C:\Workspace\SVN\AP\SFWriteTool\SFWriteTool_ALLIC\Release-MF\SFWriteTool_AllIC_v.pdb
Static task
static1
Behavioral task
behavioral1
Sample
9bab8ad40b4b1553f91fa4fcf36572eddb06a0eb3e015f6793a25a514f0042fa.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
9bab8ad40b4b1553f91fa4fcf36572eddb06a0eb3e015f6793a25a514f0042fa.exe
Resource
win10v2004-20240226-en
General
-
Target
9bab8ad40b4b1553f91fa4fcf36572eddb06a0eb3e015f6793a25a514f0042fa
-
Size
726KB
-
MD5
0456fa74b8cc6866c5d1ce9e15136723
-
SHA1
3bf8f114e47bfb8d72fcb92b34efff2e46c03062
-
SHA256
9bab8ad40b4b1553f91fa4fcf36572eddb06a0eb3e015f6793a25a514f0042fa
-
SHA512
ef8581a236fbf58608e63c0889162f0700a1aba8828b5a05557c726dba480db0746b6c69e0eb3d47cd129a5dce08ff7a31c95f4c3110acc0c8cd89b3f2a327bc
-
SSDEEP
12288:WRJ8Q8efsPTG30X4zQ7NLocv5ORiiSfflULEPs:WReTN4zQ7NLZxOEZX6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 9bab8ad40b4b1553f91fa4fcf36572eddb06a0eb3e015f6793a25a514f0042fa
Files
-
9bab8ad40b4b1553f91fa4fcf36572eddb06a0eb3e015f6793a25a514f0042fa.exe windows:5 windows x86 arch:x86
496ad2c10d1a37530bf5e0a55ab53d1a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
mfplat
MFShutdown
MFCreateAttributes
mf
MFEnumDeviceSources
kernel32
CreateFileW
SetErrorMode
GetStartupInfoW
HeapFree
GetSystemTimeAsFileTime
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
ExitProcess
RtlUnwind
HeapAlloc
HeapReAlloc
RaiseException
HeapSize
GetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetFileType
GetStartupInfoA
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
LCMapStringW
VirtualAlloc
LCMapStringA
GetConsoleCP
GetConsoleMode
GetTimeFormatA
GetDateFormatA
GetTimeZoneInformation
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
GetProcessHeap
SetEnvironmentVariableA
SetEndOfFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GlobalFlags
TlsFree
DeleteCriticalSection
LocalReAlloc
TlsSetValue
TlsAlloc
InitializeCriticalSection
GlobalHandle
GlobalReAlloc
EnterCriticalSection
TlsGetValue
LeaveCriticalSection
InterlockedIncrement
lstrlenA
InterlockedDecrement
GetModuleHandleA
GetCurrentProcessId
GlobalAddAtomW
GlobalFindAtomW
CompareStringW
LoadLibraryA
GetVersionExA
FreeResource
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesW
lstrcmpA
GetLocaleInfoW
LoadLibraryW
CompareStringA
InterlockedExchange
lstrcmpW
FreeLibrary
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
lstrlenW
MulDiv
CreateFileA
CloseHandle
DeviceIoControl
OutputDebugStringA
GetPrivateProfileStringA
GetModuleFileNameA
WritePrivateProfileStringW
GetSystemPowerStatus
GetVersionExW
CreateThread
GetPrivateProfileStringW
lstrcatW
GetPrivateProfileIntW
CreateMutexW
WideCharToMultiByte
LocalAlloc
LocalFree
GetLastError
Sleep
OutputDebugStringW
GetTempPathW
GetFileAttributesW
MultiByteToWideChar
GetCurrentProcess
GetModuleHandleW
GetProcAddress
FindResourceW
LoadResource
LockResource
SizeofResource
GetModuleFileNameW
SetHandleCount
user32
UnregisterClassW
DestroyMenu
LoadCursorW
GetSysColorBrush
SetCursor
GetMessageW
GetCursorPos
ValidateRect
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringW
DrawTextExW
TabbedTextOutW
GetWindowThreadProcessId
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
ModifyMenuW
EnableMenuItem
CheckMenuItem
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
IsDlgButtonChecked
SetDlgItemTextW
GetDlgItemInt
CheckDlgButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
GetCapture
SetWindowsHookExW
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
GetLastActivePopup
GetTopWindow
UnhookWindowsHookEx
GetMessageTime
GetMessagePos
PeekMessageW
MapWindowPoints
SetMenu
SetForegroundWindow
IsWindowVisible
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
GetSysColor
AdjustWindowRectEx
SetFocus
EnableWindow
SendMessageW
GetDC
ScreenToClient
PtInRect
GetDlgCtrlID
DefWindowProcW
CallWindowProcW
GetMenu
SetWindowPos
SystemParametersInfoA
GetWindowPlacement
GetWindow
CallNextHookEx
GetClientRect
SetRect
DrawTextW
GetWindowRect
GetDesktopWindow
LoadIconW
RegisterDeviceNotificationW
SetTimer
IsIconic
GetSystemMetrics
DrawIcon
KillTimer
InvalidateRect
UpdateWindow
LoadBitmapW
FillRect
ReleaseDC
RedrawWindow
PostMessageW
GetParent
CopyRect
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
DestroyWindow
IsWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetFocus
GetKeyState
DispatchMessageW
TranslateMessage
SetWindowLongW
GetWindowLongW
gdi32
GetStockObject
CreatePatternBrush
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
CreateSolidBrush
DeleteObject
CreateFontW
SetTextColor
SetBkMode
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
SetMapMode
RestoreDC
SaveDC
CreateBitmap
GetObjectW
SetBkColor
GetClipBox
GetDeviceCaps
GetTextExtentPoint32W
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
advapi32
RegOpenKeyExW
RegQueryValueW
RegOpenKeyW
RegEnumKeyW
RegDeleteKeyW
RegCreateKeyExW
RegCloseKey
RegSetValueExW
RegQueryValueExW
comctl32
InitCommonControlsEx
shlwapi
PathFindFileNameW
PathRemoveFileSpecW
PathFindExtensionW
ole32
CoUninitialize
CoInitializeEx
CoTaskMemFree
CoCreateInstance
CoInitialize
oleaut32
VariantChangeType
SysFreeString
VariantClear
VariantInit
setupapi
CM_Get_Device_IDW
SetupDiDestroyDeviceInfoList
SetupDiGetDeviceRegistryPropertyA
CM_Get_Device_IDA
SetupDiGetClassDevsA
CM_Get_Parent
SetupDiGetDeviceRegistryPropertyW
SetupDiEnumDeviceInfo
SetupDiGetClassDevsW
Sections
.text Size: 421KB - Virtual size: 421KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 638KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 185KB - Virtual size: 185KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ