Static task
static1
Behavioral task
behavioral1
Sample
SecurePDF.exe
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
SecurePDF.exe
Resource
win10v2004-20240226-en
General
-
Target
reader.zip
-
Size
7.7MB
-
MD5
422c32d43a6c1e97bdf421589c4ed75f
-
SHA1
6950c41f9f52268e82afb78453b09187b67f6c26
-
SHA256
61f0c769201c4ad3af342a7622188cb76d0dabe5aa76dcf6878be7228c273df1
-
SHA512
c2da9bd438086cb8beac5b509e0429265b4581df2f7ba874757c35fb30dbb6fac8d48b1bcc9211ca69d4a4c6fc64dac614475a44e4ad05c9a852c6fd09d80126
-
SSDEEP
196608:CR3V8N4svK6yzX2leWHQzwQY1eEzPBmqX1/Emstv:C78N4s46lXHvBe6QqOmi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/SecurePDF.exe
Files
-
reader.zip.zip
-
SecurePDF.exe.exe windows:6 windows x64 arch:x64
457c64c483bfac024fed0ea5c548c743
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
Imports
comctl32
ImageList_EndDrag
ImageList_Add
ImageList_DragEnter
ImageList_DragMove
ImageList_BeginDrag
ImageList_Create
ImageList_AddMasked
ord412
ord410
ord413
ImageList_Destroy
CreatePropertySheetPageW
ImageList_GetIconSize
ImageList_Draw
ord345
InitCommonControlsEx
kernel32
LoadLibraryW
GetEnvironmentVariableW
WakeConditionVariable
InitOnceComplete
InitOnceBeginInitialize
GetThreadGroupAffinity
InitializeConditionVariable
InitializeSRWLock
LCMapStringEx
DecodePointer
ReleaseMutex
CreateMutexW
DebugBreak
IsDebuggerPresent
Sleep
QueryPerformanceFrequency
SystemTimeToFileTime
GetSystemTimeAsFileTime
QueryPerformanceCounter
GetLogicalDrives
CloseHandle
FindResourceW
GetModuleHandleW
MulDiv
VerSetConditionMask
VerifyVersionInfoW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
HeapCreate
HeapFree
GetCurrentProcess
TerminateProcess
GetEnvironmentVariableA
WaitForSingleObject
GetCurrentThreadId
GetLocaleInfoA
CreateToolhelp32Snapshot
CreateEventW
SetEvent
HeapReAlloc
GetSystemInfo
CreateThread
HeapAlloc
Module32FirstW
AddVectoredExceptionHandler
HeapDestroy
LoadLibraryExA
WriteConsoleW
GetStringTypeW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindFirstFileExW
GetTimeZoneInformation
HeapSize
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
LCMapStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetConsoleOutputCP
ReadConsoleW
SetEnvironmentVariableW
GetModuleHandleExW
FreeLibraryAndExitThread
SetFilePointerEx
PeekNamedPipe
TlsFree
InitializeCriticalSectionAndSpinCount
EncodePointer
RtlUnwind
RtlPcToFileHeader
RtlUnwindEx
InitializeCriticalSectionEx
GetStartupInfoW
InitializeSListHead
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
IsProcessorFeaturePresent
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CreateSemaphoreW
GetProcessAffinityMask
ReleaseSemaphore
GetConsoleMode
MoveFileW
FlushFileBuffers
GetFileType
SetEndOfFile
CreateHardLinkW
RemoveDirectoryW
DeviceIoControl
SetThreadPriority
SetLastError
SetConsoleCtrlHandler
GetCurrentDirectoryW
FoldStringW
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
TzSpecificLocalTimeToSystemTime
IsDBCSLeadByte
GetCPInfo
CompareStringW
AreFileApisANSI
LocalFileTimeToFileTime
FileTimeToDosDateTime
FileTimeToLocalFileTime
RaiseException
SetThreadContext
FlushInstructionCache
GetSystemDirectoryW
OpenThread
VirtualQuery
GetThreadContext
GetModuleHandleA
ResumeThread
SuspendThread
Thread32First
Thread32Next
AllocConsole
FormatMessageA
CreateProcessW
SetCurrentDirectoryW
AttachConsole
GetVersionExW
GetStdHandle
SetConsoleScreenBufferSize
LoadLibraryExW
GetModuleFileNameW
GetFileAttributesW
OutputDebugStringA
FreeLibrary
GetProcessHeap
GetProcAddress
LoadLibraryA
VirtualAlloc
VirtualFree
VirtualProtect
WideCharToMultiByte
WriteFile
ReadFile
CreateDirectoryW
GetTempPathW
GetUserDefaultUILanguage
MapViewOfFile
CreateFileMappingW
UnmapViewOfFile
SetErrorMode
GetDateFormatW
GetTimeFormatW
MoveFileExW
LocalFree
FormatMessageW
LoadResource
LockResource
SizeofResource
SetThreadExecutionState
GlobalAddAtomW
GlobalDeleteAtom
GetTickCount
GetSystemTime
GlobalUnlock
GlobalLock
GlobalFree
GlobalAlloc
OutputDebugStringW
GetConsoleScreenBufferInfo
ReadDirectoryChangesW
QueueUserAPC
ResetEvent
ExitThread
WaitForMultipleObjectsEx
CompareFileTime
GetCurrentThread
Process32FirstW
Process32NextW
OpenProcess
ExitProcess
GetCommandLineW
GetLastError
SetUnhandledExceptionFilter
Module32NextW
GlobalMemoryStatusEx
CancelIo
GetFileTime
GetDriveTypeW
GetTempFileNameW
CopyFileW
DeleteFileW
GetFileAttributesExW
GetFileInformationByHandle
SetFileAttributesW
GetVolumePathNameW
SetFileTime
GetDriveTypeA
GetPrivateProfileIntW
GetShortPathNameW
GetLongPathNameW
WritePrivateProfileStringW
GetFileSizeEx
CreateFileW
SetNamedPipeHandleState
GetLocaleInfoW
GetWindowsDirectoryW
GetCurrentProcessId
GetACP
MultiByteToWideChar
GetExitCodeProcess
SetFilePointer
TlsSetValue
TlsAlloc
TlsGetValue
CreateEventA
GetModuleFileNameA
GetFullPathNameA
FindClose
FindFirstFileW
GetFullPathNameW
FindNextFileW
lstrcpynW
user32
GetUpdateRect
SetRectEmpty
GetClassInfoExW
RegisterWindowMessageW
GetCursorPos
ClientToScreen
SetLayeredWindowAttributes
DeferWindowPos
GetPropW
RemovePropW
BeginDeferWindowPos
SetPropW
EndDeferWindowPos
HideCaret
SetClassLongPtrW
ShowCaret
IsCharAlphaNumericW
WindowFromPoint
GetWindowThreadProcessId
GetMessageW
AllowSetForegroundWindow
LoadBitmapW
TranslateAcceleratorW
LoadCursorW
GetClassNameW
SetParent
MapVirtualKeyW
ScreenToClient
IsWindow
CharLowerBuffW
GetAncestor
IsCharUpperW
CheckRadioButton
EndDialog
SetDlgItemTextW
SendDlgItemMessageW
DialogBoxIndirectParamW
IsDlgButtonChecked
SetWindowLongW
CheckDlgButton
DialogBoxParamW
MoveWindow
OpenClipboard
CloseClipboard
EmptyClipboard
GetWindowTextLengthW
ReuseDDElParam
ShowWindowAsync
IsWindowUnicode
UnpackDDElParam
ModifyMenuW
CheckMenuRadioItem
GetMenuItemID
GetMenu
SetMenuItemInfoW
SetMenu
DrawTextExW
InsertMenuW
GetWindowLongW
GetWindow
FindWindowExW
GetFocus
IsChild
MessageBeep
GetDesktopWindow
UpdateWindow
MessageBoxW
MsgWaitForMultipleObjects
DispatchMessageW
IsDialogMessageW
PeekMessageW
TranslateMessage
GetDlgItem
PostQuitMessage
EnableWindow
MessageBoxA
CreateMenu
BringWindowToTop
LoadIconW
WindowFromDC
DestroyWindow
GetMenuItemInfoW
GetSystemMenu
GetMessagePos
GetWindowRect
IsWindowVisible
SetWindowPos
GetMenuItemCount
SetWindowLongPtrW
CreateWindowExW
CreatePopupMenu
GetWindowLongPtrW
RegisterClassExW
GetClassLongPtrW
TrackPopupMenu
SendInput
SetForegroundWindow
DdeFreeStringHandle
DdeDisconnect
DrawTextW
CheckMenuItem
SetClipboardData
DdeFreeDataHandle
DdeClientTransaction
DdeUninitialize
DdeInitializeW
TrackMouseEvent
GetMonitorInfoW
GetWindowInfo
DdeConnect
DdeCreateStringHandleW
DestroyCursor
EnumDisplayMonitors
MonitorFromWindow
MonitorFromRect
CopyImage
GetKeyState
AdjustWindowRectEx
OemToCharA
CharToOemA
OemToCharBuffA
CharLowerW
CharUpperW
CharToOemBuffW
ShowWindow
InvalidateRgn
OffsetRect
RedrawWindow
MapWindowPoints
SetMenuDefaultItem
GetSysColor
GetForegroundWindow
DestroyMenu
ReleaseDC
FindWindowW
GetWindowDC
TrackPopupMenuEx
RemoveMenu
GetClientRect
IsZoomed
AppendMenuW
DrawIconEx
EnableMenuItem
DrawEdge
GetParent
DrawFrameControl
InvalidateRect
SetScrollInfo
DefWindowProcW
ShowScrollBar
GetDC
FillRect
GetCursor
GetScrollInfo
GetScrollPos
GetCapture
SetTimer
SetFocus
SetCapture
SetCursor
KillTimer
BeginPaint
EndPaint
PostMessageW
SendMessageW
GetSystemMetrics
SystemParametersInfoW
DestroyAcceleratorTable
CreateAcceleratorTableW
IsIconic
ReleaseCapture
IsWindowEnabled
SetActiveWindow
CallWindowProcW
gdi32
SetDIBits
GetDIBColorTable
CreateCompatibleBitmap
GetDIBits
SetGraphicsMode
TextOutW
SetWorldTransform
SetDIBColorTable
SetStretchBltMode
SetROP2
GetObjectA
GetTextExtentPoint32W
ExtTextOutW
GetObjectW
CreateDIBSection
GetTextExtentPoint32A
SetLayout
CreateRoundRectRgn
SelectClipRgn
RoundRect
BitBlt
StartPage
AbortDoc
EndDoc
CreateDCW
GetDeviceCaps
SetMapMode
StartDocW
EndPage
LineTo
MoveToEx
SetBkColor
CreateFontIndirectW
CreatePatternBrush
CreateBitmap
SetBkMode
GetClipBox
CreateRectRgn
SetViewportOrgEx
ExcludeClipRect
ExtSelectClipRgn
SetBrushOrgEx
SelectObject
CreateCompatibleDC
PatBlt
StretchBlt
GetStockObject
DeleteDC
SetTextColor
CreatePen
Rectangle
DeleteObject
CreateSolidBrush
winspool.drv
DocumentPropertiesW
ClosePrinter
DeviceCapabilitiesW
EnumPrintersW
GetPrinterW
OpenPrinterW
ord203
comdlg32
GetOpenFileNameW
PrintDlgExW
GetSaveFileNameW
advapi32
RegGetValueW
RegQueryValueExW
RegCloseKey
RegQueryInfoKeyW
RegEnumKeyW
InitializeSecurityDescriptor
CheckTokenMembership
FreeSid
OpenProcessToken
RegSetKeySecurity
RegOpenKeyExW
SetFileSecurityW
LookupPrivilegeValueW
AdjustTokenPrivileges
CryptAcquireContextW
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptGetHashParam
CryptReleaseContext
SetSecurityDescriptorDacl
AllocateAndInitializeSid
shell32
SHGetPathFromIDListW
SHBrowseForFolderW
SHGetFileInfoW
SHGetMalloc
DragFinish
DragQueryFileW
CommandLineToArgvW
SHGetDesktopFolder
ShellExecuteExW
SHBindToParent
SHAddToRecentDocs
SHGetFolderPathW
SHFileOperationW
SHChangeNotify
DragAcceptFiles
ole32
CoTaskMemFree
CoInitialize
CoTaskMemAlloc
OleInitialize
OleUninitialize
CoCreateInstance
CoUninitialize
CoSetProxyBlanket
CoGetMalloc
CreateStreamOnHGlobal
ReleaseStgMedium
oleaut32
SysAllocString
SafeArrayPutElement
SafeArrayCreateVector
SysFreeString
VariantClear
VariantInit
Sections
.text Size: 5.6MB - Virtual size: 5.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.5MB - Virtual size: 2.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6.0MB - Virtual size: 6.4MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 36KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ