E:\mdz\VC Project\Gaming Mouse\兮宸\23-08-12 GamingMouse 双模 Eagle\Release\GamingMS.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8e7926228ea88914ad42f15ce747cf8f23d36fd682e5bca3b5b714f17f164584.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
8e7926228ea88914ad42f15ce747cf8f23d36fd682e5bca3b5b714f17f164584.exe
Resource
win10v2004-20240226-en
General
-
Target
8e7926228ea88914ad42f15ce747cf8f23d36fd682e5bca3b5b714f17f164584
-
Size
8.4MB
-
MD5
a8330a9237cbfe4906799bb8ccdcdbcc
-
SHA1
b1754b3f276bfea638d148bce3018858fab18c32
-
SHA256
8e7926228ea88914ad42f15ce747cf8f23d36fd682e5bca3b5b714f17f164584
-
SHA512
0cb2ea709d85b1b8c0cc81a884a8801b20a556942cee8d3f4b96d94edd3d3139157be0e66c9e5ea42c69642bf22beea1aae8d0c2303e3784e27e699ce466ee25
-
SSDEEP
98304:wHd9GwWEXVzZr64uDr+ikrIyNbQRk+NR5:eGu364unanNbQRkk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8e7926228ea88914ad42f15ce747cf8f23d36fd682e5bca3b5b714f17f164584
Files
-
8e7926228ea88914ad42f15ce747cf8f23d36fd682e5bca3b5b714f17f164584.exe windows:5 windows x86 arch:x86
206b508b044b1b27a67a370c0b3026e8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetStdHandle
QueryPerformanceFrequency
VirtualQuery
VirtualAlloc
GetSystemInfo
HeapQueryInformation
GetFileType
SetStdHandle
SetFilePointerEx
ExitThread
CreateThread
GetCommandLineW
GetCommandLineA
RtlUnwind
OutputDebugStringW
ExitProcess
GetACP
GetStringTypeW
LCMapStringW
GetConsoleCP
GetConsoleMode
GetModuleHandleExW
ReadConsoleW
GetTimeZoneInformation
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
WaitForSingleObjectEx
ResetEvent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
SearchPathW
GetProfileIntW
GetTempPathW
GetTempFileNameW
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
FindResourceExW
lstrcpyW
SetErrorMode
VirtualProtect
GlobalGetAtomNameW
GlobalFlags
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSection
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
GetThreadLocale
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
DeleteFileW
CopyFileW
FormatMessageW
MulDiv
LocalFree
GlobalSize
GetCurrentProcessId
ResumeThread
SuspendThread
SetThreadPriority
CreateEventW
WaitForSingleObject
SetEvent
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
GlobalFree
GlobalFindAtomW
GlobalAddAtomW
LoadLibraryW
LoadLibraryA
GetProcAddress
GetModuleHandleW
GetModuleHandleA
GetSystemDirectoryW
SetLastError
EncodePointer
OutputDebugStringA
lstrcmpW
lstrcmpA
GlobalDeleteAtom
LoadLibraryExW
FreeLibrary
GetVersionExW
GetCurrentThreadId
GetCurrentThread
FreeResource
GlobalUnlock
GlobalLock
GlobalAlloc
WideCharToMultiByte
lstrlenA
MultiByteToWideChar
lstrlenW
GetProcessHeap
CreateMutexW
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
HeapFree
InterlockedExchange
GetTickCount
ReadFile
CloseHandle
CreateFileW
Sleep
GetCurrentDirectoryW
WinExec
CreateDirectoryW
GetModuleFileNameW
InitializeCriticalSectionAndSpinCount
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
FindResourceW
LoadResource
LockResource
SizeofResource
GetLastError
FreeLibraryAndExitThread
WriteConsoleW
user32
CharUpperW
GetMenuItemInfoW
DestroyMenu
InflateRect
IsDialogMessageW
SetWindowTextW
CheckDlgButton
MoveWindow
ShowWindow
ClientToScreen
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
DrawTextW
RemoveMenu
InsertMenuW
GetMenuState
GetMenuStringW
GetWindowThreadProcessId
SetCursor
ShowOwnedPopups
TranslateMessage
GetMessageW
SetMenuItemInfoW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
EnableMenuItem
CheckMenuItem
GetDesktopWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
EndDialog
CreateDialogIndirectParamW
MapDialogRect
SetWindowContextHelpId
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
CallNextHookEx
SetWindowsHookExW
GetWindow
GetLastActivePopup
GetTopWindow
GetClassNameW
GetClassLongW
EqualRect
GetSysColor
MapWindowPoints
MessageBoxW
AdjustWindowRectEx
GetKeyNameTextW
GetWindowTextW
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
RedrawWindow
ValidateRect
EndPaint
BeginPaint
GetForegroundWindow
SetActiveWindow
SetRectEmpty
TrackPopupMenu
GetMenuItemCount
GetMenuItemID
GetSubMenu
UnionRect
GetSystemMenu
SetParent
PtInRect
FindWindowW
SendMessageW
GetClassInfoW
LoadIconW
SetMenu
GetMenu
GetCapture
GetKeyState
GetFocus
SetFocus
GetDlgCtrlID
GetDlgItem
IsWindowVisible
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
DestroyWindow
RegisterClipboardFormatW
OffsetRect
GetSysColorBrush
GetAsyncKeyState
CharNextW
CopyAcceleratorTableW
InvalidateRgn
GetNextDlgGroupItem
MessageBeep
DestroyIcon
BringWindowToTop
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
LoadImageW
IsChild
IsMenu
CreateWindowExW
MapVirtualKeyW
LoadMenuW
WaitMessage
WindowFromPoint
CopyImage
DeleteMenu
RealChildWindowFromPoint
GetWindowTextLengthW
SendDlgItemMessageA
GetSystemMetrics
GetDC
GetClientRect
SetTimer
IsIconic
DrawIcon
SetRect
InvalidateRect
KillTimer
GetWindowRect
SetForegroundWindow
PostMessageW
LoadBitmapW
SystemParametersInfoW
RegisterDeviceNotificationW
GetKeyboardLayout
GetWindowLongW
SetWindowLongW
SetLayeredWindowAttributes
SetWindowPos
GetCursorPos
CreatePopupMenu
AppendMenuW
ReleaseDC
EnableWindow
GetParent
UnregisterClassW
FillRect
UpdateWindow
CopyRect
SetWindowRgn
IsRectEmpty
IntersectRect
IsZoomed
ScreenToClient
SetCapture
ReleaseCapture
IsWindow
LoadCursorW
UpdateLayeredWindow
PostQuitMessage
UnhookWindowsHookEx
RegisterWindowMessageW
DrawFocusRect
DrawIconEx
GetIconInfo
EnableScrollBar
UnpackDDElParam
ReuseDDElParam
TrackMouseEvent
GetMenuDefaultItem
DispatchMessageW
PeekMessageW
GetMessagePos
GetMessageTime
DefWindowProcW
CallWindowProcW
RegisterClassW
GetClassInfoExW
HideCaret
InvertRect
NotifyWinEvent
EnumDisplayMonitors
SetClassLongW
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
SetCursorPos
CopyIcon
FrameRect
PostThreadMessageW
LockWindowUpdate
MonitorFromPoint
GetComboBoxInfo
DestroyCursor
GetWindowRgn
CreateMenu
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffW
ModifyMenuW
GetDoubleClickTime
SetMenuDefaultItem
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
gdi32
PtInRegion
GetPixel
CreateSolidBrush
SetPixel
GetStockObject
CreateFontIndirectW
CreateRectRgn
CombineRgn
CopyMetaFileW
CreateHatchBrush
CreatePatternBrush
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkMode
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
MoveToEx
TextOutW
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
CreatePolygonRgn
OffsetViewportOrgEx
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateRectRgnIndirect
GetMapMode
PatBlt
SetRectRgn
DPtoLP
GetTextExtentPoint32W
GetBkColor
GetTextColor
GetRgnBox
GetTextMetricsW
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
CreateDIBSection
SetDIBColorTable
CreateEllipticRgn
Ellipse
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
Rectangle
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
SetTextColor
SetBkColor
CreateBitmap
GetDIBits
GetObjectW
CreateFontW
BitBlt
SelectObject
DeleteDC
CreateCompatibleBitmap
CreatePen
StretchBlt
CreateCompatibleDC
GetDeviceCaps
SetWindowOrgEx
CreateDCW
DeleteObject
msimg32
TransparentBlt
AlphaBlend
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
advapi32
RegQueryValueW
RegOpenKeyExW
RegEnumKeyExW
RegEnumValueW
RegCloseKey
RegEnumKeyW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegQueryValueExW
shell32
SHAppBarMessage
SHBrowseForFolderW
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
DragFinish
DragQueryFileW
SHGetFileInfoW
Shell_NotifyIconW
ShellExecuteW
SHGetFolderPathW
comctl32
InitCommonControlsEx
_TrackMouseEvent
shlwapi
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
PathFindFileNameW
PathFindExtensionW
PathIsDirectoryW
StrFormatKBSizeW
uxtheme
GetThemePartSize
GetThemeSysColor
GetWindowTheme
DrawThemeText
DrawThemeBackground
IsThemeBackgroundPartiallyTransparent
DrawThemeParentBackground
OpenThemeData
CloseThemeData
GetThemeColor
GetCurrentThemeName
IsAppThemed
ole32
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
OleLockRunning
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
CoRegisterMessageFilter
OleIsCurrentClipboard
OleFlushClipboard
CoRevokeClassObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoInitializeEx
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CoInitialize
CoCreateInstance
CLSIDFromProgID
CLSIDFromString
CoUninitialize
CreateStreamOnHGlobal
CoCreateGuid
oleaut32
VariantClear
VariantInit
SysAllocStringLen
SysFreeString
SysAllocString
SysStringLen
VariantChangeType
VariantCopy
VarBstrFromDate
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
LoadTypeLi
OleCreateFontIndirect
oledlg
OleUIBusyW
gdiplus
GdipDrawImageRectI
GdiplusStartup
GdiplusShutdown
GdipCreateFromHDC
GdipDeleteGraphics
GdipSetInterpolationMode
GdipSetPixelOffsetMode
GdipLoadImageFromFileICM
GdipFree
GdipAlloc
GdipCloneImage
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageRectRect
GdipDisposeImage
GdipReleaseDC
GdipCreateBitmapFromFile
GdipCreateHBITMAPFromBitmap
GdipLoadImageFromStream
GdipNewPrivateFontCollection
GdipDeletePrivateFontCollection
GdipDeleteFontFamily
GdipGetImageGraphicsContext
GdipGetImagePixelFormat
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromStream
GdipCreateBitmapFromScan0
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipDrawImageI
GdipCreateBitmapFromHBITMAP
winmm
PlaySoundW
timeKillEvent
timeEndPeriod
keyboardhook
??1CKeyboardHook@@UAE@XZ
?StartHook@CKeyboardHook@@QAEHPAUHWND__@@@Z
?StopHook@CKeyboardHook@@QAEHXZ
??0CKeyboardHook@@QAE@XZ
hid
HidD_GetHidGuid
HidD_GetPreparsedData
HidP_GetCaps
HidD_FreePreparsedData
HidD_SetFeature
HidD_GetFeature
HidD_GetAttributes
setupapi
SetupDiEnumDeviceInterfaces
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceInterfaceDetailW
SetupDiGetClassDevsW
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
imm32
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
Sections
.text Size: 1.9MB - Virtual size: 1.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 400KB - Virtual size: 400KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 6.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 106KB - Virtual size: 106KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.giats Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 5.8MB - Virtual size: 5.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 161KB - Virtual size: 160KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ