionExW
GetCurrentProcessId
SuspendThread
SetThreadPriority
SetEvent
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
LoadLibraryExW
GetModuleHandleW
GetModuleHandleA
GetModuleFileNameW
GetSystemDirectoryW
EncodePointer
OutputDebugStringA
CopyFileW
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
SetLastError
DeleteCriticalSection
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
RaiseException
DecodePointer
GetCurrentThreadId
SleepEx
SetCommTimeouts
SetCommState
SetCommMask
PurgeComm
GetCommState
SetupComm
UnmapViewOfFile
FlushViewOfFile
MapViewOfFile
CreateFileMappingW
WaitForMultipleObjects
CreateEventW
ResetEvent
CancelIo
GetOverlappedResult
WriteFile
ReadFile
CreateFileW
WideCharToMultiByte
lstrlenW
lstrcatW
lstrcpyW
WinExec
FindFirstFileW
FindClose
GetLastError
GetCurrentDirectoryW
SetCurrentDirectoryW
ResumeThread
CreateSemaphoreW
Sleep
CreateMutexW
WaitForSingleObject
ReleaseMutex
ReleaseSemaphore
CloseHandle
MultiByteToWideChar
LoadLibraryW
GetProcAddress
LoadResource
FreeLibrary
FindResourceW
SizeofResource
LockResource
VirtualAlloc
WriteConsoleW
user32
CopyImage
RealChildWindowFromPoint
LoadImageW
DestroyIcon
TrackMouseEvent
GetSysColorBrush
ShowOwnedPopups
PostQuitMessage
WindowFromPoint
IntersectRect
SystemParametersInfoW
GetMenuItemInfoW
DestroyMenu
GetWindowThreadProcessId
FillRect
ClientToScreen
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
TranslateMessage
GetMessageW
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
GetDesktopWindow
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
IsDialogMessageW
SetWindowTextW
IsWindowEnabled
CheckDlgButton
SetDlgItemTextW
MoveWindow
ShowWindow
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
GetAsyncKeyState
EqualRect
CopyRect
MapWindowPoints
AdjustWindowRectEx
GetWindowTextLengthW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
SetForegroundWindow
GetForegroundWindow
SetWindowRgn
UpdateWindow
CloseClipboard
TrackPopupMenu
SetMenu
GetMenu
GetCapture
GetKeyState
SetFocus
GetDlgCtrlID
GetDlgItem
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetParent
DrawEdge
DrawFrameControl
EnableWindow
SendMessageW
GetWindowRect
GetSystemMetrics
PostMessageW
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
IsMenu
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
PeekMessageW
DispatchMessageW
MapDialogRect
IsClipboardFormatAvailable
SetRect
DeleteMenu
CharUpperW
WaitMessage
SetCapture
ReleaseCapture
GetNextDlgGroupItem
DrawFocusRect
IsRectEmpty
DrawIconEx
GetIconInfo
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
GetMenuDefaultItem
SetLayeredWindowAttributes
EnumDisplayMonitors
GetWindowLongW
MessageBoxW
GetClientRect
MonitorFromPoint
CreatePopupMenu
AppendMenuW
GetCursorPos
RegisterDeviceNotificationW
UnregisterDeviceNotification
IsIconic
GetSystemMenu
DrawIcon
InvalidateRect
PtInRect
LoadBitmapW
LoadIconW
GetMessagePos
IsWindow
SetTimer
KillTimer
GetDC
ReleaseDC
MessageBeep
SetCursor
ScreenToClient
GetSysColor
InflateRect
SetWindowLongW
GetParent
LoadCursorW
UnregisterClassW
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
RemoveMenu
SendDlgItemMessageA
SetRectEmpty
OffsetRect
GetFocus
CheckMenuItem
EnableMenuItem
SetMenuItemBitmaps
IsZoomed
BringWindowToTop
SetCursorPos
CopyIcon
OpenClipboard
SetClipboardData
EmptyClipboard
DrawStateW
GetMenuCheckMarkDimensions
SetMenuItemInfoW
RegisterWindowMessageW
SetClassLongW
FrameRect
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
UnpackDDElParam
ReuseDDElParam
UnionRect
UpdateLayeredWindow
DestroyCursor
GetWindowRgn
CreateMenu
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
GetUpdateRect
CharUpperBuffW
RegisterClipboardFormatW
ModifyMenuW
GetDoubleClickTime
SetMenuDefaultItem
LockWindowUpdate
CopyAcceleratorTableW
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
PostThreadMessageW
GetComboBoxInfo
SetActiveWindow
gdi32
BitBlt
CreateHatchBrush
CreatePen
CreatePatternBrush
CreateRectRgn
DeleteDC
DeleteObject
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectObject
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
PatBlt
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CombineRgn
SetRectRgn
DPtoLP
GetTextMetricsW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
GetBkColor
CreateCompatibleBitmap
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
GetTextColor
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
EnumFontFamiliesExW
Rectangle
GetRgnBox
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
CreateRectRgnIndirect
SetTextColor
SetBkColor
CreateBitmap
GetDeviceCaps
CreateDCW
CopyMetaFileW
GetTextExtentPoint32W
GetStockObject
GetObjectW
StretchBlt
CreateSolidBrush
CreateCompatibleDC
OffsetViewportOrgEx
CreateFontIndirectW
CreateFontW
msimg32
TransparentBlt
AlphaBlend
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
advapi32
RegEnumKeyExW
RegEnumValueW
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
RegQueryValueW
RegOpenKeyExW
RegCloseKey
shell32
DragQueryPoint
DragFinish
ShellExecuteW
SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHAppBarMessage
SHBrowseForFolderW
SHGetDesktopFolder
DragQueryFileW
shlwapi
PathFindExtensionW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathRemoveFileSpecW
PathFindFileNameW
uxtheme
OpenThemeData
GetThemePartSize
GetThemeSysColor
IsAppThemed
GetWindowTheme
IsThemeBackgroundPartiallyTransparent
DrawThemeText
DrawThemeParentBackground
CloseThemeData
DrawThemeBackground
GetThemeColor
GetCurrentThemeName
ole32
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CreateStreamOnHGlobal
CoDisconnectObject
CoInitialize
CoCreateGuid
CoCreateInstance
CoInitializeEx
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
oleaut32
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SysAllocStringLen
LoadTypeLi
VariantInit
VariantCopy
VarBstrFromDate
SysAllocString
SysFreeString
VariantClear
VariantChangeType
hid
HidD_GetAttributes
HidD_GetHidGuid
setupapi
SetupDiEnumDeviceInterfaces
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
SetupDiDestroyDeviceInfoList
gdiplus
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetOpenStatus
ImmGetContext
winmm
PlaySoundW
Sections
.text Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 387KB - Virtual size: 386KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 149KB - Virtual size: 167KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 911KB - Virtual size: 910KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ