C:\Work\work\SystemGoods\Desktop\TS\Source\Build\x64\Release\TaskSpace64.pdb
Static task
static1
Behavioral task
behavioral1
Sample
TaskSpace64.exe
Resource
win11-20240419-en
Behavioral task
behavioral2
Sample
TaskSpaceHookDll64.dll
Resource
win11-20240419-en
General
-
Target
Downloads.zip
-
Size
1.9MB
-
MD5
e05626b7a7284c9b63a0570c1ce95c0a
-
SHA1
ef1314729d73f324c237468bf4ea8f02bb1b4044
-
SHA256
b0537808bb04d3fe99726e01fd4e5476080cea3f8a0d6c1c21eac4e55067fb3c
-
SHA512
a39b9cc3347069d905cc923ecb9f60b3cd9bfc5b1b0e15ef246953ba287653730c05fdd10db0e5ab48669fd263c0550be62def55a449789746d783f4f7f2d202
-
SSDEEP
24576:sembVZwujDwluqKbiHskvZ7CKoHA1dzNCDYi6c1tHdI81A9I4Wl5MXd1qVdS7b8Q:avw83Rg8KoHAP4DYi6UxbmbqVY7bhLYm
Malware Config
Signatures
-
Unsigned PE 2 IoCs
Checks for missing Authenticode signature.
resource unpack001/TaskSpace64.exe unpack001/TaskSpaceHookDll64.dll
Files
-
Downloads.zip.zip
-
TaskSpace64.exe.exe windows:5 windows x64 arch:x64
a655e6f5bb1aa397770b2aaf12e3ae40
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
psapi
GetModuleFileNameExW
GetProcessImageFileNameW
user32
ShowOwnedPopups
GetKeyNameTextW
MapVirtualKeyW
MapDialogRect
InvertRect
DrawFocusRect
HideCaret
EnableScrollBar
NotifyWinEvent
MessageBeep
IntersectRect
EnumDisplayMonitors
RealChildWindowFromPoint
UnregisterClassW
CharUpperW
DrawStateW
DrawFrameControl
SetWindowRgn
UnionRect
UpdateLayeredWindow
MonitorFromPoint
IsMenu
CreatePopupMenu
ReuseDDElParam
UnpackDDElParam
IsZoomed
DestroyAcceleratorTable
SetClassLongPtrW
CopyAcceleratorTableW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
CreateAcceleratorTableW
SetCursorPos
GetMenuDefaultItem
GetIconInfo
GetNextDlgGroupItem
SetMenuDefaultItem
CopyIcon
RegisterClipboardFormatW
WaitMessage
PostThreadMessageW
DefFrameProcW
DefMDIChildProcW
DrawMenuBar
TranslateMDISysAccel
IsClipboardFormatAvailable
FrameRect
GetUpdateRect
CharUpperBuffW
IsCharLowerW
MapVirtualKeyExW
SubtractRect
DestroyCursor
GetWindowRgn
AdjustWindowRectEx
GetScrollInfo
SetScrollInfo
SetWindowPlacement
GetWindowPlacement
GetMenu
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamW
GetNextDlgTabItem
IsWindowEnabled
MoveWindow
GetDlgCtrlID
IsDialogMessageW
SendDlgItemMessageW
CheckDlgButton
GetWindowTextLengthW
GetScrollPos
SetScrollPos
SetFocus
GetMenuState
GetMenuStringW
AppendMenuW
GetMenuItemID
InsertMenuW
RemoveMenu
GetProcessWindowStation
GetUserObjectInformationW
RegisterWindowMessageW
GetWindow
FindWindowW
GetWindowLongW
SetCursor
SetWindowPos
GetAncestor
SetForegroundWindow
ShowWindow
AttachThreadInput
GetWindowThreadProcessId
GetTopWindow
IsWindowVisible
RedrawWindow
GetWindowRect
GetClassNameW
MessageBoxW
GetWindowTextW
UnregisterHotKey
RegisterHotKey
SendMessageW
SetProcessDefaultLayout
LoadBitmapW
GetDC
ReleaseDC
EnableWindow
GetClassInfoW
GetKeyState
SetMenuItemBitmaps
GetGUIThreadInfo
DestroyIcon
EnableMenuItem
DrawIcon
LoadAcceleratorsW
TranslateAcceleratorW
PrintWindow
LockWindowUpdate
ScreenToClient
BringWindowToTop
IsIconic
GetSystemMenu
GetParent
FillRect
GetSysColorBrush
EnumWindows
InsertMenuItemW
CheckMenuItem
DeleteMenu
CreateMenu
EndDialog
SystemParametersInfoW
GetWindowDC
GetSystemMetrics
DrawEdge
SetRect
GetClipboardData
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
BeginDeferWindowPos
EndDeferWindowPos
DeferWindowPos
EqualRect
DrawTextW
InflateRect
ReleaseCapture
SetCapture
UpdateWindow
GetForegroundWindow
PtInRect
WindowFromPoint
CreateWindowExW
DestroyWindow
ClientToScreen
CallWindowProcW
SetLayeredWindowAttributes
GetPropW
GetSysColor
GetDesktopWindow
DestroyMenu
SetWindowsHookExW
KillTimer
LoadIconW
IsWindow
LoadImageW
DispatchMessageW
FindWindowExW
GetDlgItem
SetWindowTextW
CallNextHookEx
GetWindowContextHelpId
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuItemCount
UnhookWindowsHookEx
EndPaint
BeginPaint
GrayStringW
DrawTextExW
TabbedTextOutW
GetMenuCheckMarkDimensions
ModifyMenuW
SendDlgItemMessageA
WinHelpW
IsChild
GetCapture
RemovePropW
GetLastActivePopup
GetMessageTime
ShowScrollBar
GetMessagePos
SetWindowLongPtrW
GetClassInfoExW
LoadCursorW
GetWindowLongPtrW
TrackPopupMenu
DefWindowProcW
PostQuitMessage
PostMessageW
GetCursorPos
MonitorFromWindow
GetMonitorInfoW
PeekMessageW
MapWindowPoints
ScrollWindow
SetMenu
RegisterClassW
GetScrollRange
SetWindowLongW
TranslateMessage
GetMessageW
SetTimer
GetDoubleClickTime
SetPropW
GetSubMenu
LoadMenuW
GetClassLongPtrW
RegisterClassExW
CopyImage
DrawIconEx
OffsetRect
GetClientRect
InvalidateRect
ValidateRect
GetFocus
SetCaretPos
SetWindowContextHelpId
GetAsyncKeyState
CopyRect
SetParent
IsRectEmpty
SetRectEmpty
SetScrollRange
gdi32
GetViewportExtEx
GetWindowExtEx
GetPixel
PtVisible
RectVisible
CreateDCW
SetViewportOrgEx
CreateCompatibleBitmap
CreateCompatibleDC
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
SelectClipRgn
SetMapMode
ExtSelectClipRgn
GetTextExtentPoint32W
SetLayout
SetTextAlign
MoveToEx
LineTo
SetROP2
SetPolyFillMode
GetBitmapBits
Escape
ExtTextOutW
TextOutW
CreateFontIndirectW
GetObjectW
IntersectClipRect
GetDeviceCaps
ExcludeClipRect
GetStockObject
SetTextColor
SetBkMode
CreatePatternBrush
SelectPalette
GetTextFaceW
GetObjectA
DeleteDC
DeleteObject
SelectObject
CreateDIBSection
GetLayout
GetDIBColorTable
StretchBlt
BitBlt
CreatePen
CreateRectRgnIndirect
OffsetRgn
GetViewportOrgEx
GetWindowOrgEx
Rectangle
SetPaletteEntries
ExtFloodFill
GetBoundsRect
FillRgn
LPtoDP
CreatePolygonRgn
SetPixelV
FrameRgn
PtInRegion
SetDIBColorTable
RestoreDC
SaveDC
CreateBitmap
SetBkColor
GetClipBox
CreateSolidBrush
SetPixel
GetRgnBox
GetSystemPaletteEntries
GetNearestPaletteIndex
CreateRoundRectRgn
RealizePalette
GetPaletteEntries
CreatePalette
CreateRectRgn
CombineRgn
Polygon
Ellipse
Polyline
GetTextColor
GetBkColor
CreateEllipticRgn
EnumFontFamiliesExW
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
DPtoLP
SetRectRgn
GetTextMetricsW
PatBlt
CreateHatchBrush
GetObjectType
CopyMetaFileW
advapi32
ReportEventW
RegDeleteValueW
RegSetValueExW
RegOpenKeyExW
RegCloseKey
DeregisterEventSource
RegCreateKeyExW
RegisterEventSourceW
RegDeleteKeyW
RegEnumKeyW
RegQueryValueW
RegEnumValueW
RegEnumKeyExW
RegQueryValueExW
wsock32
__WSAFDIsSet
gethostbyname
accept
WSASetLastError
sendto
listen
socket
connect
setsockopt
getsockopt
htons
bind
ntohs
getsockname
send
recv
WSAGetLastError
closesocket
WSAStartup
WSACleanup
select
gethostname
inet_ntoa
shutdown
recvfrom
kernel32
IsValidCodePage
LCMapStringW
GetStringTypeW
GetFullPathNameA
CreateFileA
GetOEMCP
WriteConsoleW
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
SetEnvironmentVariableA
GetDriveTypeW
GetProcessHeap
GetACP
GetConsoleCP
TerminateProcess
GetTimeZoneInformation
GetDateFormatA
GetTimeFormatA
RtlCaptureContext
SizeofResource
LockResource
LoadResource
FindResourceW
MultiByteToWideChar
WideCharToMultiByte
GetLastError
DeleteFileW
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
SetEvent
GetTickCount
GetCommandLineW
GetModuleFileNameW
GetCurrentThreadId
GetFileAttributesW
LocalFree
FormatMessageW
CloseHandle
OpenProcess
UnmapViewOfFile
MapViewOfFile
CreateFileMappingW
GetFileSize
CreateFileW
FindResourceExW
SetThreadUILanguage
GetModuleHandleW
QueryPerformanceFrequency
QueryPerformanceCounter
ResumeThread
GetUserDefaultUILanguage
GetLocalTime
GetVersionExW
FreeLibrary
FormatMessageA
LoadLibraryExW
MulDiv
WaitForMultipleObjects
CreateEventW
MoveFileW
GetTempFileNameW
GetTempPathW
Sleep
GetProcAddress
LoadLibraryW
SetLastError
DeactivateActCtx
ActivateActCtx
TerminateThread
WaitForSingleObject
GetExitCodeProcess
CreateProcessW
ResetEvent
GlobalUnlock
GlobalLock
GlobalAlloc
GlobalSize
GlobalFree
Module32NextW
Module32FirstW
CreateToolhelp32Snapshot
SleepEx
DuplicateHandle
GetCurrentProcess
ReleaseMutex
CreateEventA
CreateMutexA
GetExitCodeThread
ReadFile
PeekNamedPipe
GetFileType
GetStdHandle
LoadLibraryA
ExpandEnvironmentStringsA
GlobalMemoryStatus
GetVersion
GetCurrentProcessId
FindFirstFileW
FindClose
ExitProcess
FlushConsoleInputBuffer
lstrlenW
CopyFileW
CreateMutexW
CreateActCtxW
ReleaseActCtx
FreeResource
lstrcmpW
CompareStringW
GlobalDeleteAtom
GlobalFindAtomW
GlobalAddAtomW
GetLocaleInfoW
GetSystemDefaultUILanguage
ConvertDefaultLocale
GetCurrentThread
lstrcmpA
SetThreadPriority
GetPrivateProfileIntW
WritePrivateProfileStringW
GetPrivateProfileStringW
VirtualProtect
GetSystemDirectoryW
lstrcpyW
LocalAlloc
TlsGetValue
InitializeCriticalSection
TlsAlloc
GlobalReAlloc
GlobalHandle
TlsSetValue
LocalReAlloc
TlsFree
GlobalGetAtomNameW
lstrlenA
FileTimeToSystemTime
GlobalFlags
GetCurrentDirectoryW
lstrcmpiW
WriteFile
SetFilePointer
FlushFileBuffers
LockFile
UnlockFile
SetEndOfFile
GetVolumeInformationW
GetFullPathNameW
GetWindowsDirectoryW
GetNumberFormatW
SetErrorMode
GetFileAttributesExW
FileTimeToLocalFileTime
GetFileSizeEx
GetFileTime
GetProfileIntW
SearchPathW
GetUserDefaultLCID
GetStartupInfoW
RaiseException
RtlPcToFileHeader
RtlLookupFunctionEntry
RtlUnwindEx
HeapFree
EncodePointer
DecodePointer
GetSystemTimeAsFileTime
ExitThread
CreateThread
GetCPInfo
HeapAlloc
VirtualAlloc
SetThreadStackGuarantee
GetSystemInfo
VirtualQuery
HeapReAlloc
GetFileInformationByHandle
GetDriveTypeA
FindFirstFileExA
SetConsoleCtrlHandler
ReadConsoleInputA
SetConsoleMode
GetConsoleMode
HeapQueryInformation
HeapSize
SetStdHandle
SetUnhandledExceptionFilter
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
FlsGetValue
FlsSetValue
FlsFree
FlsAlloc
HeapSetInformation
HeapCreate
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
msimg32
TransparentBlt
AlphaBlend
comdlg32
GetSaveFileNameW
GetFileTitleW
GetOpenFileNameW
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
shell32
Shell_NotifyIconW
ShellExecuteW
SHAppBarMessage
SHGetFileInfoW
DragFinish
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileW
SHGetFolderPathW
comctl32
InitCommonControlsEx
ImageList_GetIconSize
shlwapi
PathFindFileNameW
PathStripToRootW
PathIsUNCW
PathRemoveFileSpecW
PathFindOnPathW
PathFindExtensionW
ole32
CoCreateInstance
CoInitializeEx
CoUninitialize
CoSetProxyBlanket
CoInitializeSecurity
CreateStreamOnHGlobal
CoTaskMemFree
ReleaseStgMedium
CoTaskMemAlloc
OleDuplicateData
CoCreateGuid
CoInitialize
OleGetClipboard
RevokeDragDrop
CoLockObjectExternal
RegisterDragDrop
DoDragDrop
OleLockRunning
IsAccelerator
OleTranslateAccelerator
OleDestroyMenuDescriptor
OleCreateMenuDescriptor
oleaut32
SysAllocStringLen
VariantClear
VariantChangeType
VariantInit
VariantTimeToSystemTime
SystemTimeToVariantTime
VarBstrFromDate
SysFreeString
SysStringLen
SysAllocString
gdiplus
GdipDrawPath
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateBitmapFromHBITMAP
GdipDrawImageRect
GdipCreateHICONFromBitmap
GdipCreateBitmapFromHICON
GdipCreateRegionHrgn
GdipFillRegion
GdipDeleteRegion
GdipCloneImage
GdipDrawImageI
GdipGetImageGraphicsContext
GdiplusStartup
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromStream
GdipGetImagePalette
GdipGetImagePaletteSize
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDisposeImage
GdiplusShutdown
GdipCloneBrush
GdipCreateFontFromLogfontA
GdipCreateFontFromDC
GdipDrawString
GdipSetSmoothingMode
GdipCreateFromHDC
GdipAddPathArcI
GdipClosePathFigures
GdipSetStringFormatLineAlign
GdipSetStringFormatAlign
GdipGetPenWidth
GdipSetPenWidth
GdipCreateSolidFill
GdipDeleteFont
GdipDeleteGraphics
GdipDeletePath
GdipCreatePath
GdipDeleteStringFormat
GdipDeleteBrush
GdipFree
GdipAlloc
GdipCreatePen1
GdipDeletePen
GdipCreateStringFormat
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
imm32
ImmGetContext
ImmGetOpenStatus
ImmReleaseContext
winmm
PlaySoundW
wldap32
ord143
ord60
ord50
ord26
ord30
ord32
ord35
ord79
ord200
ord33
ord301
ord27
ord41
ord46
ord211
ord22
Exports
Exports
ssl2_ciphers
ssl3_ciphers
Sections
.text Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 993KB - Virtual size: 992KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 151KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 146KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
text Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
data Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 213KB - Virtual size: 213KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
TaskSpaceHookDll64.dll.dll windows:5 windows x64 arch:x64
09b249326bc2fb2791331366f270192f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
C:\Work\work\SystemGoods\Desktop\TS\Source\Build\x64\Release\TaskSpaceHookDll64.pdb
Imports
gdi32
DeleteObject
user32
GetDesktopWindow
LoadBitmapW
GetWindowLongPtrW
FindWindowExW
BringWindowToTop
GetCursorPos
CallWindowProcW
ValidateRect
ReleaseDC
FillRect
GetSysColorBrush
GetClientRect
GetDC
GetForegroundWindow
DeleteMenu
CreatePopupMenu
SetMenuItemBitmaps
GetSystemMenu
CheckMenuItem
SetMenuItemInfoW
InsertMenuItemW
GetMenuItemInfoW
PostMessageW
CallNextHookEx
GetWindow
SetWindowLongPtrW
SendMessageW
GetParent
RegisterWindowMessageW
SetPropW
GetPropW
SetProcessDefaultLayout
RedrawWindow
GetTopWindow
IsWindowVisible
GetClassNameW
SetForegroundWindow
ShowWindow
AttachThreadInput
GetAncestor
SetWindowLongW
GetWindowLongW
GetWindowThreadProcessId
FindWindowW
psapi
GetModuleFileNameExW
GetProcessImageFileNameW
kernel32
CreateFileW
SetStdHandle
SetFilePointer
HeapReAlloc
GetStringTypeW
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetModuleFileNameA
HeapDestroy
HeapCreate
GetVersion
HeapSetInformation
FlushFileBuffers
GetConsoleMode
GetConsoleCP
WriteFile
DeleteCriticalSection
GetStartupInfoW
InitializeCriticalSectionAndSpinCount
SetHandleCount
MultiByteToWideChar
LCMapStringW
WideCharToMultiByte
RtlUnwindEx
ExitProcess
HeapSize
FlsAlloc
SetLastError
FlsFree
FlsGetValue
IsValidCodePage
GetOEMCP
GetACP
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
RtlPcToFileHeader
RaiseException
GetCommandLineA
FlsSetValue
HeapAlloc
HeapFree
GetLastError
GetStdHandle
GetFileType
WriteConsoleW
DecodePointer
EncodePointer
GetVersionExW
ResumeThread
OpenProcess
CloseHandle
GetCurrentThreadId
GetModuleFileNameW
GetModuleHandleW
SetThreadUILanguage
FindResourceExW
LoadResource
LockResource
SizeofResource
LoadLibraryW
FreeLibrary
GetProcAddress
GetCurrentThread
GetThreadContext
VirtualQuery
GetCurrentProcess
VirtualFree
InitializeCriticalSection
Sleep
LeaveCriticalSection
SetThreadPriority
FlushInstructionCache
VirtualAlloc
EnterCriticalSection
VirtualProtectEx
OpenThread
GetSystemInfo
GetThreadPriority
GetCurrentProcessId
SuspendThread
Exports
Exports
CallWndProc
CallWndProcRet
InitDll
MouseProc
Sections
.text Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 178KB - Virtual size: 187KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ