E:\landun\wubi_agent\workspace\p-3417ba0c0c0d46dfae3a04bc6431244c\src\bin\SogouPdb\SogouWubi\WbSpeedMeter.pdb
Static task
static1
Behavioral task
behavioral1
Sample
578a33215fbe1dd3ac899bfb42653294921f062a02f9e7407a4e14645a4af94a.exe
Resource
win7-20231215-en
General
-
Target
578a33215fbe1dd3ac899bfb42653294921f062a02f9e7407a4e14645a4af94a
-
Size
1.9MB
-
MD5
50b07b4152b6dc573b6b4227fc3c6a5f
-
SHA1
6f17cc9434719c31c2a1f0e9826ca7356ac4ba1f
-
SHA256
578a33215fbe1dd3ac899bfb42653294921f062a02f9e7407a4e14645a4af94a
-
SHA512
3c09cdd49250641f12ddef7206ef85aae6001571c5be94ba6b384fa8f69373aa9623b88b80729d265b29a79527bd827103da6bc49c0ff49109334b553c89bb15
-
SSDEEP
12288:qgZubeCAeP7YNONWTRlqi6f0ZcFi6chgZFoIqJpf8:hgbPAlzqisF5cOZwJpE
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 578a33215fbe1dd3ac899bfb42653294921f062a02f9e7407a4e14645a4af94a
Files
-
578a33215fbe1dd3ac899bfb42653294921f062a02f9e7407a4e14645a4af94a.exe windows:6 windows x86 arch:x86
b049d03049d5b8f4b57e585fc39ce504
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
comctl32
InitCommonControlsEx
kernel32
HeapFree
LoadLibraryW
GetSystemDirectoryW
GetProcessHeap
GetTickCount
GetProcAddress
WriteConsoleW
SetFilePointerEx
HeapSize
EnterCriticalSection
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection
DeleteCriticalSection
GetCommandLineW
GetCurrentProcess
GetModuleFileNameW
GetTempPathW
GetLastError
CloseHandle
HeapAlloc
GetCurrentProcessId
GetModuleHandleW
FreeLibrary
ReadFile
SetLastError
WriteFile
SetFilePointer
CreateFileW
GetCurrentThreadId
ExitThread
CreateEventW
FormatMessageW
GlobalAlloc
GlobalFree
CreateThread
LocalFree
GetFileSize
CreateProcessW
CreateDirectoryW
WaitForSingleObject
GetFileAttributesW
SetFileAttributesW
DeleteFileW
MoveFileExW
CopyFileW
OpenFileMappingW
UnmapViewOfFile
CreateFileMappingW
MapViewOfFile
MultiByteToWideChar
WideCharToMultiByte
GlobalLock
GlobalUnlock
CreateMutexW
ReleaseMutex
OpenMutexW
FindFirstFileW
FindNextFileW
RemoveDirectoryW
FindClose
LocalAlloc
Sleep
FlushFileBuffers
SetEvent
QueryPerformanceCounter
IsBadWritePtr
lstrlenW
TerminateProcess
lstrcatW
GetLocalTime
lstrcpyW
VirtualQuery
IsDebuggerPresent
SetUnhandledExceptionFilter
GetStringTypeW
EncodePointer
DecodePointer
GetCPInfo
CompareStringW
LCMapStringW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
UnhandledExceptionFilter
IsProcessorFeaturePresent
ResetEvent
WaitForSingleObjectEx
GetStartupInfoW
InitializeSListHead
RaiseException
RtlUnwind
LoadLibraryExW
FindFirstFileExW
ResumeThread
FreeLibraryAndExitThread
GetModuleHandleExW
ExitProcess
GetStdHandle
GetACP
HeapReAlloc
GetFileType
GetTimeZoneInformation
GetDateFormatW
GetTimeFormatW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
GetConsoleCP
GetConsoleMode
user32
SetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetClassNameW
IsWindowVisible
GetWindowThreadProcessId
GetWindowLongW
wvsprintfW
DialogBoxParamW
SetWindowLongW
DestroyWindow
CreateDialogParamW
GetSystemMetrics
SetRectEmpty
IsIconic
SetForegroundWindow
GetWindowTextLengthW
GetWindowRect
MessageBoxW
FillRect
ScreenToClient
SendMessageW
EndDialog
SetWindowTextW
SetTimer
LoadIconW
GetDlgItem
DrawTextW
InvalidateRect
BeginPaint
EndPaint
GetWindowTextW
ShowWindow
FindWindowW
gdi32
DeleteObject
MoveToEx
Rectangle
CreatePen
LineTo
SetBkMode
SetTextColor
PolyBezier
CreateFontW
CreateCompatibleDC
CreateDIBSection
SelectObject
CreateCompatibleBitmap
BitBlt
CreateSolidBrush
RoundRect
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
imm32
ImmDisableIME
psapi
GetProcessMemoryInfo
msimg32
AlphaBlend
wininet
InternetOpenUrlW
InternetOpenW
HttpQueryInfoW
InternetCloseHandle
InternetSetOptionW
advapi32
RegCreateKeyExW
GetTokenInformation
LookupAccountSidW
OpenProcessToken
RegQueryValueExW
RegOpenKeyExW
RegOpenKeyW
GetSecurityDescriptorSacl
SetSecurityDescriptorDacl
BuildExplicitAccessWithNameW
SetEntriesInAclW
SetNamedSecurityInfoW
GetNamedSecurityInfoW
SetSecurityDescriptorSacl
InitializeSecurityDescriptor
InitializeAcl
SetSecurityInfo
ConvertStringSecurityDescriptorToSecurityDescriptorW
AddAccessAllowedAceEx
GetLengthSid
RegCloseKey
RegSetValueExW
shell32
SHFileOperationW
SHGetFolderPathW
ShellExecuteW
Sections
.text Size: 371KB - Virtual size: 370KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 31KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 282KB - Virtual size: 284KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE