C:\Users\User\Downloads\TestmethodOW2_Beta_Version_orign\OW2_Beta_Version_orign\x64\Release\OW2-Beta.pdb
Static task
static1
1 signatures
General
-
Target
HalWatchFree.exe
-
Size
386KB
-
MD5
5c6be5256438f3ffd74aa9fd0412d964
-
SHA1
e69bf225282366f96ba18d44aa766279a1d5e3f6
-
SHA256
d38bc8f356e6657a2fdb7850d5b7af4a3cb6553450dce7fd3e502bc7fb03e79f
-
SHA512
6305aa86c840102dc1fce980dd03b716645a6b314b09efcd7a861938faaf9db0cf136205b799558c386ccc3be176e4e3b255f7bdbae19901f158d75cee8d8a0e
-
SSDEEP
6144:cXa4BQrM820sETPN0F2Xy/jUwJ+U0xK7uBYInLcDiepO:cK4GrMx0NV0kybRJ+U0xfYInoDiec
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource HalWatchFree.exe
Files
-
HalWatchFree.exe.exe windows:6 windows x64 arch:x64
Password: Amernet1
c9ddc1ab6efef75f2bacb762aa9ad366
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
kernel32
QueryPerformanceCounter
Module32Next
Module32First
OpenProcess
CreateToolhelp32Snapshot
Sleep
CloseHandle
ReadProcessMemory
VirtualQueryEx
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
WideCharToMultiByte
CreateEventW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetLastError
InitializeCriticalSectionEx
OutputDebugStringW
InitializeSListHead
GlobalLock
GlobalFree
FreeLibrary
GetProcAddress
QueryPerformanceFrequency
LoadLibraryA
GetModuleHandleA
GetModuleHandleW
GlobalUnlock
GlobalAlloc
RtlCaptureContext
MultiByteToWideChar
user32
EmptyClipboard
GetClipboardData
SetClipboardData
GetWindowLongA
SetWindowLongA
GetAsyncKeyState
ShowWindow
GetSystemMetrics
SetWindowPos
DestroyWindow
GetWindowRect
DispatchMessageA
GetWindowThreadProcessId
CloseClipboard
OpenClipboard
GetCursorPos
SetCursorPos
ReleaseCapture
LoadCursorA
DefWindowProcA
CreateWindowExA
TranslateMessage
PeekMessageA
EnumDisplaySettingsA
UnregisterClassA
PostQuitMessage
FindWindowA
RegisterClassExA
UpdateWindow
SendInput
GetClientRect
SetCursor
SetCapture
GetForegroundWindow
TrackMouseEvent
ClientToScreen
GetCapture
ScreenToClient
GetKeyState
imm32
ImmSetCandidateWindow
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
ImmAssociateContextEx
d3dcompiler_47
D3DCompile
dwmapi
DwmExtendFrameIntoClientArea
msvcp140
_FExp
_Xtime_get_ticks
_Query_perf_counter
_Thrd_sleep
?_Xlength_error@std@@YAXPEBD@Z
?_Random_device@std@@YAIXZ
_Query_perf_frequency
winmm
timeBeginPeriod
d3d11
D3D11CreateDeviceAndSwapChain
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memmove
_CxxThrowException
memset
__current_exception_context
__current_exception
__std_exception_destroy
__C_specific_handler
strstr
__std_terminate
memchr
memcmp
memcpy
__std_exception_copy
api-ms-win-crt-stdio-l1-1-0
fflush
fclose
fseek
_set_fmode
ftell
_wfopen
__stdio_common_vsprintf
fread
__stdio_common_vsscanf
__p__commode
fwrite
__stdio_common_vfprintf
__acrt_iob_func
api-ms-win-crt-string-l1-1-0
strncpy
strcmp
_stricmp
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-heap-l1-1-0
_set_new_mode
free
malloc
_callnewh
api-ms-win-crt-convert-l1-1-0
atof
api-ms-win-crt-runtime-l1-1-0
_initialize_narrow_environment
_register_onexit_function
_beginthread
_crt_atexit
_register_thread_local_exe_atexit_callback
exit
_configure_narrow_argv
_c_exit
__p___argv
_cexit
__p___argc
_seh_filter_exe
_set_app_type
_get_initial_narrow_environment
_initterm
_exit
_invalid_parameter_noinfo_noreturn
terminate
_initterm_e
_initialize_onexit_table
api-ms-win-crt-time-l1-1-0
clock
api-ms-win-crt-math-l1-1-0
__setusermatherr
logf
fmodf
scalbnf
ceilf
copysignf
atan2f
powf
roundf
sinf
acosf
ldexp
ilogbf
sqrtf
_fdsign
cosf
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 314KB - Virtual size: 313KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 55KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 356B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ