StikyNot.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bc314f39cc16b40993faf8e7e7e32caf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
bc314f39cc16b40993faf8e7e7e32caf.exe
Resource
win10v2004-20240226-en
General
-
Target
bc314f39cc16b40993faf8e7e7e32caf
-
Size
373KB
-
MD5
bc314f39cc16b40993faf8e7e7e32caf
-
SHA1
40676bb013be0cf8e60398ff9d31380643706fa7
-
SHA256
b72f4e54d17e2b9af9e1956ff3957db005eceae87f6cf69fc3ef46332d275e9e
-
SHA512
3f8080a3d01ee67e439f1f130d758574a4d2be9477bd1e2a8783ad5a01b2607c108de67d881964503b19a90dfad5cd00c1ae886a28622eda2a06d673609fe7b8
-
SSDEEP
6144:9UZpZnEc/Wm/NcMwIlzYEy5EIBcveRrl2cWYBEuZRBs1Ti1xGerEhgVIXFMLGbq:+XBEyWwGMTlzYX5E0lUFuaRerLIX/j26
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bc314f39cc16b40993faf8e7e7e32caf
Files
-
bc314f39cc16b40993faf8e7e7e32caf.exe windows:6 windows x86 arch:x86
af1733385ef5722e64a2a16dbfb35a22
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
EventWrite
RegDeleteValueW
RegCloseKey
RegCreateKeyExW
RegOpenKeyExW
RegQueryValueExW
RegSetValueExW
EventRegister
EventUnregister
RegQueryInfoKeyW
RegEnumKeyExW
GetTokenInformation
OpenProcessToken
CheckTokenMembership
ConvertStringSecurityDescriptorToSecurityDescriptorW
OpenThreadToken
RegDeleteKeyW
ConvertSidToStringSidW
kernel32
Sleep
GetStartupInfoA
SetUnhandledExceptionFilter
GetModuleHandleA
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
OutputDebugStringA
CreateEventW
SetEvent
MulDiv
GetSystemTime
GetProcAddress
GetLastError
FreeLibrary
LoadLibraryW
LocalFree
LocalAlloc
HeapAlloc
GetProcessHeap
CloseHandle
ReleaseMutex
WaitForSingleObject
lstrlenW
GetPrivateProfileStringW
GetVersionExW
DuplicateHandle
OpenMutexW
MultiByteToWideChar
HeapFree
RaiseException
InitializeCriticalSection
DeleteCriticalSection
CreateFileW
RegGetValueW
RegEnumValueW
FileTimeToSystemTime
GetFileAttributesW
SetThreadPriority
GetCurrentThread
OutputDebugStringW
GetModuleFileNameW
EnterCriticalSection
GetTempFileNameW
SystemTimeToFileTime
CompareFileTime
RegisterApplicationRecoveryCallback
CreateThread
ApplicationRecoveryFinished
ApplicationRecoveryInProgress
UnregisterApplicationRecoveryCallback
RegisterApplicationRestart
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
GetModuleHandleW
UnregisterApplicationRestart
lstrcmpiW
LoadLibraryExW
GetCommandLineW
CreateDirectoryW
DeleteFileW
CreateMutexW
DelayLoadFailureHook
InterlockedCompareExchange
LoadLibraryExA
HeapDestroy
HeapReAlloc
HeapSize
GetVersionExA
DebugBreak
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
InterlockedExchange
CompareStringW
gdi32
GdiAlphaBlend
CreateDIBSection
GetObjectW
GetTextExtentPoint32W
DeleteDC
SetLayout
GetDeviceCaps
CreateCompatibleDC
CreateCompatibleBitmap
SelectObject
GetClipRgn
BitBlt
CreateSolidBrush
GdiGradientFill
DeleteObject
CreateRectRgn
GetTextFaceW
CreateFontW
user32
ShowWindow
GetScrollInfo
SetScrollInfo
SetScrollRange
ShowScrollBar
CopyRect
OffsetRect
GetDC
ReleaseDC
BeginDeferWindowPos
EndDeferWindowPos
SetCursor
GetDesktopWindow
InflateRect
PtInRect
DefWindowProcW
DestroyMenu
GetWindowRect
SetWindowPos
LockWindowUpdate
InvalidateRect
DestroyWindow
SetGestureConfig
GetMenuItemCount
GetMenuItemInfoW
GetSystemMenu
EnableMenuItem
MapWindowPoints
ReleaseCapture
SetMenuItemInfoW
SendMessageW
PostMessageW
GetWindowLongW
GetSubMenu
GetClientRect
ClientToScreen
TrackPopupMenu
GetFocus
UnregisterClassW
LoadCursorW
LoadIconW
RegisterClassW
MessageBoxW
GetUpdateRect
RemoveMenu
ChangeWindowMessageFilter
GetWindowPlacement
SetWindowPlacement
PostQuitMessage
SetActiveWindow
EqualRect
IntersectRect
GetMonitorInfoW
MonitorFromWindow
MonitorFromRect
CharNextW
SetProcessDPIAware
SetForegroundWindow
FindWindowW
DispatchMessageW
TranslateMessage
GetMessageW
CopyAcceleratorTableW
DeferWindowPos
RegisterClassExW
UpdateLayeredWindow
FillRect
SetWindowLongW
EndPaint
ShowCaret
GetAsyncKeyState
GetKeyState
IsWindowVisible
UpdateWindow
GetSysColor
HideCaret
BeginPaint
GetParent
EnableWindow
GetSysColorBrush
DestroyAcceleratorTable
TranslateAcceleratorW
GetMessageExtraInfo
IsClipboardFormatAvailable
LoadMenuW
GetScrollBarInfo
UnregisterClassA
LoadImageW
GetKeyboardLayout
LoadAcceleratorsW
GetSystemMetrics
ScreenToClient
CreateWindowExW
SetRect
GetWindowTextW
GetWindowTextLengthW
EnableScrollBar
SetFocus
CreateCaret
SetCaretPos
SetTimer
SetScrollPos
KillTimer
ScrollWindowEx
SystemParametersInfoW
SetCapture
GetAncestor
msvcrt
_purecall
free
calloc
memcpy_s
_CxxThrowException
__CxxFrameHandler3
memset
wcscpy_s
_ftol2
_ftol2_sse
_CIsin
_CIcos
??0exception@@QAE@ABQBD@Z
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
_wcsicmp
_vscwprintf
vswprintf_s
malloc
wcsncpy_s
_controlfp
_errno
realloc
_except_handler4_common
_onexit
_lock
__dllonexit
_unlock
??1type_info@@UAE@XZ
?terminate@@YAXXZ
__set_app_type
__p__fmode
__p__commode
__setusermatherr
_amsg_exit
_initterm
_acmdln
_vsnwprintf
wcstoul
exit
_ismbblead
_XcptFilter
_exit
_cexit
__getmainargs
_callnewh
??0exception@@QAE@XZ
memmove_s
ntdll
WinSqmIsOptedIn
WinSqmStartSession
WinSqmSetIfMaxDWORD
WinSqmAddToStream
WinSqmEndSession
shell32
ord165
SHCreateDirectoryExW
SHGetKnownFolderPath
ShellExecuteW
CommandLineToArgvW
SHGetFolderPathW
SHGetSpecialFolderPathW
SetCurrentProcessExplicitAppUserModelID
shlwapi
ord16
ord184
SHStrDupW
PathFileExistsW
SHCreateStreamOnFileW
ord154
ord219
ord212
ord628
ole32
StgOpenStorageEx
StgCreateStorageEx
OleSaveToStream
OleLoadFromStream
CoSetProxyBlanket
CoCreateInstance
PropVariantClear
CoTaskMemAlloc
CoTaskMemRealloc
CoTaskMemFree
CoUninitialize
OleUninitialize
OleInitialize
CoInitializeEx
WriteClassStm
oleaut32
SafeArrayCreateVector
SafeArrayUnaccessData
SafeArrayDestroy
VariantChangeType
VariantClear
VariantInit
SysStringByteLen
SysAllocStringByteLen
SysFreeString
SystemTimeToVariantTime
VarUI4FromStr
SysAllocString
SafeArrayAccessData
comctl32
ord336
ord386
ord334
ord329
ord332
ord328
ord345
slc
SLGetWindowsInformationDWORD
dwmapi
DwmSetWindowAttribute
DwmInvalidateIconicBitmaps
DwmSetIconicThumbnail
DwmSetIconicLivePreviewBitmap
uxtheme
OpenThemeData
GetThemeFont
CloseThemeData
dui70
UnInitThread
?Register@HWNDElement@DirectUI@@SGJXZ
?Register@HWNDHost@DirectUI@@SGJXZ
?GetFactoryLock@Element@DirectUI@@SGPAU_RTL_CRITICAL_SECTION@@XZ
??0CritSecLock@DirectUI@@QAE@PAU_RTL_CRITICAL_SECTION@@@Z
?ClassExist@ClassInfoBase@DirectUI@@SG_NPAPAUIClassInfo@2@PBQBUPropertyInfo@2@IPAU32@PAUHINSTANCE__@@PBG_N@Z
?Register@ClassInfoBase@DirectUI@@QAEJXZ
??1CritSecLock@DirectUI@@QAE@XZ
?Initialize@ClassInfoBase@DirectUI@@QAEJPAUHINSTANCE__@@PBG_NPBQBUPropertyInfo@2@I@Z
UnInitProcessPriv
InitProcessPriv
??1ClassInfoBase@DirectUI@@UAE@XZ
?AssertPIZeroRef@ClassInfoBase@DirectUI@@UBEXXZ
?GetChildren@ClassInfoBase@DirectUI@@UBEHXZ
?RemoveChild@ClassInfoBase@DirectUI@@UAEXXZ
?AddChild@ClassInfoBase@DirectUI@@UAEXXZ
?IsGlobal@ClassInfoBase@DirectUI@@UBE_NXZ
?GetModule@ClassInfoBase@DirectUI@@UBEPAUHINSTANCE__@@XZ
?IsSubclassOf@ClassInfoBase@DirectUI@@UBE_NPAUIClassInfo@2@@Z
?IsValidProperty@ClassInfoBase@DirectUI@@UBE_NPBUPropertyInfo@2@@Z
?GetName@ClassInfoBase@DirectUI@@UBEPBGXZ
?GetGlobalIndex@ClassInfoBase@DirectUI@@UBEIXZ
?GetPICount@ClassInfoBase@DirectUI@@UBEIXZ
?GetByClassIndex@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z
?EnumPropertyInfo@ClassInfoBase@DirectUI@@UAEPBUPropertyInfo@2@I@Z
?Release@ClassInfoBase@DirectUI@@UAEHXZ
?AddRef@ClassInfoBase@DirectUI@@UAEXXZ
??0ClassInfoBase@DirectUI@@QAE@XZ
?GetClassInfoPtr@HWNDElement@DirectUI@@SGPAUIClassInfo@2@XZ
?GetClassInfoPtr@HWNDHost@DirectUI@@SGPAUIClassInfo@2@XZ
?GetParent@Element@DirectUI@@QAEPAV12@XZ
?SetAbsorbsShortcut@Element@DirectUI@@QAEJ_N@Z
?Initialize@HWNDHost@DirectUI@@QAEJIIPAVElement@2@PAK@Z
?EndDefer@Element@DirectUI@@QAEXK@Z
?Host@NativeHWNDHost@DirectUI@@QAEXPAVElement@2@@Z
?CreateElement@DUIXmlParser@DirectUI@@QAEJPBGPAVElement@2@1PAKPAPAV32@@Z
?Initialize@NativeHWNDHost@DirectUI@@QAEJPBG0PAUHWND__@@PAUHICON__@@HHHHHHPAUHINSTANCE__@@I@Z
?Destroy@NativeHWNDHost@DirectUI@@QAEXXZ
?Destroy@Element@DirectUI@@QAEJ_N@Z
?Create@DUIXmlParser@DirectUI@@SGJPAPAV12@P6GPAVValue@2@PBGPAX@Z2P6GX11H2@Z2@Z
?SetXMLFromResource@DUIXmlParser@DirectUI@@QAEJIPAUHINSTANCE__@@0@Z
??1NativeHWNDHost@DirectUI@@UAE@XZ
??0NativeHWNDHost@DirectUI@@QAE@XZ
?WndProc@HWNDElement@DirectUI@@UAEJPAUHWND__@@IIJ@Z
?OnCompositionChanged@HWNDElement@DirectUI@@UAEXXZ
?OnWmThemeChanged@HWNDElement@DirectUI@@UAEXIJ@Z
?OnGetDlgCode@HWNDElement@DirectUI@@UAEXPAUtagMSG@@PAJ@Z
?OnNoChildWithShortcutFound@HWNDElement@DirectUI@@UAEXPAUKeyboardEvent@2@@Z
?OnDestroy@HWNDElement@DirectUI@@UAEXXZ
?OnGroupChanged@HWNDElement@DirectUI@@UAEXH_N@Z
?OnPropertyChanged@HWNDElement@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?OnEvent@HWNDElement@DirectUI@@UAEXPAUEvent@2@@Z
?OnInput@HWNDElement@DirectUI@@UAEXPAUInputEvent@2@@Z
?GetHWND@NativeHWNDHost@DirectUI@@QAEPAUHWND__@@XZ
InitThread
??1HWNDElement@DirectUI@@UAE@XZ
?CreateStyleParser@HWNDElement@DirectUI@@UAEJPAPAVDUIXmlParser@2@@Z
?CanSetFocus@HWNDElement@DirectUI@@UAE_NXZ
?OnThemeChanged@HWNDElement@DirectUI@@UAEXPAUThemeChangedEvent@2@@Z
?GetHWND@HWNDElement@DirectUI@@UAEPAUHWND__@@XZ
?GetAccessibleImpl@HWNDElement@DirectUI@@UAEJPAPAUIAccessible@@@Z
?GetKeyFocused@Element@DirectUI@@UAE_NXZ
?RemoveTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z
?ActivateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@K@Z
?UpdateTooltip@HWNDElement@DirectUI@@UAEXPAVElement@2@@Z
?OnUnHosted@Element@DirectUI@@MAEXPAV12@@Z
?OnHosted@Element@DirectUI@@MAEXPAV12@@Z
?MessageCallback@Element@DirectUI@@UAEIPAUtagGMSG@@@Z
?SetKeyFocus@Element@DirectUI@@UAEXXZ
?Paint@Element@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z
??0HWNDElement@DirectUI@@QAE@XZ
?SetAccValue@Element@DirectUI@@QAEJPBG@Z
??0HWNDHost@DirectUI@@QAE@XZ
?OnInput@HWNDHost@DirectUI@@UAEXPAUInputEvent@2@@Z
?EraseBkgnd@HWNDHost@DirectUI@@MAE_NPAUHDC__@@PAJ@Z
?SetWindowDirection@HWNDHost@DirectUI@@UAEXPAUHWND__@@@Z
?OnAdjustWindowSize@HWNDHost@DirectUI@@UAEHHHI@Z
?OnWindowStyleChanged@HWNDHost@DirectUI@@UAEXIPBUtagSTYLESTRUCT@@@Z
?OnCtrlThemeChanged@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z
?OnSinkThemeChanged@HWNDHost@DirectUI@@UAE_NIIJPAJ@Z
?OnSysChar@HWNDHost@DirectUI@@UAE_NG@Z
?GetHWND@HWNDHost@DirectUI@@UAEPAUHWND__@@XZ
?HandleUiaEventListener@Element@DirectUI@@UAEXPAUEvent@2@@Z
?HandleUiaPropertyChangingListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@@Z
?HandleUiaPropertyListener@Element@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?HandleUiaDestroyListener@Element@DirectUI@@UAEXXZ
?GetElementProviderImpl@Element@DirectUI@@UAEJPAVInvokeHelper@2@PAPAVElementProvider@2@@Z
?DefaultAction@Element@DirectUI@@UAEJXZ
?GetAccessibleImpl@HWNDHost@DirectUI@@UAEJPAPAUIAccessible@@@Z
?GetKeyFocused@HWNDHost@DirectUI@@UAE_NXZ
?RemoveTooltip@Element@DirectUI@@MAEXPAV12@@Z
?ActivateTooltip@Element@DirectUI@@MAEXPAV12@K@Z
?UpdateTooltip@Element@DirectUI@@MAEXPAV12@@Z
?OnUnHosted@HWNDHost@DirectUI@@MAEXPAVElement@2@@Z
?OnHosted@HWNDHost@DirectUI@@MAEXPAVElement@2@@Z
?_SelfLayoutUpdateDesiredSize@Element@DirectUI@@MAE?AUtagSIZE@@HHPAVSurface@2@@Z
?_SelfLayoutDoLayout@Element@DirectUI@@MAEXHH@Z
?QueryInterface@Element@DirectUI@@UAGJABU_GUID@@PAPAX@Z
?MessageCallback@HWNDHost@DirectUI@@UAEIPAUtagGMSG@@@Z
?SetKeyFocus@HWNDHost@DirectUI@@UAEXXZ
?EnsureVisible@Element@DirectUI@@UAE_NHHHH@Z
?GetAdjacent@Element@DirectUI@@UAEPAV12@PAV12@HPBUNavReference@2@K@Z
?Remove@Element@DirectUI@@UAEJPAPAV12@I@Z
?Insert@Element@DirectUI@@UAEJPAPAV12@II@Z
?Add@Element@DirectUI@@UAEJPAPAV12@I@Z
?GetContentSize@Element@DirectUI@@UAE?AUtagSIZE@@HHPAVSurface@2@@Z
?Paint@HWNDHost@DirectUI@@UAEXPAUHDC__@@PBUtagRECT@@1PAU4@2@Z
?OnDestroy@HWNDHost@DirectUI@@UAEXXZ
?OnMouseFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z
?OnKeyFocusMoved@Element@DirectUI@@UAEXPAV12@0@Z
?OnGroupChanged@Element@DirectUI@@UAEXH_N@Z
?OnPropertyChanged@Element@DirectUI@@UAEXPAUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UAE_NPAUPropertyInfo@2@HPAVValue@2@1@Z
?OnPropertyChanging@Element@DirectUI@@UAE_NPBUPropertyInfo@2@HPAVValue@2@1@Z
?GetContentStringAsDisplayed@Element@DirectUI@@UAEPBGPAPAVValue@2@@Z
?IsContentProtected@Element@DirectUI@@UAE_NXZ
?IsRTLReading@Element@DirectUI@@UAE_NXZ
??1HWNDHost@DirectUI@@UAE@XZ
?SetDirection@Element@DirectUI@@QAEJH@Z
?EnabledProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?OnPropertyChanged@HWNDHost@DirectUI@@UAEXPBUPropertyInfo@2@HPAVValue@2@1@Z
?GetLocation@Element@DirectUI@@QAEPBUtagPOINT@@PAPAVValue@2@@Z
?OnEvent@HWNDHost@DirectUI@@UAEXPAUEvent@2@@Z
?BackgroundProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?GetValue@Element@DirectUI@@QAEPAVValue@2@P6GPBUPropertyInfo@2@XZHPAUUpdateCache@2@@Z
?GetType@Value@DirectUI@@QBEHXZ
?GetFill@Value@DirectUI@@QAEPBUFill@2@XZ
?Destroy@DUIXmlParser@DirectUI@@QAEXXZ
?UpdateSheets@DUIXmlParser@DirectUI@@QAEJPAVElement@2@@Z
?AddListener@Element@DirectUI@@QAEJPAUIElementListener@2@@Z
?WindowActiveProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?Click@Button@DirectUI@@SG?AVUID@@XZ
?GetSheet@DUIXmlParser@DirectUI@@QAEJPBGPAPAVValue@2@@Z
?SheetProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?SetValue@Element@DirectUI@@QAEJP6GPBUPropertyInfo@2@XZHPAVValue@2@@Z
?Release@Value@DirectUI@@QAEXXZ
?GetID@Element@DirectUI@@QAEGXZ
?GetWindowActive@Element@DirectUI@@QAE_NXZ
?MouseWithinProp@Element@DirectUI@@SGPBUPropertyInfo@2@XZ
?GetBool@Value@DirectUI@@QAE_NXZ
?SetWindowActive@Element@DirectUI@@QAEJ_N@Z
StrToID
?FindDescendent@Element@DirectUI@@QAEPAV12@G@Z
?SetVisible@Element@DirectUI@@QAEJ_N@Z
?Initialize@HWNDElement@DirectUI@@QAEJPAUHWND__@@_NIPAVElement@2@PAK@Z
gdiplus
GdiplusShutdown
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdipCloneImage
GdipCloneBrush
GdipDrawImagePoints
GdipDrawImageRectI
GdipFillRectangleI
GdipSetPixelOffsetMode
GdipSetSmoothingMode
GdiplusStartup
GdipSetCompositingMode
GdipGetImageGraphicsContext
GdipCreateFromHDC
GdipCreateSolidFill
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipDisposeImage
GdipDeleteGraphics
GdipDeleteBrush
GdipAlloc
GdipFree
GdipCreateTexture
GdipSetInterpolationMode
rpcrt4
UuidCreateSequential
UuidToStringW
RpcStringFreeW
UuidCreate
windowscodecs
WICCreateImagingFactory_Proxy
Sections
.text Size: 188KB - Virtual size: 187KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 144KB - Virtual size: 144KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 37KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
avprhsk Size: - Virtual size: 4KB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE