E:\WuYouIP\WuYouIPMachineSetup\WuYouIPMachineSetup\Release\WuYouIPMachineSetup.pdb
Static task
static1
Behavioral task
behavioral1
Sample
dfb56d431d932bd1133a711b03ea47fae4262e8d84053e89c2966ddd760a0a48.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
dfb56d431d932bd1133a711b03ea47fae4262e8d84053e89c2966ddd760a0a48.exe
Resource
win10v2004-20240226-en
General
-
Target
dfb56d431d932bd1133a711b03ea47fae4262e8d84053e89c2966ddd760a0a48
-
Size
8.8MB
-
MD5
73b5f3b287e5476749288b8a861cf2c1
-
SHA1
1d8fa4b1d9e15680b843b4f69b2712923b9fca52
-
SHA256
dfb56d431d932bd1133a711b03ea47fae4262e8d84053e89c2966ddd760a0a48
-
SHA512
44d86541842e21c9373ce2963697bdf984cbd054ab5f3df380bd6c825e65d1911abf290c66a1f62d8e085db10cb6b763fcc28b441034b36435ba82b734583003
-
SSDEEP
196608:ISTkT888JIbx7M8nIV3YhzAw2LqbBZP56Y+Xfd6xeBI1BfsvphTxZE2Rf3ZFlxrv:I+l8LyIawfb4fHJE2Rf3ZFzrtc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dfb56d431d932bd1133a711b03ea47fae4262e8d84053e89c2966ddd760a0a48
Files
-
dfb56d431d932bd1133a711b03ea47fae4262e8d84053e89c2966ddd760a0a48.exe windows:5 windows x86 arch:x86
7acc16578c7e46489031ab2b2418a4ce
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
IsBadReadPtr
GetModuleHandleA
LoadLibraryA
GetVersionExA
GetLocalTime
GetVersionExW
GetTickCount
MulDiv
GetModuleHandleW
GetSystemTime
FindFirstFileW
GetFullPathNameW
FindClose
SetLastError
FreeResource
LoadLibraryW
GetProcAddress
FreeLibrary
GetCurrentThreadId
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GetCurrentProcess
HeapCreate
FlushInstructionCache
SetCurrentDirectoryW
GetModuleFileNameW
GetProcessHeap
DeleteCriticalSection
HeapDestroy
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionAndSpinCount
HeapFree
InterlockedIncrement
OutputDebugStringA
WideCharToMultiByte
InterlockedDecrement
CreateDirectoryW
Sleep
WinExec
CloseHandle
WriteFile
CreateFileW
DeleteFileW
GetFileAttributesW
WriteConsoleW
SetConsoleCtrlHandler
SetEnvironmentVariableW
SetEnvironmentVariableA
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
IsValidCodePage
FindNextFileA
FindFirstFileExW
FindFirstFileExA
GetDriveTypeW
GetConsoleCP
GetTimeZoneInformation
SetFilePointerEx
ReadConsoleW
WritePrivateProfileStringW
GetPrivateProfileStringW
FindResourceW
LoadResource
LockResource
SizeofResource
MultiByteToWideChar
GetConsoleMode
GetStringTypeW
EnumSystemLocalesW
IsValidLocale
LCMapStringW
GetTimeFormatW
GetDateFormatW
GetACP
GetStdHandle
GetModuleFileNameA
QueryPerformanceFrequency
VirtualQuery
VirtualAlloc
GetSystemInfo
GetCommandLineW
GetCommandLineA
HeapQueryInformation
GetFileType
SetStdHandle
FreeLibraryAndExitThread
ExitThread
CreateThread
GetFullPathNameA
GetModuleHandleExW
ExitProcess
InterlockedFlushSList
InterlockedPushEntrySList
RtlUnwind
OutputDebugStringW
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
LocalUnlock
LocalLock
GetUserDefaultLCID
ReplaceFileW
GetTempFileNameW
GetDiskFreeSpaceW
SearchPathW
GetProfileIntW
GetTempPathW
VerifyVersionInfoW
VerSetConditionMask
GetWindowsDirectoryW
FindResourceExW
GetCurrentDirectoryW
GetPrivateProfileIntW
lstrcpyW
VirtualProtect
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
CompareStringA
GetCurrentThread
GlobalFlags
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
GetSystemDirectoryW
EncodePointer
SetErrorMode
SetFileTime
SetFileAttributesW
LocalFileTimeToFileTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
SystemTimeToFileTime
GetAtomNameW
GlobalGetAtomNameW
lstrcmpA
LocalReAlloc
GlobalHandle
GlobalAlloc
GlobalSize
GlobalLock
GlobalUnlock
GlobalFree
LocalFree
FormatMessageW
CopyFileW
LoadLibraryExW
LocalAlloc
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
FlushFileBuffers
GetFileSize
GetShortPathNameW
GetVolumeInformationW
LockFile
ReadFile
SetEndOfFile
SetFilePointer
UnlockFile
DuplicateHandle
lstrcmpiW
MoveFileW
GetStringTypeExW
GetThreadLocale
GetCurrentProcessId
FileTimeToLocalFileTime
FindNextFileW
SetEvent
WaitForSingleObject
CreateEventW
SetThreadPriority
SuspendThread
ResumeThread
CompareStringW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GlobalReAlloc
lstrlenA
user32
UnregisterClassW
MessageBoxW
GetActiveWindow
SendMessageW
DefWindowProcW
CallWindowProcW
RegisterClassExW
CreateWindowExW
ShowWindow
SetWindowPos
GetDlgItem
GetClientRect
GetWindowRect
MapWindowPoints
GetWindowLongW
SetWindowLongW
GetParent
GetWindow
GetMenuStringW
GetMenuState
GetSubMenu
GetMenuItemID
RemoveMenu
CharUpperW
GetWindowThreadProcessId
GetLastActivePopup
ValidateRect
GetSysColorBrush
GetWindowTextW
GetWindowTextLengthW
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
SetMenuItemInfoW
RegisterWindowMessageW
GetMessagePos
GetMessageTime
RegisterClassW
GetClassInfoW
GetClassInfoExW
IsChild
SetWindowPlacement
BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
GetDlgCtrlID
GetMenu
SetMenu
TrackPopupMenuEx
GetForegroundWindow
RedrawWindow
ScrollWindow
SetScrollPos
GetScrollPos
SetScrollRange
GetScrollRange
ShowScrollBar
SetPropW
GetPropW
RemovePropW
AdjustWindowRectEx
GetClassLongW
GetTopWindow
SetScrollInfo
GetScrollInfo
WinHelpW
MoveWindow
SetDlgItemInt
GetDlgItemInt
SetDlgItemTextW
GetDlgItemTextW
CheckDlgButton
CheckRadioButton
IsDlgButtonChecked
SendDlgItemMessageW
ScrollWindowEx
IsDialogMessageW
RealChildWindowFromPoint
DrawTextExW
GrayStringW
TabbedTextOutW
GetWindowDC
FillRect
SystemParametersInfoW
CopyImage
SendDlgItemMessageA
SetRectEmpty
CreateDialogIndirectParamW
EndDialog
GetNextDlgTabItem
GetAsyncKeyState
MapDialogRect
ShowOwnedPopups
GetDialogBaseUnits
GetNextDlgGroupItem
WindowFromPoint
DrawFocusRect
DrawIconEx
MessageBeep
EnableScrollBar
HideCaret
InvertRect
NotifyWinEvent
GetMenuDefaultItem
MapVirtualKeyW
GetKeyNameTextW
LoadMenuW
EnumDisplayMonitors
SetClassLongW
SetWindowRgn
SetParent
OpenClipboard
CloseClipboard
SetClipboardData
EmptyClipboard
DrawStateW
DrawEdge
DrawFrameControl
GetSystemMenu
BringWindowToTop
SetCursorPos
CopyIcon
FrameRect
DrawIcon
MonitorFromPoint
LoadAcceleratorsW
TranslateAcceleratorW
InsertMenuItemW
GetMenuBarInfo
UnpackDDElParam
ReuseDDElParam
GetComboBoxInfo
PostThreadMessageW
WaitMessage
GetKeyboardLayout
IsCharLowerW
MapVirtualKeyExW
ToUnicodeEx
GetKeyboardState
CreateAcceleratorTableW
DestroyAcceleratorTable
CopyAcceleratorTableW
LockWindowUpdate
SetMenuDefaultItem
GetDoubleClickTime
ModifyMenuW
RegisterClipboardFormatW
CharUpperBuffW
IsClipboardFormatAvailable
GetUpdateRect
EnumChildWindows
DrawMenuBar
DefFrameProcW
DefMDIChildProcW
TranslateMDISysAccel
SubtractRect
SendNotifyMessageW
InSendMessage
CreateMenu
WindowFromDC
GetWindowRgn
GetDCEx
GetTabbedTextExtentW
IsWindowVisible
LoadCursorW
MonitorFromWindow
GetMonitorInfoW
TrackMouseEvent
PostMessageW
PostQuitMessage
IsWindow
AnimateWindow
SetLayeredWindowAttributes
IsIconic
IsZoomed
SetFocus
GetCapture
SetCapture
ReleaseCapture
SetTimer
KillTimer
UpdateWindow
GetDC
ReleaseDC
BeginPaint
EndPaint
InvalidateRect
SetWindowTextW
GetCursorPos
ScreenToClient
CopyRect
InflateRect
IntersectRect
UnionRect
IsRectEmpty
GetClassNameW
SetMenuContextHelpId
SetForegroundWindow
GetMenuItemInfoW
SetMenuInfo
GetMenuInfo
TrackPopupMenu
DeleteMenu
AppendMenuW
InsertMenuW
GetMenuItemCount
CheckMenuItem
DestroyMenu
CreatePopupMenu
IsMenu
UpdateLayeredWindow
SystemParametersInfoA
DrawTextW
DestroyIcon
GetWindowPlacement
GetSystemMetrics
CallNextHookEx
UnhookWindowsHookEx
SetWindowsHookExW
GetSysColor
EnableMenuItem
SetRect
ClientToScreen
MapVirtualKeyA
CharLowerBuffW
GetDesktopWindow
SetActiveWindow
IsWindowEnabled
EnableWindow
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
LoadImageW
CreateIconFromResource
LoadBitmapW
DestroyCursor
GetKeyState
GetFocus
GetIconInfo
OffsetRect
CharNextW
PtInRect
EqualRect
SetCursor
MonitorFromRect
LoadIconW
DestroyWindow
gdi32
Escape
ExcludeClipRect
GetClipRgn
GetCurrentPositionEx
GetObjectType
GetPixel
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
LineTo
OffsetClipRgn
PlayMetaFile
PtVisible
RectVisible
RestoreDC
SaveDC
CreatePatternBrush
ExtSelectClipRgn
SelectPalette
SetMapperFlags
SetMapMode
SetLayout
GetLayout
CreateRectRgn
CreatePen
CreateHatchBrush
CreateDIBPatternBrushPt
SetTextColor
SetBkColor
CreateDCW
DeleteObject
SetViewportOrgEx
CreateCompatibleBitmap
StretchBlt
GetDCOrgEx
GetObjectW
SetBkMode
Rectangle
GetStockObject
GetClipBox
CreateSolidBrush
CopyMetaFileW
EnumFontsW
CreateBitmap
CreateCompatibleDC
DeleteDC
SelectObject
SetGraphicsMode
SelectClipRgn
CreatePalette
GetWorldTransform
RectInRegion
Pie
EqualRgn
CreateEllipticRgnIndirect
Arc
GetTextFaceW
GetTextAlign
GetStretchBltMode
GetPolyFillMode
GetNearestColor
GetBkMode
GetROP2
SetAbortProc
AbortDoc
EndPage
StartPage
EndDoc
DeleteMetaFile
CreateMetaFileW
CloseMetaFile
GetViewportOrgEx
GetWindowOrgEx
SetPixelV
SetPaletteEntries
ExtFloodFill
PtInRegion
GetBoundsRect
FrameRgn
FillRgn
RoundRect
StretchDIBits
GetCharWidthW
CreateFontW
GetCurrentObject
OffsetRgn
GetRgnBox
LPtoDP
CreateRoundRectRgn
Polyline
Polygon
CreatePolygonRgn
GetTextColor
Ellipse
CreateEllipticRgn
SetDIBColorTable
CreateDIBSection
SetPixel
GetDIBits
GetTextCharsetInfo
EnumFontFamiliesW
CreateDIBitmap
GetBkColor
RealizePalette
GetSystemPaletteEntries
GetPaletteEntries
GetNearestPaletteIndex
GetDeviceCaps
EnumFontFamiliesExW
GetTextMetricsW
DPtoLP
SetRectRgn
PatBlt
GetMapMode
CreateRectRgnIndirect
CombineRgn
GetTextExtentPoint32W
ScaleWindowExtEx
ScaleViewportExtEx
OffsetWindowOrgEx
OffsetViewportOrgEx
SetWindowOrgEx
SetWindowExtEx
SetViewportExtEx
PolylineTo
PolyBezierTo
ExtTextOutW
TextOutW
MoveToEx
ExtCreatePen
SetArcDirection
SelectClipPath
PolyDraw
ArcTo
StartDocW
SetColorAdjustment
ModifyWorldTransform
SetWorldTransform
EnumMetaFile
PlayMetaFileRecord
SetTextJustification
SetTextAlign
SetTextCharacterExtra
SetStretchBltMode
SetROP2
SetPolyFillMode
BitBlt
CreateFontIndirectW
advapi32
RegSetValueW
RegDeleteKeyW
RegEnumKeyW
RegDeleteValueW
RegEnumKeyExW
RegEnumValueW
GetFileSecurityW
SetFileSecurityW
RegCreateKeyW
RegSetValueExW
RegCloseKey
RegQueryValueW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
shell32
SHAddToRecentDocs
ExtractIconW
SHGetFileInfoW
DragFinish
SHGetDesktopFolder
SHGetSpecialFolderLocation
SHGetPathFromIDListW
ShellExecuteExW
SHGetMalloc
SHBrowseForFolderW
ShellExecuteW
SHAppBarMessage
DragQueryFileW
ole32
CreateFileMoniker
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleRegGetMiscStatus
OleRegEnumVerbs
StgCreateDocfileOnILockBytes
WriteClassStm
GetHGlobalFromILockBytes
CreateGenericComposite
CreateItemMoniker
OleCreate
OleCreateFromData
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateLinkToFile
CoUninitialize
OleLoad
OleSave
CreateILockBytesOnHGlobal
OleSetContainedObject
OleGetIconOfClass
OleRun
CreateDataAdviseHolder
CreateOleAdviseHolder
GetRunningObjectTable
OleIsRunning
CoGetMalloc
OleQueryLinkFromData
OleQueryCreateFromData
CoFreeUnusedLibraries
CoGetClassObject
CoRegisterClassObject
CoRevokeClassObject
CoRegisterMessageFilter
OleLockRunning
CLSIDFromString
CLSIDFromProgID
CreateBindCtx
CoCreateInstance
CoInitialize
StgIsStorageFile
StgOpenStorageOnILockBytes
StgOpenStorage
StgCreateDocfile
OleSetMenuDescriptor
PropVariantCopy
RevokeDragDrop
RegisterDragDrop
CoLockObjectExternal
OleGetClipboard
DoDragDrop
OleIsCurrentClipboard
OleFlushClipboard
OleSetClipboard
CreateStreamOnHGlobal
CoInitializeEx
CoCreateGuid
CoDisconnectObject
StringFromGUID2
SetConvertStg
OleRegGetUserType
ReleaseStgMedium
OleDuplicateData
ReadFmtUserTypeStg
WriteFmtUserTypeStg
CoTreatAsClass
WriteClassStg
ReadClassStg
CoTaskMemFree
CoTaskMemAlloc
StringFromCLSID
OleUninitialize
OleSaveToStream
OleInitialize
OleCreateFromFile
oleaut32
VarCyFromStr
VarDateFromStr
VariantChangeType
VariantCopy
VariantClear
SafeArrayPtrOfIndex
SafeArrayCopy
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayUnlock
SafeArrayLock
VarBstrFromDate
SafeArrayGetUBound
SafeArrayGetElemsize
SafeArrayGetDim
SafeArrayRedim
SafeArrayDestroy
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SafeArrayCreate
SafeArrayAllocData
SafeArrayAllocDescriptor
VariantInit
SystemTimeToVariantTime
SysStringLen
SysReAllocStringLen
VarBstrFromCy
VarBstrFromDec
SafeArrayGetLBound
VarDecFromStr
SysAllocStringLen
RegisterTypeLi
LoadRegTypeLi
LoadTypeLi
SysAllocStringByteLen
SysStringByteLen
CreateErrorInfo
SetErrorInfo
SysFreeString
SysAllocString
GetErrorInfo
VariantTimeToSystemTime
msimg32
AlphaBlend
TransparentBlt
GradientFill
shlwapi
PathFileExistsW
PathIsDirectoryW
StrToIntExW
UrlUnescapeW
PathIsUNCW
PathStripToRootW
PathFindExtensionW
PathFindFileNameW
PathRemoveExtensionW
PathRemoveFileSpecW
StrFormatKBSizeW
uxtheme
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemePartSize
GetThemeSysColor
IsThemeBackgroundPartiallyTransparent
IsAppThemed
GetWindowTheme
GetCurrentThemeName
GetThemeColor
DrawThemeText
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
imm32
ImmCreateContext
ImmDestroyContext
ImmGetContext
ImmAssociateContext
ImmReleaseContext
ImmGetOpenStatus
wininet
FtpFindFirstFileW
InternetSetStatusCallbackW
InternetGetLastResponseInfoW
InternetSetOptionW
InternetQueryOptionW
InternetFindNextFileW
InternetQueryDataAvailable
InternetWriteFile
FtpGetFileW
InternetReadFile
InternetOpenUrlW
InternetConnectW
InternetCloseHandle
InternetOpenW
FtpPutFileW
FtpDeleteFileW
InternetErrorDlg
InternetGetCookieW
InternetSetCookieW
HttpQueryInfoW
HttpEndRequestW
HttpSendRequestExW
HttpSendRequestW
HttpAddRequestHeadersW
HttpOpenRequestW
GopherOpenFileW
GopherFindFirstFileW
GopherCreateLocatorW
FtpCommandW
FtpGetCurrentDirectoryW
GopherGetAttributeW
FtpRenameFileW
FtpOpenFileW
FtpCreateDirectoryW
FtpRemoveDirectoryW
InternetSetFilePointer
InternetCrackUrlW
InternetCanonicalizeUrlW
FtpSetCurrentDirectoryW
oleacc
LresultFromObject
CreateStdAccessibleObject
AccessibleObjectFromWindow
gdiplus
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipGraphicsClear
GdipGetPropertyItem
GdipGetPropertyItemSize
GdipImageSelectActiveFrame
GdipImageGetFrameCount
GdipSaveImageToFile
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipCreateBitmapFromHBITMAP
GdipDrawImageI
GdipDeleteGraphics
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipCreateBitmapFromFileICM
GdipCreateBitmapFromStreamICM
GdipCreateBitmapFromFile
GdipCreateBitmapFromStream
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipGetImageGraphicsContext
GdipDisposeImage
GdipCloneImage
GdiplusStartup
GdipFree
GdipAlloc
GdiplusShutdown
winmm
PlaySoundW
oledlg
OleUIBusyW
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
GetJobW
Sections
.text Size: 3.0MB - Virtual size: 3.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 764KB - Virtual size: 763KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 55KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4.7MB - Virtual size: 4.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 265KB - Virtual size: 264KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ