C:\Users\YAN\Documents\개발 프로젝트\OneWay\FileAgent\OneWayFileSendProgram\Debug\OneWayFileSendProgram.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3136ccb6abdb57249f8a3610163de55337f5b31137248650aa33579a2dd5b35e.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
3136ccb6abdb57249f8a3610163de55337f5b31137248650aa33579a2dd5b35e.exe
Resource
win10v2004-20240419-en
General
-
Target
3136ccb6abdb57249f8a3610163de55337f5b31137248650aa33579a2dd5b35e
-
Size
5.3MB
-
MD5
9af40d904ad76bed24b33f2d50cb2b58
-
SHA1
2243dfdbdd89ab82efbe2dd37fdca51ba364e2c7
-
SHA256
3136ccb6abdb57249f8a3610163de55337f5b31137248650aa33579a2dd5b35e
-
SHA512
f401b1fe6d8563cf5ad484ac1be0dca8ad88ad222d6180a20416b015bfbaf89e1d746b08befaf867878d520d4e64327cb141317a4e7b2c26b0d22a04651e40a1
-
SSDEEP
98304:kqm063UhWS4sVCHtlOPy/Uh4IJQuDEFTNhXUZDoNXOhJcC3:kqXthWwLEFTNhXUlhJcC3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3136ccb6abdb57249f8a3610163de55337f5b31137248650aa33579a2dd5b35e
Files
-
3136ccb6abdb57249f8a3610163de55337f5b31137248650aa33579a2dd5b35e.exe windows:5 windows x86 arch:x86
cc325b076e9edb67a5964852573d1624
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
ExitProcess
VirtualAlloc
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
GetStdHandle
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
QueryPerformanceCounter
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
HeapDestroy
FatalAppExitA
SetConsoleCtrlHandler
IsProcessorFeaturePresent
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
LCMapStringW
HeapAlloc
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
GetConsoleCP
GetConsoleMode
GetStringTypeW
GetLocaleInfoA
IsValidLocale
EnumSystemLocalesA
CreateFileA
GetProcessHeap
SetCurrentDirectoryW
GetFullPathNameA
GetDriveTypeW
SetEnvironmentVariableA
OpenEventA
FileTimeToLocalFileTime
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
InterlockedCompareExchange
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
DecodePointer
GetSystemTimeAsFileTime
RaiseException
IsBadReadPtr
HeapValidate
RtlUnwind
GetStartupInfoW
HeapSetInformation
GetCommandLineW
LocalLock
LocalUnlock
SetFileAttributesW
LocalFileTimeToFileTime
GetFileAttributesExW
GetFileSizeEx
ReplaceFileW
GetDiskFreeSpaceW
GetFileTime
SetFileTime
SearchPathW
GetTickCount
GetNumberFormatW
GetWindowsDirectoryW
FindResourceExW
GetTempPathW
GetTempFileNameW
GetShortPathNameW
lstrcmpiW
GetStringTypeExW
GetFullPathNameW
GetVolumeInformationW
SetEndOfFile
UnlockFile
GetModuleFileNameA
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
GetHandleInformation
GetThreadLocale
GetCurrentDirectoryW
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
InitializeCriticalSection
InterlockedIncrement
GetProfileIntW
VirtualProtect
SetErrorMode
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
GlobalFlags
GetSystemDirectoryW
FindNextFileW
GlobalReAlloc
GetFileSize
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
ResetEvent
PulseEvent
lstrcpyW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
SetEvent
CompareStringA
InterlockedExchange
GetCurrentThread
GetLocaleInfoW
LoadLibraryExW
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
WaitForMultipleObjects
ReleaseMutex
CreateMutexW
GetAtomNameW
lstrcmpA
SystemTimeToFileTime
FileTimeToSystemTime
MulDiv
CopyFileW
GlobalSize
GlobalAlloc
FormatMessageW
LocalFree
GetCurrentProcessId
GetModuleFileNameW
SuspendThread
GetThreadPriority
SetThreadPriority
CompareStringW
GetVersionExW
lstrcmpW
FreeLibrary
GetCurrentThreadId
GlobalGetAtomNameW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
GetModuleHandleW
LoadLibraryW
GetProcAddress
ActivateActCtx
DeactivateActCtx
SetLastError
GetTimeZoneInformation
ExitThread
LockFile
EncodePointer
GetFileAttributesW
CreateThread
ResumeThread
CreateFileW
CreateDirectoryW
ReleaseSemaphore
CloseHandle
DeleteFileW
MoveFileW
CreateEventW
WaitForSingleObject
Sleep
CreateSemaphoreW
FindFirstFileW
FindClose
lstrlenA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
GetLastError
LoadResource
LockResource
SizeofResource
GetUserDefaultLCID
FindResourceW
user32
LoadAcceleratorsW
TranslateAcceleratorW
ReuseDDElParam
GetMenuBarInfo
WaitMessage
CharNextW
CopyAcceleratorTableW
DrawIconEx
DestroyAcceleratorTable
CreateAcceleratorTableW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
SetCursorPos
SetClassLongW
UnregisterClassW
GetIconInfo
RegisterClipboardFormatW
PtInRect
OffsetRect
CopyIcon
IsRectEmpty
CharUpperBuffW
GetDoubleClickTime
DefFrameProcW
TranslateMDISysAccel
DefMDIChildProcW
IsClipboardFormatAvailable
IsCharLowerW
MapVirtualKeyExW
InSendMessage
EnumChildWindows
DestroyCursor
SetRect
InflateRect
IntersectRect
UnionRect
SubtractRect
DispatchMessageA
GetMessageA
IsWindowUnicode
PeekMessageA
GetMessageW
TranslateMessage
MsgWaitForMultipleObjectsEx
PostQuitMessage
GetWindowThreadProcessId
CheckMenuRadioItem
GetMenuContextHelpId
SetMenuContextHelpId
LoadMenuIndirectW
LoadMenuW
RemoveMenu
ModifyMenuW
InsertMenuItemW
InsertMenuW
GetSubMenu
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuStringW
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuDefaultItem
SetMenuDefaultItem
EnableMenuItem
CheckMenuItem
AppendMenuW
DeleteMenu
IsMenu
CreatePopupMenu
CreateMenu
GrayStringW
GetTabbedTextExtentW
DrawTextExW
DrawTextW
DrawFocusRect
DrawFrameControl
DrawEdge
DrawStateW
DrawIcon
InvertRect
FrameRect
FillRect
ExcludeUpdateRgn
WindowFromDC
GetSysColorBrush
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
OpenIcon
CloseWindow
LoadCursorW
PostThreadMessageW
NotifyWinEvent
GetWindowContextHelpId
SetWindowContextHelpId
SendNotifyMessageW
GetForegroundWindow
SetForegroundWindow
ShowCaret
HideCaret
SetCaretPos
GetCaretPos
CreateCaret
GetClipboardViewer
GetClipboardOwner
GetOpenClipboardWindow
OpenClipboard
SetClipboardViewer
ChangeClipboardChain
FlashWindow
WindowFromPoint
SetParent
GetLastActivePopup
FindWindowExW
FindWindowW
ChildWindowFromPointEx
ReleaseCapture
UpdateLayeredWindow
GetNextDlgTabItem
GetNextDlgGroupItem
DlgDirSelectComboBoxExW
DlgDirSelectExW
DlgDirListComboBoxW
DlgDirListW
SetCapture
KillTimer
SetTimer
DrawCaption
DrawAnimatedRects
EnableScrollBar
RedrawWindow
LockWindowUpdate
GetDCEx
ShowOwnedPopups
IsWindowVisible
ValidateRgn
ValidateRect
InvalidateRgn
InvalidateRect
GetUpdateRgn
GetUpdateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
EndPaint
BeginPaint
ClientToScreen
BringWindowToTop
GetWindowRgn
SetWindowRgn
ArrangeIconicWindows
IsZoomed
IsIconic
HiliteMenuItem
GetSystemMenu
DrawMenuBar
DragDetect
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
RegisterWindowMessageW
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
MonitorFromWindow
GetMonitorInfoW
GetClientRect
MapWindowPoints
GetSysColor
PeekMessageW
DispatchMessageW
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetWindowRect
GetScrollInfo
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetWindow
GetCapture
WinHelpW
TrackPopupMenuEx
TrackPopupMenu
SetWindowPlacement
GetWindowPlacement
GetWindowTextLengthW
GetWindowTextW
GetKeyState
GetDlgCtrlID
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
SetMenu
GetMenu
GetMessageTime
GetMessagePos
SetWindowLongW
SetWindowPos
EndDialog
GetDesktopWindow
GetActiveWindow
SetActiveWindow
EnableWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
TabbedTextOutW
MapDialogRect
MapVirtualKeyW
GetKeyNameTextW
GetClassNameW
LoadBitmapW
GetSystemMetrics
SendMessageW
PostMessageW
GetCursorPos
GetParent
IsWindow
SetRectEmpty
GetAsyncKeyState
RealChildWindowFromPoint
MonitorFromPoint
CharUpperW
MessageBeep
UnpackDDElParam
GetClipboardFormatNameW
GetClipboardFormatNameA
ShowScrollBar
GetDialogBaseUnits
SetLayeredWindowAttributes
EnumDisplayMonitors
SystemParametersInfoW
DestroyMenu
DestroyIcon
EmptyClipboard
CloseClipboard
SetClipboardData
CopyImage
LoadImageW
ChildWindowFromPoint
SetCursor
ScrollDC
shell32
DragAcceptFiles
SHGetDesktopFolder
SHGetSpecialFolderLocation
DragFinish
DragQueryFileW
SHAddToRecentDocs
SHGetFileInfoW
ExtractIconW
ShellExecuteW
SHAppBarMessage
ShellExecuteExW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
oleaut32
SysStringByteLen
VarDateFromStr
SysAllocString
SysStringLen
SafeArrayGetDim
SafeArrayGetElemsize
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayRedim
SafeArrayCreate
SystemTimeToVariantTime
VariantCopy
SysReAllocStringLen
SysAllocStringByteLen
VarBstrFromCy
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SysAllocStringLen
VariantInit
VariantChangeType
VariantClear
SysFreeString
VarBstrFromDate
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VarBstrFromDec
VarDecFromStr
OleCreateFontIndirect
DosDateTimeToVariantTime
VariantTimeToSystemTime
VarUdateFromDate
VarDateFromUdate
VarCyFromStr
msimg32
GradientFill
AlphaBlend
TransparentBlt
comctl32
ImageList_Create
ImageList_GetIconSize
ImageList_DrawEx
ImageList_GetImageCount
ImageList_GetIcon
ImageList_Remove
ImageList_AddMasked
ImageList_Destroy
ImageList_ReplaceIcon
InitCommonControlsEx
shlwapi
PathIsUNCW
PathRemoveFileSpecW
PathFindFileNameW
PathRemoveExtensionW
PathFindExtensionW
PathFileExistsW
PathStripToRootW
oledlg
OleUIInsertObjectW
OleUIConvertW
OleUIChangeIconW
OleUIEditLinksW
OleUIUpdateLinksW
OleUIPasteSpecialW
OleUIBusyW
gdiplus
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromStream
GdiplusStartup
GdipBitmapLockBits
GdiplusShutdown
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipFree
GdipDisposeImage
GdipCloneImage
GdipAlloc
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdipGetImagePaletteSize
GdipGetImagePalette
GdipCreateBitmapFromScan0
GdipBitmapUnlockBits
ws2_32
inet_addr
htons
shutdown
ioctlsocket
WSAGetLastError
recv
setsockopt
connect
closesocket
WSAStartup
send
socket
select
__WSAFDIsSet
oleacc
CreateStdAccessibleObject
LresultFromObject
AccessibleObjectFromWindow
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundW
gdi32
ExtTextOutW
SetTextColor
SetBkColor
CreateBitmap
UnrealizeObject
GetObjectType
CreatePen
CreatePenIndirect
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CloseEnhMetaFile
CreateEnhMetaFileW
CloseMetaFile
CreateMetaFileW
GetStockObject
DeleteObject
DPtoLP
GetWindowExtEx
GetWindowOrgEx
GetViewportExtEx
GetViewportOrgEx
CreateBrushIndirect
CreatePatternBrush
CreateDIBPatternBrushPt
CreateFontIndirectW
CreateFontW
CreateBitmapIndirect
SetBitmapBits
GetBitmapBits
SetBitmapDimensionEx
GetBitmapDimensionEx
CreateCompatibleBitmap
CreateDiscardableBitmap
CreatePalette
CreateHalftonePalette
GetPaletteEntries
SetPaletteEntries
AnimatePalette
GetNearestPaletteIndex
ResizePalette
CreateRectRgn
CreateRectRgnIndirect
CreateEllipticRgn
CreateEllipticRgnIndirect
CreatePolygonRgn
CreatePolyPolygonRgn
CreateRoundRectRgn
PathToRegion
ExtCreateRegion
GetRegionData
SetRectRgn
CombineRgn
EqualRgn
GetWorldTransform
GetGraphicsMode
GetMapMode
GetTextColor
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetBkColor
UpdateColors
RealizePalette
GetNearestColor
SelectObject
EnumObjects
SetBrushOrgEx
GetBrushOrgEx
GetDeviceCaps
CreateCompatibleDC
CreateICW
GetObjectW
GetTextExtentPointW
DeleteMetaFile
GetSystemPaletteEntries
EnumFontFamiliesExW
OffsetRgn
GetRgnBox
PtInRegion
RectInRegion
LPtoDP
FillRgn
FrameRgn
InvertRgn
StretchDIBits
CreateDIBitmap
PaintRgn
PtVisible
RectVisible
GetCurrentPositionEx
Arc
Polyline
Chord
Ellipse
Pie
Polygon
PolyPolygon
Rectangle
RoundRect
PatBlt
BitBlt
StretchBlt
GetPixel
SetPixel
FloodFill
ExtFloodFill
TextOutW
GetTextExtentPoint32W
GetTextAlign
GetTextFaceW
GetTextMetricsW
GetTextCharacterExtra
GetCharWidthW
GetFontLanguageInfo
GetCharacterPlacementW
GetAspectRatioFilterEx
Escape
SetBoundsRect
GetBoundsRect
ResetDCW
GetOutlineTextMetricsW
GetCharABCWidthsW
GetFontData
GetKerningPairsW
GetGlyphOutlineW
StartDocW
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
MaskBlt
PlgBlt
SetPixelV
AngleArc
GetArcDirection
PolyPolyline
GetColorAdjustment
GetCurrentObject
PolyBezier
DrawEscape
ExtEscape
GetCharABCWidthsFloatW
GetCharWidthFloatW
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetMiterLimit
GetPath
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
GdiComment
PlayEnhMetaFile
CopyMetaFileW
DeleteDC
SaveDC
RestoreDC
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SelectClipRgn
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
CreateDCW
GetLayout
SetLayout
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
GetClipRgn
SelectClipPath
ExtSelectClipRgn
PlayMetaFileRecord
EnumMetaFile
PlayMetaFile
CreateDIBSection
GetDIBits
SetDIBColorTable
EnumFontFamiliesW
GetTextCharsetInfo
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
GetJobW
comdlg32
GetFileTitleW
advapi32
GetFileSecurityW
OpenThreadToken
RegCloseKey
RegSetValueW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegQueryValueW
RegEnumKeyW
RegEnumValueW
RegEnumKeyExW
SetFileSecurityW
RevertToSelf
SetThreadToken
ole32
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoGetMalloc
CreateFileMoniker
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleSetMenuDescriptor
OleSetContainedObject
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateFromFile
OleCreateLinkToFile
OleCreate
PropVariantCopy
OleSave
StgIsStorageILockBytes
GetHGlobalFromILockBytes
OleGetIconOfClass
WriteClassStm
OleSaveToStream
CreateGenericComposite
CreateItemMoniker
OleIsRunning
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleGetClipboard
CoRegisterMessageFilter
OleRegEnumVerbs
OleRegGetMiscStatus
OleQueryCreateFromData
OleQueryLinkFromData
GetClassFile
GetRunningObjectTable
CreateOleAdviseHolder
CreateDataAdviseHolder
CoReleaseMarshalData
CoMarshalInterface
CoUnmarshalInterface
DoDragDrop
OleFlushClipboard
OleSetClipboard
OleIsCurrentClipboard
OleRun
CoRevokeClassObject
CoRegisterClassObject
CreateILockBytesOnHGlobal
StgCreateDocfileOnILockBytes
StgOpenStorageOnILockBytes
CoGetClassObject
StringFromGUID2
CoDisconnectObject
CoInitializeEx
CoUninitialize
CoInitialize
OleDuplicateData
CoTaskMemFree
CreateBindCtx
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
CoCreateInstance
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
ReleaseStgMedium
CoTaskMemAlloc
CoTreatAsClass
StringFromCLSID
ReadClassStg
OleLoad
Sections
.text Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 824KB - Virtual size: 824KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 88KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 245KB - Virtual size: 244KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ