C:\home\k-aki\work\solfasys_vs16\solfasys\solfasys\Release\solfasys.pdb
Static task
static1
General
-
Target
あさろり2.exe
-
Size
3.4MB
-
MD5
b6880de911166d7aebad3ae95586869a
-
SHA1
369645896f8ac409bc4ba829173ddffeaac76743
-
SHA256
bf00fcb1a632d8c6c22bde72a3c014f5147a4b35628df1e050a51e7da8279335
-
SHA512
f3e735a5d05a7fbf2a7c664d794b5b303804d3dc0a26e5fa9b01939af089b56859a80344f50e43147b0596a04112a1084f6946e60907141550e8ba6967e823cd
-
SSDEEP
49152:iE2Sf9rMy8vKKxkFiKn/HxxO7M6WVjU38EiKs/Hnswc1fIKheXc9SyIJEhGl:9Kxzu/tj0iKsUfIKcPd3l
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource あさろり2.exe
Files
-
あさろり2.exe.exe windows:5 windows x86 arch:x86
1cedf5a74f4ed4a73e4556710800a023
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
FlushFileBuffers
CreateMutexW
ReleaseMutex
GetLastError
SetThreadPriority
WaitForSingleObject
CreateEventW
SetEvent
GetVersion
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetFullPathNameW
CreateDirectoryW
RemoveDirectoryW
GetFileAttributesW
DeleteFileW
GetFileSize
FindFirstFileW
FindNextFileW
FindClose
Sleep
InitializeCriticalSectionAndSpinCount
RaiseException
DecodePointer
LoadLibraryW
GetProcAddress
CreateProcessW
GlobalAlloc
GlobalFree
GlobalLock
lstrcpyW
GlobalUnlock
GetStringTypeW
SetLastError
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
lstrlenW
EncodePointer
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
OutputDebugStringW
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
FreeLibrary
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetTimeZoneInformation
IsValidCodePage
GetOEMCP
ReadFile
GetSystemInfo
VirtualAlloc
VirtualProtect
VirtualQuery
GetStdHandle
GetModuleFileNameA
ExitProcess
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
HeapFree
HeapAlloc
GetFileType
SetFilePointerEx
GetConsoleMode
HeapReAlloc
FindFirstFileExA
FindNextFileA
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
SetStdHandle
GetProcessHeap
HeapSize
GetConsoleCP
WriteConsoleW
FindResourceW
LoadResource
LockResource
SizeofResource
GetModuleFileNameW
GetCommandLineW
WaitForMultipleObjects
WideCharToMultiByte
MultiByteToWideChar
CloseHandle
CreateFileW
SetFilePointer
GetCurrentThreadId
WriteFile
VirtualFree
GetACP
GetModuleHandleW
lstrcmpW
user32
MonitorFromWindow
SetWindowPos
DestroyWindow
GetFocus
GetMenu
GetWindowRect
ShowWindowAsync
OpenIcon
AdjustWindowRectEx
CloseWindow
DefWindowProcW
ChangeDisplaySettingsExW
GetWindowLongW
EndPaint
BeginPaint
ReleaseDC
GetDC
FindWindowW
SetCursor
GetDlgItem
DialogBoxIndirectParamW
EndDialog
LoadMenuW
GetSubMenu
CreateWindowExW
EnumDisplaySettingsW
UpdateWindow
SetForegroundWindow
LoadImageW
InvalidateRect
IsIconic
ShowCursor
GetKeyState
ScreenToClient
TrackMouseEvent
GetCursorPos
SendMessageW
SystemParametersInfoW
GetMessageW
DispatchMessageW
PeekMessageW
TranslateMessage
PostQuitMessage
MsgWaitForMultipleObjects
SetWindowTextW
GetSystemMetrics
MessageBoxW
LoadStringW
MonitorFromPoint
MonitorFromRect
RegisterClassExW
OpenClipboard
CloseClipboard
GetWindowPlacement
ShowWindow
IsWindow
GetMonitorInfoW
RegisterClassW
SetWindowPlacement
IsRectEmpty
LoadIconW
LoadCursorW
wsprintfW
SetWindowLongW
GetClientRect
IsZoomed
TrackPopupMenu
IsClipboardFormatAvailable
SetClipboardData
GetClipboardData
EmptyClipboard
GetDesktopWindow
shlwapi
AssocQueryStringW
winmm
joyGetPosEx
timeSetEvent
joyGetDevCapsW
timeGetDevCaps
timeEndPeriod
timeGetTime
timeBeginPeriod
timeKillEvent
imm32
ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow
gdi32
GetTextMetricsW
GetOutlineTextMetricsW
SetMapMode
CreateFontW
DeleteObject
GetGlyphOutlineW
GetStockObject
DeleteDC
CreateCompatibleDC
CreateDIBSection
SelectObject
TranslateCharsetInfo
EnumFontFamiliesExW
GetTextExtentPoint32W
StretchBlt
SetStretchBltMode
SetBrushOrgEx
BitBlt
advapi32
GetUserNameW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegCloseKey
RegQueryValueExW
shell32
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetMalloc
ShellExecuteW
msacm32
acmStreamClose
acmStreamSize
acmStreamConvert
acmStreamUnprepareHeader
acmStreamPrepareHeader
acmFormatSuggest
acmStreamOpen
comdlg32
GetOpenFileNameW
GetSaveFileNameW
ole32
CoInitializeEx
CoUninitialize
CoCreateInstance
Sections
.text Size: 2.7MB - Virtual size: 2.7MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 506KB - Virtual size: 505KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 111KB - Virtual size: 132KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 62KB - Virtual size: 61KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ