Static task
static1
Behavioral task
behavioral1
Sample
PictService.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
PictService.exe
Resource
win10v2004-20240508-en
General
-
Target
PictService.exe
-
Size
283KB
-
MD5
7d9b1393fb8329cd32bfc24e9c7bdae7
-
SHA1
fa69f5fb150d318c90b7813e53fe5d56125751a8
-
SHA256
6617c074b00d23a08aefc2cca477caaee4d56fadde408ab7a1009c7e5ced6cdb
-
SHA512
fbf1b6ab90e6c6d784b3485528d1a95e694ac58dad8c47ee40bd5ff888eae7d57dbcfea607402e4a99ef0c67c3dc804172a99c767ee00480b44d069594165966
-
SSDEEP
3072:oMDjCU2ReXcsdGrCE93DIRUBHY67lEwUsfEjl5fD27AJl5oUNWWY5zN:PDGqckGx93OcHY6ZEwUsfEZ/JknW+N
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource PictService.exe
Files
-
PictService.exe.exe windows:5 windows x86 arch:x86
b4aae341286c24e3bac427a54a5edccc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
MultiByteToWideChar
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalFree
FindClose
FindNextFileA
FileTimeToSystemTime
FindFirstFileA
LocalFileTimeToFileTime
SystemTimeToFileTime
SetFileTime
SetFileAttributesA
GetFileAttributesA
GetCurrentProcessId
TlsGetValue
GlobalReAlloc
GlobalHandle
TlsAlloc
TlsSetValue
LocalReAlloc
TlsFree
FreeLibrary
SetLastError
GetModuleHandleW
InterlockedIncrement
lstrcmpA
GlobalGetAtomNameA
FlushFileBuffers
GetCurrentProcess
GetVolumeInformationA
GetFullPathNameA
GetCurrentThreadId
GlobalAddAtomA
GlobalFlags
lstrcmpW
GlobalDeleteAtom
GlobalFindAtomA
GetLocaleInfoA
GetCPInfo
GetOEMCP
GetCurrentDirectoryA
RtlUnwind
GetCommandLineA
GetStartupInfoA
RaiseException
VirtualAlloc
VirtualQuery
HeapReAlloc
HeapSize
ExitProcess
VirtualFree
HeapCreate
GetStdHandle
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetACP
IsValidCodePage
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
GetFileType
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetDriveTypeA
InitializeCriticalSectionAndSpinCount
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
LoadLibraryA
GetVersionExA
QueryDosDeviceA
GetModuleHandleA
GetProcAddress
LocalAlloc
GetLastError
LocalFree
DeviceIoControl
CreateMutexA
WaitForSingleObject
ReleaseMutex
EnterCriticalSection
LeaveCriticalSection
CopyFileA
InterlockedDecrement
FormatMessageA
lstrlenA
HeapAlloc
HeapFree
GetProcessHeap
InitializeCriticalSection
DeleteCriticalSection
CreateThread
GetTickCount
GetFileTime
FileTimeToLocalFileTime
DeleteFileA
CreateDirectoryA
GetPrivateProfileIntA
GetPrivateProfileStringA
Sleep
GetLocalTime
SetFilePointer
SetEndOfFile
GetModuleFileNameA
WideCharToMultiByte
FindResourceA
LoadResource
LockResource
SizeofResource
WriteFile
CreateFileA
GetFileSize
CloseHandle
CompareStringA
ReadFile
user32
GetPropA
SetPropA
GetClassLongA
GetCapture
WinHelpA
LoadIconA
RegisterWindowMessageA
CheckMenuItem
EnableMenuItem
ModifyMenuA
LoadBitmapA
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
PostQuitMessage
DestroyMenu
GetClientRect
PostMessageA
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
AdjustWindowRectEx
CopyRect
DefWindowProcA
CallWindowProcA
GetMenu
SystemParametersInfoA
IsIconic
GetWindowPlacement
RemovePropA
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
SetWindowPos
SetWindowLongA
IsWindow
GetDlgItem
GetFocus
ClientToScreen
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameA
PtInRect
SetWindowTextA
SetWindowsHookExA
CallNextHookEx
DispatchMessageA
GetKeyState
PeekMessageA
ValidateRect
CharUpperA
GetWindowTextA
LoadCursorA
GetSystemMetrics
GetDC
ReleaseDC
GetSysColor
GetSysColorBrush
UnhookWindowsHookEx
GetWindowThreadProcessId
SendMessageA
GetParent
GetWindowLongA
GetLastActivePopup
IsWindowEnabled
EnableWindow
MessageBoxA
GetForegroundWindow
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
advapi32
StartServiceCtrlDispatcherA
RegisterServiceCtrlHandlerA
ControlService
DeleteService
CreateServiceA
ChangeServiceConfig2A
OpenSCManagerA
OpenServiceA
CloseServiceHandle
SetServiceStatus
ole32
CoCreateInstance
OleRun
OleInitialize
OleUninitialize
oleaut32
VariantClear
VariantChangeType
VariantInit
SysFreeString
SysAllocString
GetErrorInfo
ijl15
ord3
ord2
ord5
ord4
shlwapi
PathIsUNCA
PathStripToRootA
ws2_32
recv
send
inet_ntoa
getpeername
closesocket
WSAGetLastError
setsockopt
__WSAFDIsSet
WSAStartup
WSACleanup
inet_addr
connect
socket
htons
bind
listen
accept
select
setupapi
SetupDiGetClassDevsA
SetupDiEnumDeviceInfo
SetupDiGetDeviceRegistryPropertyA
SetupDiDestroyDeviceInfoList
oleacc
LresultFromObject
CreateStdAccessibleObject
gdi32
GetStockObject
CreateBitmap
DeleteObject
SaveDC
RestoreDC
SetBkColor
SetTextColor
SetMapMode
GetClipBox
PtVisible
RectVisible
TextOutA
ExtTextOutA
Escape
SelectObject
SetViewportOrgEx
DeleteDC
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
ScaleWindowExtEx
SetWindowExtEx
GetDeviceCaps
winspool.drv
DocumentPropertiesA
OpenPrinterA
ClosePrinter
Sections
.text Size: 189KB - Virtual size: 189KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 53KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ