Rounded[.]Corners[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

Rounded.Corners.exe
Size

5.5MB
MD5

38fe323820415aded43f467bb1dc0fd9
SHA1

6610a35b82b8a7c7b62e963778f47544454c48a3
SHA256

222f7b8483b6be826cf071491325d2054a6f31ad3fec78a7b82dd17ff7df00ef
SHA512

6da35c5478dabbc47873295be48a04d390b90b33addd0f4ff3c9b9683a0397e6476adaacc6beda44e78d8314daf1a724ce147abab48c30ce60914b18da2dd1aa
SSDEEP

49152:GTcG6/gVBNFaxQgd/qX1tRz1QVh1mqjHorzysYORY2etp8iZ9Ndp+LX9M4+Rxht:jrKtEZmqTorboZ4+Rxh

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Rounded.Corners.exe

Files

Rounded.Corners.exe
.exe windows:6 windows x64 arch:x64

ac031afd48dce6b1947d8a8afca4c3b8

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB Paths

D:\Developer\app\RoundedCorners\app\src-tauri\target\release\deps\roundedcorners.pdb

Imports

kernel32

RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
RtlUnwindEx
RtlPcToFileHeader
RaiseException
lstrlenW
InitializeSListHead
GetUserDefaultUILanguage
EncodePointer
GetCurrentThreadId
GetSystemTimeAsFileTime
CreateThread
LoadLibraryA
WriteConsoleW
MultiByteToWideChar
LCIDToLocaleName
GetFullPathNameW
ExitProcess
CloseHandle
GetTempPathW
TryAcquireSRWLockExclusive
GetFinalPathNameByHandleW
LoadLibraryW
FindFirstFileW
CreateDirectoryW
GetFileInformationByHandleEx
CreateFileW
CreateMutexA
WaitForSingleObjectEx
AcquireSRWLockShared
SleepConditionVariableSRW
HeapReAlloc
QueryPerformanceFrequency
QueryPerformanceCounter
GetFileAttributesW
GetModuleFileNameW
GetLastError
OutputDebugStringA
OutputDebugStringW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
LoadLibraryExW
TlsGetValue
TlsSetValue
GetModuleHandleW
ReleaseSRWLockExclusive
FreeLibrary
GetEnvironmentVariableW
ReleaseSRWLockShared
GetSystemInfo
GetProcessHeap
HeapAlloc
HeapFree
WaitForSingleObject
WakeConditionVariable
WakeAllConditionVariable
TerminateProcess
FormatMessageW
Sleep
GetModuleHandleA
GetProcAddress
GetFileInformationByHandle
GetConsoleMode
TlsFree
ReleaseMutex
FindClose
AddVectoredExceptionHandler
SetThreadStackGuarantee
SwitchToThread
GetCurrentProcess
GetCurrentThread
RtlCaptureContext
RtlLookupFunctionEntry
SetLastError
GetCurrentDirectoryW
SetEnvironmentVariableW
AcquireSRWLockExclusive
GetCurrentProcessId
GetCommandLineW
GetStdHandle

user32

CreateIcon
ToUnicodeEx
MonitorFromRect
GetRawInputData
VkKeyScanW
MapVirtualKeyExW
GetKeyState
GetAsyncKeyState
GetKeyboardState
GetMessageA
DispatchMessageA
GetWindowTextW
TrackMouseEvent
DestroyWindow
GetWindowLongW
GetWindowTextLengthW
SetWindowTextW
CreateAcceleratorTableW
DestroyAcceleratorTable
IsProcessDPIAware
GetUpdateRect
GetClientRect
SystemParametersInfoA
IsWindowVisible
AdjustWindowRectEx
GetWindowRect
MonitorFromPoint
EnumDisplayMonitors
TrackPopupMenu
ClientToScreen
GetTouchInputInfo
ScreenToClient
CloseTouchInputHandle
PostThreadMessageW
GetCursorPos
SetForegroundWindow
ValidateRect
DispatchMessageW
TranslateMessage
GetKeyboardLayout
MonitorFromWindow
PostQuitMessage
SendInput
AppendMenuW
PeekMessageW
RegisterClassW
SetCursor
RedrawWindow
PostMessageW
InvalidateRgn
CreatePopupMenu
CreateMenu
SetMenuItemInfoW
DestroyIcon
GetWindowLongPtrW
SetWindowDisplayAffinity
GetMenu
ShowCursor
ClipCursor
GetClipCursor
SetWindowLongW
SendMessageW
GetSystemMenu
ShowWindow
CheckMenuItem
EnableMenuItem
SetCapture
SetWindowLongPtrW
MsgWaitForMultipleObjectsEx
RegisterRawInputDevices
RegisterClassExW
RegisterWindowMessageA
SetWindowPos
RegisterTouchWindow
EnumChildWindows
GetSystemMetrics
IsWindow
GetDC
SetCursorPos
GetForegroundWindow
GetActiveWindow
IsIconic
SetMenu
ReleaseCapture
GetWindowPlacement
SetWindowPlacement
ChangeDisplaySettingsExW
FlashWindowEx
DefWindowProcW
TranslateAcceleratorW
GetAncestor
GetMessageW
MapVirtualKeyW
LoadCursorW
GetMonitorInfoW
CreateWindowExW

comctl32

SetWindowSubclass
DefSubclassProc
RemoveWindowSubclass

gdi32

GetDeviceCaps
CreateRectRgn
DeleteObject

dwmapi

DwmEnableBlurBehindWindow

ole32

RegisterDragDrop
CoInitializeEx
OleInitialize
CreateStreamOnHGlobal
CoTaskMemAlloc
CoTaskMemFree
CoCreateInstance
CoUninitialize
RevokeDragDrop

shell32

Shell_NotifyIconW
DragFinish
SHAppBarMessage
DragQueryFileW
SHGetKnownFolderPath
Shell_NotifyIconGetRect

uxtheme

SetWindowTheme

advapi32

RegGetValueW
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
EventUnregister
EventWriteTransfer
EventSetInformation
EventRegister
SystemFunction036

oleaut32

SetErrorInfo
GetErrorInfo
SysStringLen
SysFreeString

bcrypt

BCryptGenRandom

ntdll

RtlNtStatusToDosError
NtReadFile
NtWriteFile

api-ms-win-crt-math-l1-1-0

round
pow
trunc
__setusermatherr
floor

api-ms-win-crt-string-l1-1-0

strcpy_s
_wcsicmp
wcslen
wcsncmp

api-ms-win-crt-convert-l1-1-0

wcstol
_ultow_s

api-ms-win-crt-runtime-l1-1-0

exit
_exit
_initterm_e
_initialize_onexit_table
_get_initial_narrow_environment
_initialize_narrow_environment
_configure_narrow_argv
__p___argc
__p___argv
_cexit
_c_exit
_set_app_type
_register_thread_local_exe_atexit_callback
abort
_seh_filter_exe
terminate
_crt_atexit
_register_onexit_function
_initterm

api-ms-win-crt-stdio-l1-1-0

__p__commode
_set_fmode

api-ms-win-crt-locale-l1-1-0

_configthreadlocale

api-ms-win-crt-heap-l1-1-0

_callnewh
free
_set_new_mode
malloc
calloc

Sections

.text
Size: 3.6MB - Virtual size: 3.6MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1.7MB - Virtual size: 1.7MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 175KB - Virtual size: 174KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 348B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 27KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

ac031afd48dce6b1947d8a8afca4c3b8

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

comctl32

gdi32

dwmapi

ole32

shell32

uxtheme

advapi32

oleaut32

bcrypt

ntdll

api-ms-win-crt-math-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-locale-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 3.6MB - Virtual size: 3.6MB

.rdata Size: 1.7MB - Virtual size: 1.7MB

.data Size: 1KB - Virtual size: 5KB

.pdata Size: 175KB - Virtual size: 174KB

_RDATA Size: 512B - Virtual size: 348B

.rsrc Size: 25KB - Virtual size: 24KB

.reloc Size: 28KB - Virtual size: 27KB

.text
Size: 3.6MB - Virtual size: 3.6MB

.rdata
Size: 1.7MB - Virtual size: 1.7MB

.data
Size: 1KB - Virtual size: 5KB

.pdata
Size: 175KB - Virtual size: 174KB

_RDATA
Size: 512B - Virtual size: 348B

.rsrc
Size: 25KB - Virtual size: 24KB

.reloc
Size: 28KB - Virtual size: 27KB