F:\Projects\KrampUI\src-tauri\target\release\deps\krampui.pdb
Static task
static1
1 signatures
General
-
Target
KrampUI.exe
-
Size
16.5MB
-
MD5
d7296140b51dddcbde52d4f2cb2462d5
-
SHA1
bca00df8e7d4a391943db2ba4864ced1c815c027
-
SHA256
772c3f54210114fba58f74d5d41b80ed5c027ac8d67aad32df623727e426cd78
-
SHA512
9210dd624d178d646567a748332b9357bb47fd40d99e723efddcf748cc2378f4cdbd49ac93a8a32da1ed70373d42e9c31de029db38d756a42a2bc614f8f88053
-
SSDEEP
196608:NvgGV7DYNMyigAKLeqU4RLeqU41LeqUs2d4r9Ty92:NvgGV7GMyiy7t7J7Yd4r9Ty92
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource KrampUI.exe
Files
-
KrampUI.exe.exe windows:6 windows x64 arch:x64
e941ed6fa5dd7e4a45d10b16eee9e14d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
advapi32
SystemFunction036
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
IsValidSid
GetLengthSid
CopySid
OpenProcessToken
GetTokenInformation
EventRegister
EventSetInformation
EventWriteTransfer
EventUnregister
RegGetValueW
ws2_32
getaddrinfo
freeaddrinfo
WSACleanup
WSAStartup
shutdown
WSASend
WSAGetOverlappedResult
setsockopt
WSAIoctl
listen
getsockname
bind
connect
getsockopt
ioctlsocket
send
recv
WSASocketW
WSARecv
WSAGetLastError
closesocket
getpeername
kernel32
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EncodePointer
RaiseException
RtlPcToFileHeader
RtlUnwindEx
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
InitializeSListHead
TlsFree
CreateMutexA
WaitForSingleObjectEx
GetTempPathW
GetSystemTimeAsFileTime
GetCurrentThread
CreateThread
WriteConsoleW
UpdateProcThreadAttribute
InitializeProcThreadAttributeList
CreateProcessW
GetWindowsDirectoryW
GetSystemDirectoryW
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
CloseHandle
GetModuleHandleW
GetCurrentThreadId
ReleaseMutex
CreateMutexW
GetLastError
SleepConditionVariableSRW
SetFileCompletionNotificationModes
CancelIoEx
ReadFile
CreateIoCompletionPort
GetQueuedCompletionStatusEx
PostQueuedCompletionStatus
SetHandleInformation
CreateFileW
GetSystemInfo
GetCurrentProcessId
GlobalMemoryStatusEx
K32GetPerformanceInfo
GetProcessTimes
GetExitCodeProcess
VirtualQueryEx
LocalFree
GetProcessHeap
HeapFree
OpenProcess
GetSystemTimes
GetProcessIoCounters
HeapAlloc
ReadProcessMemory
LoadLibraryExA
GetProcAddress
FreeLibrary
CreateEventW
WaitForSingleObject
FormatMessageW
TryAcquireSRWLockExclusive
GetStdHandle
GetConsoleMode
SetConsoleMode
ReleaseSRWLockShared
AcquireSRWLockShared
GetModuleHandleA
GetNativeSystemInfo
lstrlenW
GetUserDefaultLocaleName
LoadLibraryA
GlobalUnlock
GlobalLock
GlobalSize
GlobalAlloc
GlobalFree
WideCharToMultiByte
MultiByteToWideChar
GetUserDefaultUILanguage
LCIDToLocaleName
LoadLibraryW
GetFileAttributesW
GetModuleFileNameW
OutputDebugStringA
OutputDebugStringW
LoadLibraryExW
GetEnvironmentVariableW
Sleep
GetCurrentProcess
DuplicateHandle
CreatePipe
GetOverlappedResult
GetFileInformationByHandle
FreeEnvironmentStringsW
DeleteProcThreadAttributeList
CompareStringOrdinal
AddVectoredExceptionHandler
SetThreadStackGuarantee
SwitchToThread
CreateWaitableTimerExW
SetWaitableTimer
QueryPerformanceCounter
RtlCaptureContext
RtlVirtualUnwind
RtlLookupFunctionEntry
SetLastError
GetCurrentDirectoryW
GetEnvironmentStringsW
SetEnvironmentVariableW
GetCommandLineW
SetFileInformationByHandle
SetFilePointerEx
WriteFileEx
SleepEx
TerminateProcess
GetProcessId
WakeAllConditionVariable
WakeConditionVariable
QueryPerformanceFrequency
HeapReAlloc
FindNextFileW
FindClose
GetFileInformationByHandleEx
CreateDirectoryW
FindFirstFileW
DeleteFileW
MoveFileExW
RemoveDirectoryW
GetFinalPathNameByHandleW
CopyFileExW
CancelIo
GetFileType
ExitProcess
GetFullPathNameW
CreateNamedPipeW
ReadFileEx
WaitForMultipleObjects
ntdll
NtWriteFile
NtReadFile
NtCreateFile
NtDeviceIoControlFile
RtlNtStatusToDosError
NtCancelIoFileEx
RtlGetNtVersionNumbers
NtQueryInformationProcess
NtQuerySystemInformation
RtlGetVersion
user32
EmptyClipboard
GetClipboardData
IsClipboardFormatAvailable
OpenClipboard
SetClipboardData
RegisterWindowMessageA
GetDC
CloseClipboard
SendInput
GetKeyboardState
AttachThreadInput
GetKeyState
CallNextHookEx
DispatchMessageA
RegisterHotKey
ToUnicodeEx
GetKeyboardLayout
GetWindowThreadProcessId
UnregisterHotKey
PostQuitMessage
SetWindowsHookExA
SetMenu
ReleaseCapture
CreateAcceleratorTableW
AppendMenuW
CreatePopupMenu
CreateMenu
SetForegroundWindow
SetMenuItemInfoW
DestroyAcceleratorTable
VkKeyScanW
MapVirtualKeyExW
GetAsyncKeyState
RegisterRawInputDevices
GetCursorPos
IsProcessDPIAware
IsIconic
PostMessageW
SystemParametersInfoA
IsWindowVisible
AdjustWindowRectEx
GetWindowRect
MsgWaitForMultipleObjectsEx
GetWindowTextW
RegisterClipboardFormatW
SetWindowTextW
MonitorFromPoint
EnumDisplayMonitors
SetWindowDisplayAffinity
GetMenu
ShowCursor
ClipCursor
GetClipCursor
GetSystemMenu
ShowWindow
SetWindowLongW
DestroyIcon
CreateIcon
CheckMenuItem
EnableMenuItem
GetWindowLongPtrW
SetWindowLongPtrW
SetWindowPlacement
GetWindowPlacement
ChangeDisplaySettingsExW
GetMonitorInfoW
MonitorFromWindow
EnumChildWindows
CloseTouchInputHandle
ScreenToClient
FlashWindowEx
TrackMouseEvent
MonitorFromRect
GetWindowLongW
GetActiveWindow
TranslateAcceleratorW
GetAncestor
GetMessageW
MapVirtualKeyW
GetUpdateRect
PostThreadMessageW
ValidateRect
RegisterClassW
MessageBoxW
SendMessageW
RegisterClassExW
FindWindowW
DefWindowProcW
GetMessageA
DestroyWindow
TrackPopupMenu
RegisterTouchWindow
GetSystemMetrics
IsWindow
CreateWindowExW
DispatchMessageW
GetClientRect
RedrawWindow
SetCapture
TranslateMessage
PeekMessageW
SetCursor
LoadCursorW
InvalidateRgn
SetWindowPos
SetCursorPos
GetForegroundWindow
GetWindowTextLengthW
ClientToScreen
GetRawInputData
GetTouchInputInfo
gdi32
DeleteObject
GetDeviceCaps
CreateRectRgn
dwmapi
DwmEnableBlurBehindWindow
ole32
OleInitialize
RegisterDragDrop
RevokeDragDrop
CoTaskMemFree
CoTaskMemAlloc
CreateStreamOnHGlobal
CoCreateInstance
CoInitializeEx
CoUninitialize
comctl32
TaskDialogIndirect
DefSubclassProc
RemoveWindowSubclass
SetWindowSubclass
shell32
Shell_NotifyIconGetRect
Shell_NotifyIconW
SHGetKnownFolderPath
CommandLineToArgvW
SHAppBarMessage
DragFinish
DragQueryFileW
ShellExecuteW
SHCreateItemFromParsingName
pdh
PdhAddEnglishCounterW
PdhCollectQueryData
PdhGetFormattedCounterValue
PdhOpenQueryA
PdhRemoveCounter
PdhCloseQuery
powrprof
CallNtPowerInformation
secur32
EncryptMessage
AcceptSecurityContext
InitializeSecurityContextW
FreeContextBuffer
DecryptMessage
FreeCredentialsHandle
AcquireCredentialsHandleA
QueryContextAttributesW
DeleteSecurityContext
ApplyControlToken
oleaut32
SysStringLen
SysFreeString
SetErrorInfo
GetErrorInfo
psapi
GetModuleFileNameExW
GetProcessMemoryInfo
crypt32
CertEnumCertificatesInStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertDuplicateCertificateChain
CertDuplicateStore
CertAddCertificateContextToStore
CertFreeCertificateChain
CertCloseStore
CertOpenStore
CertGetCertificateChain
CertVerifyCertificateChainPolicy
uxtheme
SetWindowTheme
bcrypt
BCryptGenRandom
api-ms-win-crt-string-l1-1-0
strcpy_s
strlen
wcsncmp
wcslen
_wcsicmp
api-ms-win-crt-math-l1-1-0
trunc
pow
round
__setusermatherr
floor
api-ms-win-crt-heap-l1-1-0
malloc
free
_set_new_mode
_callnewh
calloc
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
abort
_get_initial_narrow_environment
_initterm
_seh_filter_exe
_configure_narrow_argv
strerror
terminate
_initterm_e
_crt_atexit
_register_onexit_function
_initialize_onexit_table
exit
_set_app_type
_register_thread_local_exe_atexit_callback
_c_exit
_cexit
__p___argv
__p___argc
_exit
api-ms-win-crt-convert-l1-1-0
_ultow_s
wcstol
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 8.6MB - Virtual size: 8.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 7.3MB - Virtual size: 7.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 21KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 436KB - Virtual size: 435KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 67KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 71KB - Virtual size: 71KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ