H:\Work\publish\2345Pic_V10.3\bin\Win32\Release\pdb\2345PdfApp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5af9a79c7afd46cdcf410694466e4d86332fb17bf531862618b0ee499606f42b.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
5af9a79c7afd46cdcf410694466e4d86332fb17bf531862618b0ee499606f42b.dll
Resource
win10v2004-20240426-en
General
-
Target
5af9a79c7afd46cdcf410694466e4d86332fb17bf531862618b0ee499606f42b
-
Size
2.1MB
-
MD5
5c07373d3736a808499db17c10d88f19
-
SHA1
8daf0fde0305becf6b85d2683404e097faa849e9
-
SHA256
5af9a79c7afd46cdcf410694466e4d86332fb17bf531862618b0ee499606f42b
-
SHA512
4464ae2a94e67e97026046d02b18407ea80b36315e08316fd4617d719a570a4c2c5592b164bb79ab8c1d585f11e2e2af9e7d30b3a60e85f95317aff345600d6e
-
SSDEEP
49152:CC4fbQDUQLdYoIV2fxbiYEThOAdfAbnkv2L/TwT/8yF8WQdfp:CJfb+1Y2fGhTdfAbkv2I8y
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5af9a79c7afd46cdcf410694466e4d86332fb17bf531862618b0ee499606f42b
Files
-
5af9a79c7afd46cdcf410694466e4d86332fb17bf531862618b0ee499606f42b.dll windows:5 windows x86 arch:x86
963af7d495078d8d84592f3ab5dcbd2e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
pdfium
FPDF_DestroyLibrary
FPDFAnnot_SetAP2
FPDFLink_LoadWebLinks
FPDFAnnot_SetFlags
FPDFAnnot_SetRect
FPDFLink_CountQuadPoints
FPDFAnnot_HasKey
FPDFPage_RemoveAnnot
FPDFAnnot_SetStringValue
FPDFPage_CreateAnnot
FPDFLink_GetAction
FPDFAnnot_GetRect
FPDFAnnot_GetAttachmentPoints
FPDFAnnot_CountAttachmentPoints
FPDFText_ClosePage
FPDFPage_GetAnnotCount
FPDF_ClosePage
FPDFLink_CountRects
FPDF_LoadPage
FPDFText_CountChars
FPDFLink_GetDest
FPDFPage_CloseAnnot
FPDFLink_GetRect
FPDFLink_GetLinkAtPoint
FPDFAnnot_GetSubtype
FPDFLink_CountWebLinks
FPDFAnnot_SetAP
FPDFText_GetCharIndexAtPos
FPDFLink_GetURL
FPDFText_GetCharBox
FPDFLink_CloseWebLinks
FPDFPage_GetAnnotIndex
FPDFPage_GetAnnot
FPDFLink_GetTextRange
FPDFLink_GetAnnotRect
FPDFLink_GetQuadPoints
FPDFLink_Enumerate
FPDF_GetLastError
FPDF_LoadDocument
FPDFDOC_ExitFormFillEnvironment
FPDF_CloseDocument
FPDFDOC_InitFormFillEnvironment
FPDF_LoadCustomDocument
FPDF_GetDocPermissions
FPDF_GetSecurityHandlerRevision
FPDF_SaveAsCopy
FPDFText_CountRects
FPDFText_GetRect
FPDF_GetPageSizeByIndexF
FPDFAnnot_SetColor
FPDFText_LoadPage
FPDFAnnot_AppendAttachmentPoints
FPDF_GetPageCount
FPDF_PageToDevice
FPDFBitmap_FillRect
FPDF_RenderPageBitmap
FPDF_DeviceToPage
FPDFText_GetText
FPDF_FFLDraw
FPDFBitmap_Create
FPDFDest_GetLocationInPage
FPDFAction_GetDest
FPDFAction_GetType
FPDFBookmark_GetFirstChild
FPDFDest_GetDestPageIndex
FPDFBookmark_GetDest
FPDFBookmark_GetNextSibling
FPDFAction_GetURIPath
FPDFAnnot_GetStringValue
FPDFBookmark_GetTitle
FPDFBookmark_GetAction
FPDFBitmap_GetHeight
FPDFBitmap_GetBuffer
FPDFBitmap_GetWidth
FPDFBitmap_Destroy
FPDF_InitLibrary
kernel32
FreeResource
HeapFree
OpenProcess
HeapAlloc
GetProcessHeap
LockResource
GetSystemInfo
FindFirstFileW
FindNextFileW
FindClose
GetEnvironmentVariableW
ResumeThread
GetACP
WideCharToMultiByte
ResetEvent
QueryDosDeviceW
GetCurrentProcess
SetFileTime
GetFileSize
GetFileTime
CreateDirectoryW
GetFullPathNameW
GetTempPathW
GetFileAttributesW
SetFileAttributesW
DeleteFileW
GetCurrentDirectoryW
GetWindowsDirectoryW
MoveFileExW
CopyFileW
DebugBreak
InterlockedExchangeAdd
lstrlenA
CreateMutexW
ReleaseMutex
OpenMutexW
GetVolumeInformationW
GetDiskFreeSpaceW
GetLogicalDriveStringsW
lstrcatW
GetFileSizeEx
GetCurrentProcessId
SystemTimeToFileTime
IsBadWritePtr
IsBadReadPtr
IsBadStringPtrW
GetLocalTime
LocalAlloc
GlobalMemoryStatusEx
WaitForSingleObjectEx
TerminateProcess
UnhandledExceptionFilter
QueryPerformanceCounter
QueryPerformanceFrequency
MoveFileW
LoadLibraryExA
VirtualFree
lstrlenW
LoadLibraryW
lstrcpyW
GlobalAlloc
InterlockedCompareExchange
InitializeCriticalSection
GlobalUnlock
VirtualAlloc
GlobalLock
GlobalFree
GetModuleHandleExA
Sleep
FlushInstructionCache
WaitForMultipleObjects
OutputDebugStringW
SetUnhandledExceptionFilter
LoadLibraryExW
lstrcmpiW
InterlockedIncrement
FreeLibrary
GetModuleHandleW
GetProcAddress
FindResourceW
LoadResource
MultiByteToWideChar
SetErrorMode
GetModuleFileNameW
InterlockedDecrement
GetLongPathNameW
InterlockedExchange
SizeofResource
MulDiv
GetFileAttributesExW
SetEndOfFile
SetFilePointer
WriteFile
ReadFile
LocalFree
GetCommandLineW
GetTickCount
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
SetLastError
SetEvent
CreateEventW
GetExitCodeProcess
CreateProcessW
CloseHandle
GetPrivateProfileStringW
GetVersionExW
CreateFileW
WaitForSingleObject
ExpandEnvironmentStringsW
DeleteCriticalSection
DecodePointer
RaiseException
GetLastError
InitializeCriticalSectionAndSpinCount
DeviceIoControl
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
OpenFileMappingW
FileTimeToSystemTime
FormatMessageW
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
IsDebuggerPresent
EncodePointer
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
GetTempFileNameW
user32
DrawTextW
GetDesktopWindow
SystemParametersInfoW
PtInRect
ReleaseDC
wsprintfW
IsRectEmpty
FindWindowW
GetWindowThreadProcessId
GetLastActivePopup
AttachThreadInput
GetForegroundWindow
WaitMessage
WindowFromPoint
MonitorFromRect
MapVirtualKeyExW
GetKeyboardLayout
GetKeyNameTextW
InflateRect
DeleteMenu
RemovePropW
IsMenu
SetPropW
GetUpdateRect
InsertMenuW
RedrawWindow
TrackMouseEvent
IsWindowEnabled
MonitorFromPoint
LoadStringA
MessageBeep
CreatePopupMenu
LoadStringW
SetWindowPlacement
TranslateAcceleratorW
TrackPopupMenuEx
RemoveMenu
AppendMenuW
PostQuitMessage
SetForegroundWindow
LoadImageW
GetDlgItemTextW
GetCursor
LoadIconW
GetWindowTextLengthW
IntersectRect
GetSystemMetrics
GetMessagePos
GetScrollInfo
SetRect
ScrollWindow
BeginPaint
EndPaint
CallWindowProcW
UpdateLayeredWindow
GetFocus
GetCursorPos
UnionRect
SetCursor
SetRectEmpty
LoadMenuW
GetMenuState
GetMenuItemCount
GetSubMenu
DestroyMenu
GetMenuStringW
ScreenToClient
GetScrollPos
RegisterClipboardFormatW
CheckRadioButton
IsDlgButtonChecked
CheckDlgButton
EnableWindow
OpenClipboard
GetCapture
CloseClipboard
EmptyClipboard
SetCapture
ReleaseCapture
GetWindowLongW
GetWindow
DrawIconEx
EndDialog
GetMonitorInfoW
MapWindowPoints
UpdateWindow
SetScrollInfo
ShowScrollBar
IsWindowVisible
MessageBoxW
SetActiveWindow
CreateWindowExW
SetWindowTextW
RegisterClassExW
OffsetRect
ClientToScreen
MoveWindow
LoadCursorW
GetScrollBarInfo
GetClientRect
GetClassInfoExW
InvalidateRect
IsIconic
SetParent
GetMessageW
DefWindowProcW
DestroyWindow
DispatchMessageW
PeekMessageW
CharNextW
TranslateMessage
IsZoomed
IsWindow
SetWindowLongW
DialogBoxParamW
SetTimer
SetFocus
IsCharAlphaNumericW
SetClipboardData
CharLowerW
DestroyCursor
MonitorFromWindow
KillTimer
GetWindowTextW
SetWindowPos
GetMenuItemInfoW
GetKeyState
CheckMenuRadioItem
SendMessageW
SetMenuItemInfoW
SetMenuDefaultItem
GetClassNameW
PostMessageW
GetActiveWindow
CopyRect
UnregisterClassW
FillRect
EqualRect
GetDC
GetWindowRect
GetParent
GetDlgItem
ShowWindow
gdi32
StretchBlt
SetGraphicsMode
CreateCompatibleDC
SelectObject
CreateCompatibleBitmap
BitBlt
GetDeviceCaps
CreatePen
EndPage
StartDocW
SetMapMode
CreateDCW
EndDoc
AbortDoc
StartPage
EnumFontFamiliesExW
GetTextExtentPoint32W
SetViewportOrgEx
MoveToEx
LineTo
GetStockObject
Polygon
CreateBitmap
CreateDIBitmap
SetDCPenColor
SetROP2
SetStretchBltMode
SetArcDirection
SelectClipRgn
SetBrushOrgEx
ExtCreatePen
CreateRectRgn
Rectangle
GetTextExtentPointW
CreateDIBSection
GetTextColor
StretchDIBits
SetDIBits
GetDIBits
SetDIBColorTable
GetDIBColorTable
DeleteDC
SetTextColor
SetBkMode
GetObjectW
SetBkColor
DeleteObject
CreateSolidBrush
CreateFontIndirectW
SetDCBrushColor
SetWorldTransform
ExtTextOutW
comdlg32
CommDlgExtendedError
GetSaveFileNameW
GetOpenFileNameW
PrintDlgExW
advapi32
RegOpenCurrentUser
RegQueryValueExW
GetUserNameW
RegCloseKey
RegQueryInfoKeyW
RegDeleteKeyW
RegDeleteValueW
RegOpenKeyExW
RegSetValueExW
RegCreateKeyExW
RegEnumKeyExW
shell32
SHGetSpecialFolderLocation
ShellExecuteW
SHGetPathFromIDListW
CommandLineToArgvW
DragQueryFileW
DragFinish
SHGetFolderPathW
SHChangeNotify
ole32
CoTaskMemFree
CreateStreamOnHGlobal
RevokeDragDrop
RegisterDragDrop
CoTaskMemRealloc
CoTaskMemAlloc
CoCreateInstance
oleaut32
VarUI4FromStr
msvcp140
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?uncaught_exception@std@@YA_NXZ
?global@locale@std@@SA?AV12@ABV12@@Z
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_New_Locimp@_Locimp@locale@std@@CAPAV123@_N@Z
?_Makeloc@_Locimp@locale@std@@CAPAV123@ABV_Locinfo@3@HPAV123@PBV23@@Z
?_Xruntime_error@std@@YAXPBD@Z
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xbad_function_call@std@@YAXXZ
_Mtx_unlock
_Mtx_init_in_situ
_Mtx_lock
_Mtx_destroy_in_situ
?_Throw_C_error@std@@YAXH@Z
?_Xlength_error@std@@YAXPBD@Z
?_Gninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??4?$_Yarn@D@std@@QAEAAV01@PBD@Z
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@HPBD@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
?_Xbad_alloc@std@@YAXXZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAN@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?write@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@PBD_J@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
shlwapi
SHDeleteKeyW
StrStrIW
StrStrW
StrRStrIW
comctl32
ImageList_Create
_TrackMouseEvent
CreatePropertySheetPageW
InitCommonControlsEx
msimg32
AlphaBlend
imm32
ImmAssociateContext
ImmGetVirtualKey
gdiplus
GdipCreatePen1
GdipDrawImageRectRectI
GdipTransformPointsI
GdipGetWorldTransform
GdipCreateMatrix
GdipDeletePen
GdipGetDC
GdipBitmapUnlockBits
GdipCloneBrush
GdipCreateFromHDC
GdipSaveGraphics
GdipGetImageWidth
GdipFree
GdipReleaseDC
GdipCreateImageAttributes
GdipCreateHBITMAPFromBitmap
GdipFillPath
GdipGetRegionHRgn
GdipSetSmoothingMode
GdipCreateSolidFill
GdipCreatePath
GdipCreateBitmapFromHBITMAP
GdipDeletePath
GdipDisposeImageAttributes
GdipAlloc
GdipSetImageAttributesColorKeys
GdipDeleteBrush
GdipDrawImageRectRect
GdipSetImageAttributesColorMatrix
GdipDeleteGraphics
GdipGetImageHeight
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFile
GdipGetImageGraphicsContext
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipCreateBitmapFromGdiDib
GdipWindingModeOutline
GdipDrawPath
GdipAddPathRectangleI
GdipGraphicsClear
GdipFillRectangle
GdipDrawLineI
GdipSetSolidFillColor
GdipSetPenColor
GdipLoadImageFromStream
GdipCloneBitmapAreaI
GdipCreateBitmapFromResource
GdipGetImagePixelFormat
GdipLoadImageFromFile
GdiplusShutdown
GdipSetCompositingMode
GdipDeleteMatrix
GdipDrawImagePointRectI
GdiplusStartup
GdipTranslateWorldTransform
GdipDeleteRegion
GdipRestoreGraphics
GdipFillRectangleI
GdipGetClip
GdipGetMatrixElements
GdipDrawRectangleI
GdipGetClipBoundsI
GdipBitmapLockBits
GdipSetClipRectI
GdipScaleWorldTransform
GdipCreateRegion
dbghelp
MiniDumpWriteDump
vcruntime140
wcsstr
_purecall
__CxxFrameHandler3
wcschr
__std_exception_destroy
__std_exception_copy
strstr
strchr
wcsrchr
memcpy
memset
memchr
memmove
_except_handler4_common
__std_type_info_destroy_list
_CxxThrowException
__RTDynamicCast
__std_type_info_compare
api-ms-win-crt-heap-l1-1-0
realloc
free
calloc
_callnewh
malloc
_recalloc
api-ms-win-crt-time-l1-1-0
_localtime64
_mktime64
_time64
api-ms-win-crt-runtime-l1-1-0
_invalid_parameter_noinfo
_invalid_parameter_noinfo_noreturn
_errno
_beginthreadex
_resetstkoflw
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswprintf_s
fseek
ftell
__stdio_common_vswprintf
__stdio_common_vsprintf_s
fflush
__stdio_common_vswscanf
fclose
__stdio_common_vsprintf
fgetc
_wfopen
fwrite
fgetpos
fputc
setvbuf
ungetc
fsetpos
fread
_get_stream_buffer_pointers
_fseeki64
api-ms-win-crt-string-l1-1-0
toupper
tolower
_wcsicmp
isalnum
_wcsupr
iswspace
_wcsdup
_wcsnicmp
towupper
towlower
_stricmp
strncpy_s
iswdigit
wcscat_s
wcscpy_s
wcsncpy_s
wcsncpy
api-ms-win-crt-convert-l1-1-0
wcstoul
_wtoi
_wtof
atof
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
_splitpath_s
api-ms-win-crt-utility-l1-1-0
rand
srand
api-ms-win-crt-math-l1-1-0
_dtest
round
_except1
_libm_sse2_log_precise
_libm_sse2_pow_precise
_libm_sse2_sqrt_precise
ceil
floor
modf
Exports
Exports
LoadPdfThumbnail
PdfReaderMain
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 295KB - Virtual size: 295KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 29KB - Virtual size: 35KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 174KB - Virtual size: 173KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 89KB - Virtual size: 89KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ