D:\工作事务\闪字风扇\LedFan(48灯全彩)\bin\EditLed48.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5e02b44f24108c847290c7ab64e1d8941f684d2e556311af6d5778b5ed430554.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
5e02b44f24108c847290c7ab64e1d8941f684d2e556311af6d5778b5ed430554.exe
Resource
win10v2004-20240412-en
General
-
Target
5e02b44f24108c847290c7ab64e1d8941f684d2e556311af6d5778b5ed430554
-
Size
2.1MB
-
MD5
3402b7438961d412b67fabe43ed115a7
-
SHA1
f3f0f827aad2ebdc83dc3587cc155df688decaa0
-
SHA256
5e02b44f24108c847290c7ab64e1d8941f684d2e556311af6d5778b5ed430554
-
SHA512
746c7a2884bc44d3d75f3a5e4c9e6188d2f87fe770476d62d4fb9087ec619a7a9fb3f23c410c38a1640021606e1eebc1cfd774b37497e23ab76b9057aedc2b53
-
SSDEEP
49152:6p55BODmO08xR/CTQY8Zmhjjbtm6BFlR+Mzaos0yL0IyqgUC1ufINE6/:YnODmOb/CTQPmhjj5m6BFPpaoszL0IyR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5e02b44f24108c847290c7ab64e1d8941f684d2e556311af6d5778b5ed430554
Files
-
5e02b44f24108c847290c7ab64e1d8941f684d2e556311af6d5778b5ed430554.exe windows:5 windows x86 arch:x86
e63f92a07367edc488b311b130753c6e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
IsProcessorFeaturePresent
GetTimeZoneInformation
LCMapStringW
IsValidCodePage
GetOEMCP
GetACP
IsDebuggerPresent
UnhandledExceptionFilter
TerminateProcess
QueryPerformanceCounter
HeapCreate
SetHandleCount
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetStdHandle
SetUnhandledExceptionFilter
GetFileType
SetStdHandle
HeapQueryInformation
HeapSize
ExitProcess
GetVersion
CreateThread
ExitThread
HeapReAlloc
RaiseException
RtlUnwind
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapFree
HeapAlloc
GetStringTypeW
GetConsoleCP
GetConsoleMode
DecodePointer
EncodePointer
GetStartupInfoW
HeapSetInformation
GetCommandLineW
FindResourceExW
VirtualProtect
SearchPathW
Sleep
GetProfileIntW
GetTickCount
GetNumberFormatW
GetWindowsDirectoryW
GetTempPathW
GetTempFileNameW
GetFileTime
GetFileSizeEx
GetFileAttributesExW
SetErrorMode
GetFileAttributesW
InitializeCriticalSectionAndSpinCount
FileTimeToLocalFileTime
GetCurrentDirectoryW
SetEnvironmentVariableA
WriteConsoleW
GetSystemTimeAsFileTime
InterlockedIncrement
FileTimeToSystemTime
GlobalGetAtomNameW
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
LocalAlloc
DeleteCriticalSection
InitializeCriticalSection
GlobalFlags
GetFullPathNameW
GetVolumeInformationW
FindFirstFileW
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
SetFilePointer
DeleteFileW
GetThreadLocale
GetCurrentThread
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
CompareStringA
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
CompareStringW
lstrcmpW
SuspendThread
SetEvent
GetCurrentThreadId
ResumeThread
SetThreadPriority
FreeLibrary
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
GetCurrentProcessId
CopyFileW
FormatMessageW
LocalFree
lstrcmpA
WideCharToMultiByte
GlobalFree
MulDiv
CancelIo
ReadFile
FlushFileBuffers
lstrcpyW
CreateMutexW
WaitForSingleObject
CreateEventW
GetPrivateProfileIntW
GetPrivateProfileStringW
GetSystemDefaultLCID
GetLocaleInfoW
WritePrivateProfileStringW
GetModuleFileNameW
GlobalSize
GlobalUnlock
GlobalLock
GlobalAlloc
InterlockedExchange
EnterCriticalSection
LeaveCriticalSection
CloseHandle
WriteFile
CreateFileW
lstrcmpiW
lstrlenW
FreeResource
FindResourceW
LoadResource
LockResource
SizeofResource
ActivateActCtx
GetProcAddress
GetModuleHandleW
LoadLibraryW
GetLastError
DeactivateActCtx
SetLastError
GetCPInfo
MultiByteToWideChar
lstrlenA
GetVersionExW
user32
CreateAcceleratorTableW
DestroyAcceleratorTable
GetKeyboardState
GetKeyboardLayout
ToUnicodeEx
CopyAcceleratorTableW
PostThreadMessageW
WaitMessage
GetMenuDefaultItem
SetMenuDefaultItem
MonitorFromPoint
UpdateLayeredWindow
EnableScrollBar
UnionRect
GetAsyncKeyState
NotifyWinEvent
SetWindowRgn
SetParent
GetSystemMenu
UnpackDDElParam
ReuseDDElParam
LoadAcceleratorsW
InsertMenuItemW
BringWindowToTop
TranslateAcceleratorW
UnregisterClassW
RealChildWindowFromPoint
CopyImage
GetNextDlgGroupItem
SetLayeredWindowAttributes
EnumDisplayMonitors
ShowOwnedPopups
CharUpperW
SetWindowContextHelpId
MapDialogRect
MessageBeep
IsZoomed
PostQuitMessage
CreateDialogIndirectParamW
EndDialog
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
CheckMenuItem
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
SetDlgItemTextW
SetDlgItemInt
CheckDlgButton
RegisterWindowMessageW
SendDlgItemMessageW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
GetClassLongW
GetClassNameW
SetPropW
GetPropW
RemovePropW
SetFocus
GetWindowTextLengthW
GetWindowTextW
GetForegroundWindow
SetActiveWindow
BeginDeferWindowPos
EndDeferWindowPos
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MonitorFromWindow
GetMonitorInfoW
MapWindowPoints
ScrollWindow
SetClassLongW
TrackPopupMenu
DrawMenuBar
GetScrollRange
SetForegroundWindow
ShowScrollBar
CreateWindowExW
GetClassInfoExW
RegisterClassW
DeferWindowPos
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetDlgCtrlID
CallWindowProcW
GetMenu
SetWindowLongW
SetWindowPos
GetWindow
SetWindowsHookExW
CallNextHookEx
GetMessageW
PeekMessageW
GetCursorPos
ValidateRect
UnhookWindowsHookEx
IntersectRect
GetWindowThreadProcessId
GetLastActivePopup
IsWindowEnabled
MessageBoxW
EndPaint
BeginPaint
GetWindowDC
DestroyMenu
GetMenuStringW
MapVirtualKeyW
GetKeyNameTextW
GetScrollPos
SetScrollRange
IsRectEmpty
UpdateWindow
AdjustWindowRectEx
wvsprintfW
IsWindowVisible
SetScrollPos
LoadMenuW
DragDetect
RedrawWindow
ShowCaret
SetCaretPos
CreateCaret
DestroyCaret
DefWindowProcW
GetClassInfoW
IsWindow
KillTimer
DispatchMessageW
TranslateMessage
DrawIcon
IsIconic
SetTimer
LoadIconW
wsprintfW
RegisterClipboardFormatW
LoadCursorW
EnableMenuItem
ScreenToClient
GetClipboardData
IsClipboardFormatAvailable
CloseClipboard
SetClipboardData
LockWindowUpdate
EnumChildWindows
CharNextW
InvalidateRgn
DrawFrameControl
SetCursorPos
InvertRect
HideCaret
CopyIcon
CharUpperBuffW
IsCharLowerW
MapVirtualKeyExW
EmptyClipboard
OpenClipboard
GetKeyState
GetCursor
EqualRect
ReleaseCapture
SetRectEmpty
PtInRect
SetCapture
GetFocus
LoadImageW
GetWindowRgn
GetDoubleClickTime
SubtractRect
GetUpdateRect
TranslateMDISysAccel
GetIconInfo
DrawStateW
GetClientRect
DefMDIChildProcW
DefFrameProcW
SetMenu
DrawFocusRect
OffsetRect
InflateRect
FrameRect
PostMessageW
GetWindowRect
GetActiveWindow
WindowFromPoint
ClientToScreen
InvalidateRect
SetCursor
GetParent
GetNextDlgTabItem
IsMenu
SendMessageW
GetWindowLongW
DestroyCursor
GetSubMenu
DeleteMenu
RemoveMenu
LoadBitmapW
GetSysColorBrush
CreatePopupMenu
CreateMenu
GetMenuItemID
GetMenuState
EnableWindow
ModifyMenuW
InsertMenuW
GetMenuItemCount
AppendMenuW
ReleaseDC
GetDC
GetDesktopWindow
GetSystemMetrics
DestroyIcon
DrawIconEx
SystemParametersInfoW
TabbedTextOutW
DrawTextExW
GrayStringW
DrawTextW
GetMenuItemInfoW
SetRect
DrawEdge
FillRect
CopyRect
GetSysColor
GetDlgItemInt
gdi32
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
ExtSelectClipRgn
CreatePatternBrush
SelectPalette
GetObjectType
SetRectRgn
CombineRgn
GetMapMode
GetCharWidthW
StretchDIBits
CreateDIBitmap
GetTextMetricsW
EnumFontFamiliesW
GetTextCharsetInfo
CreateRoundRectRgn
OffsetRgn
GetRgnBox
GetViewportExtEx
RealizePalette
CreateEllipticRgn
Polyline
Polygon
CreatePalette
GetPaletteEntries
GetNearestPaletteIndex
GetSystemPaletteEntries
SetPaletteEntries
GetWindowOrgEx
PtInRegion
FrameRgn
GetBoundsRect
GetViewportOrgEx
GetTextFaceW
SetPixelV
CreateDCW
CopyMetaFileW
CreateRectRgnIndirect
GetTextColor
GetWindowExtEx
SetBitmapBits
CreateRectRgn
SelectClipRgn
SetLayout
SaveDC
GetLayout
SetTextAlign
IntersectClipRect
ExcludeClipRect
GetClipBox
SetMapMode
SetStretchBltMode
SetROP2
SetPolyFillMode
SetBkMode
GetDIBits
GetDeviceCaps
GetBitmapBits
LPtoDP
DPtoLP
LineTo
MoveToEx
GetBkColor
EnumFontFamiliesExW
SetDIBColorTable
ExtFloodFill
LineDDA
GetDIBColorTable
StretchBlt
FillRgn
CreatePolygonRgn
GetCurrentObject
CreateFontW
SetTextColor
SetBkColor
CreateBitmap
GetStockObject
Rectangle
CreateHatchBrush
PatBlt
SetPixel
GetPixel
GetObjectW
DeleteDC
DeleteObject
SelectObject
CreateDIBSection
Ellipse
GetTextExtentPoint32W
BitBlt
CreateFontIndirectW
PtVisible
RectVisible
TextOutW
ExtTextOutW
Escape
CreateCompatibleDC
CreateCompatibleBitmap
GetBkMode
CreatePen
CreateSolidBrush
RestoreDC
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetFileTitleW
winspool.drv
ClosePrinter
OpenPrinterW
DocumentPropertiesW
advapi32
RegQueryValueExW
RegCloseKey
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegEnumValueW
RegOpenKeyExW
RegEnumKeyExW
shell32
SHBrowseForFolderW
ShellExecuteW
SHGetFileInfoW
DragFinish
DragQueryFileW
SHGetDesktopFolder
SHAppBarMessage
ShellExecuteExW
SHGetPathFromIDListW
SHGetMalloc
SHGetSpecialFolderLocation
comctl32
ImageList_GetIconSize
_TrackMouseEvent
InitCommonControlsEx
shlwapi
PathFindExtensionW
PathStripToRootW
PathIsUNCW
PathFindFileNameW
StrCmpIW
PathRemoveFileSpecW
ole32
OleLockRunning
DoDragDrop
OleFlushClipboard
OleIsCurrentClipboard
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
OleUninitialize
CoGetClassObject
CoInitialize
CoInitializeEx
CoUninitialize
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
OleGetClipboard
CoFreeUnusedLibraries
OleInitialize
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
CoRegisterMessageFilter
CoRevokeClassObject
StgOpenStorageOnILockBytes
OleDuplicateData
CoTaskMemAlloc
ReleaseStgMedium
CoTaskMemFree
CreateStreamOnHGlobal
CoCreateInstance
oleaut32
SysFreeString
OleCreateFontIndirect
VarBstrFromDate
SystemTimeToVariantTime
SafeArrayDestroy
VariantCopy
SysStringLen
SysAllocString
VariantInit
VariantChangeType
VariantClear
SysAllocStringLen
VariantTimeToSystemTime
oledlg
OleUIBusyW
gdiplus
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromStream
GdipDrawImageRectI
GdipImageSelectActiveFrame
GdipCreateFromHDC
GdipImageGetFrameCount
GdipImageGetFrameDimensionsList
GdipImageGetFrameDimensionsCount
GdipLoadImageFromFile
GdipCreateBitmapFromFile
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImagePaletteSize
GdipGetImagePalette
GdipBitmapLockBits
GdipBitmapUnlockBits
GdipCreateBitmapFromScan0
GdipCloneImage
GdipAlloc
GdipFree
GdipDisposeImage
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdiplusStartup
GdiplusShutdown
GdipSetInterpolationMode
hid
HidD_GetAttributes
HidD_GetPreparsedData
HidP_GetCaps
HidD_FreePreparsedData
HidD_GetHidGuid
setupapi
SetupDiGetClassDevsW
SetupDiGetDeviceInterfaceDetailW
SetupDiDestroyDeviceInfoList
SetupDiEnumDeviceInterfaces
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
imm32
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
winmm
PlaySoundW
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 314KB - Virtual size: 314KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 54KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 252KB - Virtual size: 251KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 179KB - Virtual size: 178KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ