D:\My Proggies 2019\EMDB\Release\EMDB.pdb
Static task
static1
Behavioral task
behavioral1
Sample
acfca6707217e2f2b9a964ae872948fc.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
acfca6707217e2f2b9a964ae872948fc.exe
Resource
win10v2004-20240226-en
General
-
Target
acfca6707217e2f2b9a964ae872948fc
-
Size
7.5MB
-
MD5
acfca6707217e2f2b9a964ae872948fc
-
SHA1
5f7c3a673a5cf7ab310163fe14d9a4295ce4c250
-
SHA256
3642c1f4dbcd1f14ef5fb20837d62414e24b2533b29fa8a16abb9a00609a3188
-
SHA512
78031485591dcbde42904a20b024d70b82bed607a825c1f25df3feccdbbb78f3467ea14521599c119e8a410f81e758dc83f4979fc7d42ac6791d8d97abd8a949
-
SSDEEP
196608:zeEQb3TyCf23oamIZBRhFoeJb7LQTBlF:zevOCVaVXJb7iBD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource acfca6707217e2f2b9a964ae872948fc
Files
-
acfca6707217e2f2b9a964ae872948fc.exe windows:6 windows x86 arch:x86
23dfa544f632d86ce6660589c3ee81f1
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
kernel32
GetStdHandle
QueryPerformanceFrequency
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
SetStdHandle
GetCommandLineW
GetCommandLineA
FreeLibraryAndExitThread
SetCurrentDirectoryW
GetModuleHandleExW
PeekNamedPipe
GetFileType
GetFileInformationByHandle
GetDriveTypeW
MoveFileExW
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
OutputDebugStringW
GetTimeZoneInformation
GetTimeFormatW
LCMapStringW
IsValidLocale
GetStringTypeW
IsValidCodePage
GetACP
GetOEMCP
GetConsoleCP
GetConsoleMode
SetFilePointerEx
ReadConsoleW
SetConsoleCtrlHandler
FindFirstFileExW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
WaitForSingleObjectEx
ResetEvent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LocalUnlock
LocalLock
ReplaceFileW
GetTempFileNameW
GetDiskFreeSpaceW
SearchPathW
EnumSystemLocalesW
GetProfileIntW
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
lstrcpyW
SetErrorMode
SetFileTime
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetCurrentDirectoryW
FindResourceExW
GetSystemDefaultUILanguage
GlobalFlags
GetAtomNameW
GlobalGetAtomNameW
InitializeCriticalSectionAndSpinCount
GetThreadLocale
GetStringTypeExW
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetShortPathNameW
GetFullPathNameW
GetFileSize
FlushFileBuffers
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CompareStringA
GetCurrentThread
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
lstrcmpA
SystemTimeToFileTime
GetCurrentProcessId
ResumeThread
SetThreadPriority
CreateEventW
SetEvent
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileW
FindFirstFileW
FindClose
FileTimeToLocalFileTime
VirtualProtect
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
LoadLibraryExW
GetModuleHandleA
GetModuleFileNameW
GetSystemDirectoryW
GetCurrentThreadId
EncodePointer
OutputDebugStringA
MulDiv
GlobalFree
SetLastError
ExitProcess
GlobalLock
GlobalUnlock
GlobalSize
GlobalAlloc
lstrcpynW
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
RaiseException
DecodePointer
TerminateThread
LoadLibraryW
FreeLibrary
SuspendThread
GetUserDefaultLCID
EnumDateFormatsExW
GetLocaleInfoW
WideCharToMultiByte
CompareStringW
GetDateFormatW
FormatMessageW
LocalFree
GetProcAddress
GetCurrentProcess
DeviceIoControl
GetLastError
CloseHandle
GetTempPathW
RemoveDirectoryW
GetVolumeInformationW
CreateFileW
GetModuleHandleW
GetUserDefaultUILanguage
WriteConsoleW
SetFileAttributesW
GetFileAttributesW
MoveFileW
CreateMutexW
WaitForSingleObject
ReleaseMutex
GetCPInfo
lstrlenW
lstrcmpiW
GetVersionExW
GetVersion
GetTickCount
GetExitCodeThread
ExitThread
Sleep
DeleteFileW
CreateDirectoryW
MultiByteToWideChar
CopyFileW
FindResourceW
SizeofResource
LockResource
LoadResource
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
CreateThread
user32
GetDlgItemTextW
SetDlgItemTextW
GetDlgItemInt
SetDlgItemInt
MoveWindow
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetTopWindow
GetClassLongW
EqualRect
MapWindowPoints
MessageBoxW
AdjustWindowRectEx
ShowScrollBar
GetScrollRange
SetScrollRange
ScrollWindow
ValidateRect
EndPaint
BeginPaint
SetActiveWindow
TrackPopupMenuEx
TrackPopupMenu
SetMenu
GetMenu
GetDlgCtrlID
GetDlgItem
SetWindowPlacement
GetWindowPlacement
SetWindowPos
DestroyWindow
IsChild
CreateWindowExW
GetClassInfoExW
RegisterClassW
GetMessageTime
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetWindowTextLengthW
GetWindowTextW
GetScrollPos
SetFocus
GetMenuStringW
SetScrollPos
BringWindowToTop
RegisterWindowMessageW
GetWindow
ShowWindow
UnregisterClassW
DefWindowProcW
RemovePropW
GetPropW
SetPropW
SetWindowRgn
IsZoomed
CallWindowProcW
GetClassNameW
GetWindowRgn
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
CheckDlgButton
SetLayeredWindowAttributes
LoadIconW
DrawIcon
CheckMenuItem
LoadMenuW
EmptyClipboard
SetClipboardData
IsIconic
GetCapture
UpdateWindow
GetAsyncKeyState
IsWindow
GetMessagePos
EnumDisplayMonitors
GetMenuBarInfo
PeekMessageW
RedrawWindow
SendInput
FindWindowW
SetForegroundWindow
TranslateAcceleratorW
LoadAcceleratorsW
GetClassInfoW
ReleaseCapture
SetCapture
SetWindowLongW
LockWindowUpdate
GetIconInfo
CreateIconIndirect
LoadImageW
DestroyCursor
GetWindowLongW
UnpackDDElParam
ReuseDDElParam
CharNextW
CopyAcceleratorTableW
EnableWindow
GetWindowRect
SetCursor
LoadCursorW
OffsetRect
FrameRect
DrawFocusRect
WindowFromPoint
DrawStateW
GetActiveWindow
GetNextDlgTabItem
IsMenu
PostMessageW
GetLastActivePopup
GetParent
PtInRect
InflateRect
ScreenToClient
ClientToScreen
CheckRadioButton
IsDlgButtonChecked
SendDlgItemMessageW
IsWindowEnabled
ScrollWindowEx
SetWindowTextW
IsDialogMessageW
GetWindowDC
CreateDialogIndirectParamW
EndDialog
MapDialogRect
GetKeyNameTextW
MapVirtualKeyW
GetWindowThreadProcessId
DestroyMenu
IntersectRect
SetRectEmpty
GetCursorPos
GetForegroundWindow
SystemParametersInfoW
DrawIconEx
DestroyIcon
LoadBitmapW
GetDesktopWindow
CopyRect
SetRect
FillRect
GetSysColorBrush
ReleaseDC
PostQuitMessage
ShowOwnedPopups
SetWindowContextHelpId
GetNextDlgGroupItem
GetDialogBaseUnits
CharUpperW
RealChildWindowFromPoint
CopyImage
SendDlgItemMessageA
BeginDeferWindowPos
InvalidateRgn
IsRectEmpty
TrackMouseEvent
GetMenuDefaultItem
SetParent
UnionRect
RegisterClipboardFormatW
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
GetTabbedTextExtentW
SendMessageW
GetClientRect
GetMessageW
TranslateMessage
DispatchMessageW
OpenClipboard
CloseClipboard
GetClipboardData
GetFocus
GetKeyState
SetTimer
InvalidateRect
MessageBeep
KillTimer
GetSystemMenu
EnableMenuItem
GetSysColor
GetSystemMetrics
DrawEdge
GetMenuState
CreateMenu
CreatePopupMenu
GetSubMenu
GetMenuItemID
GetMenuItemCount
InsertMenuW
AppendMenuW
ModifyMenuW
RemoveMenu
DeleteMenu
GetMenuItemInfoW
DrawTextW
DrawTextExW
GrayStringW
TabbedTextOutW
GetDC
WindowFromDC
InSendMessage
MonitorFromRect
SendNotifyMessageW
InsertMenuItemW
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
EnumChildWindows
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffW
GetDoubleClickTime
SetMenuDefaultItem
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
WaitMessage
GetComboBoxInfo
MonitorFromPoint
UpdateLayeredWindow
PostThreadMessageW
GetDCEx
CopyIcon
SetCursorPos
DrawFrameControl
GetMonitorInfoW
SetClassLongW
gdi32
StretchBlt
SetTextColor
GetBkColor
GetCurrentObject
GetTextColor
AddFontResourceExW
GetTextMetricsW
GetViewportOrgEx
SetViewportOrgEx
StartDocW
EndDoc
StartPage
EndPage
AbortDoc
CreateRectRgn
OffsetRgn
SetRectRgn
DPtoLP
CombineRgn
CreateRectRgnIndirect
Polygon
RoundRect
CreateDIBPatternBrushPt
GetClipBox
GetDIBits
RestoreDC
RealizePalette
SaveDC
ExtSelectClipRgn
SetBkMode
SetDIBitsToDevice
StretchDIBits
SetStretchBltMode
SetBrushOrgEx
CopyMetaFileW
CreateDCW
CreatePatternBrush
ExcludeClipRect
GetClipRgn
GetCurrentPositionEx
GetObjectType
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
SelectClipRgn
SelectPalette
SetMapperFlags
SetGraphicsMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextCharacterExtra
GetStockObject
SetTextJustification
PlayMetaFileRecord
EnumMetaFile
SetWorldTransform
ModifyWorldTransform
SetColorAdjustment
ArcTo
PolyDraw
SelectClipPath
SetArcDirection
ExtCreatePen
MoveToEx
PolyBezierTo
PolylineTo
SetViewportExtEx
SetWindowExtEx
SetWindowOrgEx
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
GetMapMode
CreateFontW
GetCharWidthW
SetAbortProc
EnumFontFamiliesExW
GetRgnBox
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetDIBColorTable
CreateEllipticRgn
CreatePolygonRgn
Polyline
CreateRoundRectRgn
LPtoDP
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
CloseMetaFile
CreateMetaFileW
DeleteMetaFile
GetROP2
GetNearestColor
GetPolyFillMode
GetStretchBltMode
GetTextAlign
GetTextFaceW
CreateBitmap
ExtTextOutW
TextOutW
GetObjectW
CreateDIBSection
SetPixel
SelectObject
Rectangle
RectVisible
PtVisible
PatBlt
GetTextExtentPoint32W
GetPixel
GetDeviceCaps
GetBkMode
Escape
Ellipse
DeleteObject
DeleteDC
CreateSolidBrush
CreatePen
CreateHatchBrush
CreateFontIndirectW
CreateCompatibleDC
CreateCompatibleBitmap
SetTextAlign
SetBkColor
BitBlt
msimg32
AlphaBlend
TransparentBlt
winspool.drv
GetJobW
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
GetFileSecurityW
RegOpenKeyExW
RegQueryValueExW
RegSetValueW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyW
RegQueryValueW
RegEnumValueW
RegEnumKeyExW
SetFileSecurityW
RegCloseKey
shell32
DragQueryFileW
DragAcceptFiles
ShellExecuteExW
SHGetFolderPathW
SHFileOperationW
SHGetFileInfoW
DragFinish
SHAddToRecentDocs
ExtractIconW
SHGetPathFromIDListW
SHAppBarMessage
SHBrowseForFolderW
SHGetMalloc
SHGetDesktopFolder
SHGetSpecialFolderLocation
ShellExecuteW
comctl32
ImageList_GetImageCount
ImageList_ReplaceIcon
ImageList_Draw
ImageList_AddMasked
ImageList_GetIcon
ImageList_GetIconSize
_TrackMouseEvent
ImageList_GetImageInfo
ImageList_Remove
ImageList_SetBkColor
ImageList_GetBkColor
shlwapi
PathFindExtensionW
PathFindFileNameW
PathRemoveExtensionW
PathIsDirectoryW
PathIsUNCW
PathStripToRootW
UrlUnescapeW
StrFormatKBSizeW
PathRemoveFileSpecW
uxtheme
GetCurrentThemeName
GetThemeColor
DrawThemeParentBackground
IsAppThemed
GetWindowTheme
GetThemePartSize
DrawThemeBackground
CloseThemeData
OpenThemeData
DrawThemeText
IsThemeBackgroundPartiallyTransparent
GetThemeSysColor
ole32
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
PropVariantCopy
OleSetMenuDescriptor
OleLockRunning
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
CreateFileMoniker
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleRegGetMiscStatus
OleRegEnumVerbs
WriteClassStm
GetHGlobalFromILockBytes
CreateGenericComposite
CreateItemMoniker
OleCreate
OleQueryCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateLinkToFile
OleCreateFromFile
OleLoad
OleSave
OleSaveToStream
OleSetContainedObject
OleGetIconOfClass
CreateDataAdviseHolder
CreateOleAdviseHolder
GetRunningObjectTable
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CoRevokeClassObject
CoRegisterClassObject
CreateStreamOnHGlobal
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
OleRun
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
StringFromGUID2
CLSIDFromProgID
CLSIDFromString
CoInitialize
CoCreateGuid
CoCreateInstance
CoInitializeEx
CoUninitialize
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CreateBindCtx
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
OleIsRunning
CoRegisterMessageFilter
DoDragDrop
OleGetClipboard
OleQueryLinkFromData
OleCreateFromData
CoGetMalloc
oleaut32
SafeArrayDestroy
SafeArrayRedim
SafeArrayGetDim
SafeArrayGetElemsize
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayLock
SafeArrayUnlock
SafeArrayAccessData
SafeArrayDestroyData
SafeArrayGetElement
SafeArrayPutElement
SafeArrayCopy
SafeArrayPtrOfIndex
VariantCopy
VarCyFromStr
SysStringLen
VarBstrFromDec
VarDecFromStr
OleCreateFontIndirect
SafeArrayDestroyDescriptor
SafeArrayCreate
SafeArrayAllocData
SafeArrayUnaccessData
LoadRegTypeLi
SysFreeString
LoadTypeLi
SysAllocString
VariantChangeType
VariantClear
VariantInit
SysAllocStringLen
SysAllocStringByteLen
SysStringByteLen
VarDateFromStr
VariantTimeToSystemTime
SystemTimeToVariantTime
SysReAllocStringLen
SafeArrayAllocDescriptor
VarBstrFromCy
VarBstrFromDate
RegisterTypeLi
oledlg
OleUIBusyW
winmm
PlaySoundW
gdiplus
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromFile
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromScan0
GdipGetImageWidth
GdipBitmapUnlockBits
GdipDeleteGraphics
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
GdipCreateFromHDC
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdipGetImageHeight
GdiplusStartup
GdiplusShutdown
GdipFree
GdipBitmapLockBits
GdipAlloc
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
wininet
InternetErrorDlg
InternetGetCookieW
InternetSetCookieW
HttpQueryInfoW
HttpEndRequestW
HttpSendRequestExW
HttpSendRequestW
HttpAddRequestHeadersW
HttpOpenRequestW
GopherGetAttributeW
GopherOpenFileW
GopherFindFirstFileW
GopherCreateLocatorW
FtpCommandW
FtpGetCurrentDirectoryW
FtpSetCurrentDirectoryW
FtpRemoveDirectoryW
FtpCreateDirectoryW
FtpOpenFileW
FtpRenameFileW
FtpDeleteFileW
FtpPutFileW
FtpGetFileW
FtpFindFirstFileW
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetSetOptionW
InternetQueryOptionW
InternetFindNextFileW
InternetQueryDataAvailable
InternetWriteFile
InternetSetFilePointer
InternetReadFile
InternetOpenUrlW
InternetConnectW
InternetCloseHandle
InternetOpenW
InternetCanonicalizeUrlW
InternetCrackUrlW
imm32
ImmGetContext
ImmReleaseContext
ImmGetOpenStatus
Sections
.text Size: 4.8MB - Virtual size: 4.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 1022KB - Virtual size: 1022KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 61KB - Virtual size: 122KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ