WindowSmasher[.]exe

Sharing

Copy URL Twitter E-mail

General

Target

WindowSmasher.exe
Size

302KB
MD5

3bcdc16f5a94191962b67c5b6c1c38b2
SHA1

ec962169490d09e944ecb27dfe95f2c456f9b2e8
SHA256

740132589dc9d15750162db9ac327007d717e186b6c83442af0282b3bbb08105
SHA512

4c0c72ccecb960f3a293259fbdbe1c38f190cdaeaa8763fe23796232a226f42a4033436fcda093d75a34c93c8342a47195f6607b57268fe8f48b3818d8f93f71
SSDEEP

6144:zVhv2sIMyMbDFjn3vazsVfgMwfblQIX47hoq:zVVVIMyMVOzsjwzlQl7hf

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
WindowSmasher.exe

Files

WindowSmasher.exe
.exe windows:6 windows x86 arch:x86

9814235f38ce4f9c1dff8ab2b006a83f

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

PDB Paths

C:\Users\limeade\source\repos\WindowSmasher\Release\WindowSmasher.pdb

Imports

kernel32

GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
CloseHandle
Sleep
CreateFileW
GetStringTypeW
WriteFile
WideCharToMultiByte
MultiByteToWideChar
GetCurrentThreadId
ReleaseSRWLockExclusive
WakeAllConditionVariable
QueryPerformanceCounter
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
GetCurrentProcessId
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
RtlUnwind
RaiseException
GetLastError
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
CreateThread
ExitThread
FreeLibraryAndExitThread
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapValidate
GetSystemInfo
GetStdHandle
ExitProcess
LCMapStringW
GetFileType
OutputDebugStringW
WriteConsoleW
GetFileSizeEx
SetFilePointerEx
HeapFree
HeapReAlloc
HeapSize
HeapQueryInformation
GetProcessHeap
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
DecodePointer

user32

MessageBoxW
InvertRect
GetDC
SetProcessDPIAware
SetCursorPos
GetCursorPos
GetSystemMetrics

gdi32

SelectObject
DeleteObject
CreateSolidBrush
BitBlt

shell32

ShellExecuteW

Sections

.text
Size: 214KB - Virtual size: 214KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 69KB - Virtual size: 69KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 7KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9814235f38ce4f9c1dff8ab2b006a83f

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

gdi32

shell32

Sections

.text Size: 214KB - Virtual size: 214KB

.rdata Size: 69KB - Virtual size: 69KB

.data Size: 3KB - Virtual size: 7KB

.rsrc Size: 5KB - Virtual size: 4KB

.reloc Size: 9KB - Virtual size: 9KB

.text
Size: 214KB - Virtual size: 214KB

.rdata
Size: 69KB - Virtual size: 69KB

.data
Size: 3KB - Virtual size: 7KB

.rsrc
Size: 5KB - Virtual size: 4KB

.reloc
Size: 9KB - Virtual size: 9KB