Y:\code\compactor\target\i686-pc-windows-msvc\release\deps\Compactor.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Compactor_2_1_1_1.exe
Resource
win10-20240319-en
Behavioral task
behavioral2
Sample
Compactor_2_1_1_1.exe
Resource
win10v2004-20240226-en
Behavioral task
behavioral3
Sample
Compactor_2_1_1_1.exe
Resource
win11-20240412-en
Behavioral task
behavioral4
Sample
Compactor_2_1_1_1.exe
Resource
android-x64-20240221-en
General
-
Target
Compactor_2_1_1_1.exe
-
Size
1.3MB
-
MD5
20d4d04482e143185ef84e684f6bffc0
-
SHA1
fb2dc56b3dc43e10fbdd3c2b4deeba77d8e0eda6
-
SHA256
befd5dce4b59dcfc0a0059dc5ece3e647d02d108958b09df2717e6cd58eafb3c
-
SHA512
46e92cbe55becedd94271836b66497f3e2d788e4b5012fe0df1c1541cf23e5775f4b3b573bb0dbc200d6847f1904514c2f6d2f8a2da64054b82f126fd0f75dfd
-
SSDEEP
24576:kbng9YAh5gMRtdZJm1vv7wlbJsQ4Twk451bYFi4Sc3dCYX:k6DxQseQ4Twb51+dCYX
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Compactor_2_1_1_1.exe
Files
-
Compactor_2_1_1_1.exe.exe windows:6 windows x86 arch:x86
6663aad170824f067ce808d8cc3f067e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ole32
CoGetClassObject
OleSetContainedObject
OleUninitialize
OleInitialize
CoCreateInstance
CoTaskMemFree
oleaut32
SafeArrayAccessData
VariantClear
SysAllocStringLen
SysFreeString
SafeArrayDestroy
SafeArrayCreate
VariantInit
user32
GetWindowLongW
MessageBoxW
AdjustWindowRect
GetClientRect
SetWindowTextW
SetFocus
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
PostQuitMessage
DefWindowProcW
PostMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
GetDesktopWindow
SetWindowLongW
UpdateWindow
advapi32
RegCreateKeyW
RegCloseKey
SystemFunction036
RegSetValueExW
kernel32
GetStringTypeW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
CompareStringW
DecodePointer
GetCommandLineW
GetCommandLineA
GetModuleHandleExW
LoadLibraryExW
FreeLibrary
TlsFree
InitializeCriticalSectionAndSpinCount
EncodePointer
RtlUnwind
RaiseException
TerminateProcess
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
LCMapStringW
HeapSize
GetFileType
FlushFileBuffers
GetProcessHeap
HeapFree
HeapReAlloc
HeapAlloc
SwitchToThread
TlsGetValue
TlsSetValue
GetCompressedFileSizeW
GetLastError
CloseHandle
WaitForSingleObject
DeviceIoControl
SetFileTime
WriteFile
GetConsoleWindow
AttachConsole
CreateSemaphoreA
SetConsoleCtrlHandler
ReadFile
AllocConsole
FreeConsole
AddVectoredExceptionHandler
WaitForSingleObjectEx
LoadLibraryA
GetProcAddress
GetCurrentProcess
CreateMutexA
ReleaseMutex
GetCurrentThread
RtlCaptureContext
Sleep
ReleaseSemaphore
lstrlenW
LockFileEx
GetConsoleCP
GetFileInformationByHandle
TlsAlloc
DeleteCriticalSection
GetModuleHandleW
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetLastError
GetEnvironmentVariableW
GetStdHandle
GetConsoleMode
WriteConsoleW
GetCurrentDirectoryW
FormatMessageW
CreateFileW
SetFilePointerEx
FindNextFileW
CreateDirectoryW
ReadConsoleW
ExitProcess
QueryPerformanceCounter
QueryPerformanceFrequency
CreateThread
FindClose
FindFirstFileW
GetModuleFileNameW
GlobalAlloc
GlobalFree
MultiByteToWideChar
WideCharToMultiByte
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
api-ms-win-shcore-scaling-l1-1-1
SetProcessDpiAwareness
shell32
ShellExecuteW
SHGetKnownFolderPath
Sections
.text Size: 892KB - Virtual size: 892KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 415KB - Virtual size: 414KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ