D:\a\gerenciador-atividades\gerenciador-atividades\src-tauri\target\release\deps\gerenciador_atividades.pdb
Static task
static1
Behavioral task
behavioral1
Sample
0b9ba7a0e05444386bbfa3eb7fe430571c799b78adb03ac1458808493af548cf.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
0b9ba7a0e05444386bbfa3eb7fe430571c799b78adb03ac1458808493af548cf.exe
Resource
win10v2004-20240226-en
General
-
Target
0b9ba7a0e05444386bbfa3eb7fe430571c799b78adb03ac1458808493af548cf
-
Size
8.7MB
-
MD5
31cb8bb4b8611b36a906784a7e20e924
-
SHA1
9f27e0a9a54abc5941519388384c144e9d50cf27
-
SHA256
0b9ba7a0e05444386bbfa3eb7fe430571c799b78adb03ac1458808493af548cf
-
SHA512
cc653d9366e7c63b4bd29f920b4f1c6f22307c7baaae780984508f9cb9f03001d68cbc071e63e64e22f76383bb30d8448fb44fad6d3004fb396301a2a65368e9
-
SSDEEP
98304:7926EU9fTADJGdfUwmRhh/YHWD0ovny/GzGeIO64RlHfNuWwxnwwXGZz3T56+jfO:iPRlHlPmh3aRK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 0b9ba7a0e05444386bbfa3eb7fe430571c799b78adb03ac1458808493af548cf
Files
-
0b9ba7a0e05444386bbfa3eb7fe430571c799b78adb03ac1458808493af548cf.exe windows:6 windows x64 arch:x64
49d04a8fd059925f1deef0406129faef
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
ntdll
RtlVirtualUnwind
RtlLookupFunctionEntry
NtCreateFile
RtlCaptureContext
NtReadFile
NtWriteFile
RtlPcToFileHeader
RtlUnwindEx
RtlNtStatusToDosError
RtlGetNtVersionNumbers
kernel32
WriteConsoleW
MultiByteToWideChar
InitializeProcThreadAttributeList
CreateProcessW
GetWindowsDirectoryW
GetSystemDirectoryW
ReadFileEx
CreateNamedPipeW
GetFullPathNameW
ExitProcess
CopyFileExW
GetFinalPathNameByHandleW
RemoveDirectoryW
MoveFileExW
DeleteFileW
FindFirstFileW
CreateDirectoryW
GetFileInformationByHandleEx
CreateFileW
FindClose
FindNextFileW
ReleaseMutex
HeapReAlloc
GlobalLock
GlobalUnlock
QueryPerformanceFrequency
GlobalAlloc
WakeConditionVariable
WakeAllConditionVariable
GetProcessId
TerminateProcess
GetExitCodeProcess
SleepEx
CreateThread
SetHandleInformation
GetCurrentProcessId
GetStdHandle
GetFileAttributesW
GetModuleFileNameW
GetLastError
OutputDebugStringA
OutputDebugStringW
GetCurrentThread
GetSystemTimeAsFileTime
CreateMutexA
LoadLibraryA
LoadLibraryExW
lstrlenW
LoadLibraryW
FreeLibrary
GetEnvironmentVariableW
SetFilePointerEx
SetFileInformationByHandle
GetProcessHeap
HeapFree
GetCommandLineW
LCIDToLocaleName
SetEnvironmentVariableW
HeapAlloc
GetEnvironmentStringsW
FormatMessageW
GetCurrentDirectoryW
WaitForSingleObject
SleepConditionVariableSRW
GetUserDefaultUILanguage
GetSystemInfo
Sleep
GetCurrentProcess
DuplicateHandle
CreatePipe
GetProcAddress
SetLastError
QueryPerformanceCounter
GetModuleHandleA
AcquireSRWLockShared
ReleaseSRWLockShared
TryAcquireSRWLockExclusive
GetCurrentThreadId
CloseHandle
SetWaitableTimer
CreateWaitableTimerExW
GetTempPathW
WaitForSingleObjectEx
TlsFree
WriteFileEx
InitializeSListHead
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
IsProcessorFeaturePresent
RaiseException
GetModuleHandleW
EncodePointer
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
UpdateProcThreadAttribute
SwitchToThread
GetFileInformationByHandle
GetConsoleMode
SetThreadStackGuarantee
AddVectoredExceptionHandler
FreeEnvironmentStringsW
DeleteProcThreadAttributeList
CompareStringOrdinal
user32
GetAsyncKeyState
GetKeyboardState
ToUnicodeEx
GetKeyState
MapVirtualKeyExW
GetKeyboardLayout
GetSystemMenu
SetWindowLongW
UnregisterHotKey
RegisterHotKey
DestroyIcon
TrackPopupMenu
CreateAcceleratorTableW
SendMessageW
DestroyAcceleratorTable
MessageBoxW
OpenClipboard
RegisterClassW
PostQuitMessage
ShowWindow
AppendMenuW
CreatePopupMenu
CreateMenu
CheckMenuItem
SetMenuItemInfoW
EnableMenuItem
SetForegroundWindow
SendInput
RegisterClipboardFormatW
SetClipboardData
SetWindowDisplayAffinity
GetClipboardData
SetWindowTextW
MonitorFromPoint
EnumDisplayMonitors
CreateWindowExW
IsWindow
RedrawWindow
GetClientRect
IsProcessDPIAware
GetDC
PostMessageW
SetMenu
SystemParametersInfoA
GetWindowLongPtrW
GetRawInputData
PeekMessageW
CreateIcon
IsWindowVisible
VkKeyScanW
ClipCursor
TranslateMessage
GetClipCursor
DispatchMessageW
ShowCursor
GetCursorPos
ReleaseCapture
AdjustWindowRectEx
GetMenu
GetWindowRect
SetCapture
SetWindowLongPtrW
MsgWaitForMultipleObjectsEx
RegisterRawInputDevices
RegisterClassExW
RegisterWindowMessageA
ClientToScreen
CloseClipboard
EnumChildWindows
EmptyClipboard
SetWindowPlacement
GetWindowPlacement
ChangeDisplaySettingsExW
FlashWindowEx
DefWindowProcW
TranslateAcceleratorW
GetAncestor
GetMessageW
MapVirtualKeyW
GetUpdateRect
PostThreadMessageW
ValidateRect
SetCursor
LoadCursorW
GetMonitorInfoW
MonitorFromWindow
CloseTouchInputHandle
ScreenToClient
GetTouchInputInfo
TrackMouseEvent
MonitorFromRect
GetWindowLongW
GetMessageA
DispatchMessageA
SetWindowPos
InvalidateRgn
SetCursorPos
GetActiveWindow
GetSystemMetrics
DestroyWindow
GetForegroundWindow
RegisterTouchWindow
comctl32
SetWindowSubclass
RemoveWindowSubclass
DefSubclassProc
gdi32
DeleteObject
GetDeviceCaps
CreateRectRgn
dwmapi
DwmEnableBlurBehindWindow
ole32
CreateStreamOnHGlobal
CoTaskMemAlloc
CoInitializeEx
CoTaskMemFree
CoUninitialize
CoCreateInstance
RevokeDragDrop
RegisterDragDrop
OleInitialize
ws2_32
ioctlsocket
WSASocketW
recv
getsockopt
closesocket
WSAStartup
send
setsockopt
WSAGetLastError
freeaddrinfo
select
connect
getaddrinfo
WSACleanup
secur32
FreeContextBuffer
DecryptMessage
AcceptSecurityContext
EncryptMessage
AcquireCredentialsHandleA
QueryContextAttributesW
FreeCredentialsHandle
DeleteSecurityContext
InitializeSecurityContextW
crypt32
CertFreeCertificateContext
CertVerifyCertificateChainPolicy
CertGetCertificateChain
CertCloseStore
CertDuplicateStore
CertAddCertificateContextToStore
CertEnumCertificatesInStore
CertDuplicateCertificateContext
CertDuplicateCertificateChain
CertFreeCertificateChain
CertOpenStore
shell32
ShellExecuteW
SHCreateItemFromParsingName
DragQueryFileW
DragFinish
SHGetKnownFolderPath
Shell_NotifyIconW
Shell_NotifyIconGetRect
advapi32
SystemFunction036
EventRegister
EventSetInformation
EventWriteTransfer
RegGetValueW
EventUnregister
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
uxtheme
SetWindowTheme
oleaut32
SetErrorInfo
SysStringLen
SysFreeString
GetErrorInfo
bcrypt
BCryptGenRandom
api-ms-win-crt-math-l1-1-0
round
__setusermatherr
trunc
floor
api-ms-win-crt-string-l1-1-0
strcpy_s
_wcsicmp
wcsncmp
wcslen
api-ms-win-crt-convert-l1-1-0
wcstol
_ultow_s
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
_get_initial_narrow_environment
_initterm
_initterm_e
_set_app_type
abort
_exit
__p___argc
terminate
__p___argv
_configure_narrow_argv
_crt_atexit
_register_onexit_function
_seh_filter_exe
_cexit
_c_exit
_register_thread_local_exe_atexit_callback
exit
_initialize_onexit_table
api-ms-win-crt-stdio-l1-1-0
_set_fmode
__p__commode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
api-ms-win-crt-heap-l1-1-0
_callnewh
calloc
_set_new_mode
free
malloc
Sections
.text Size: 4.9MB - Virtual size: 4.9MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3.5MB - Virtual size: 3.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 256KB - Virtual size: 255KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ