C:\Users\LowBoy\Desktop\OldFile - 加密\Win32\Release\FuckPro.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fcb472c7f4fc421d9b71f922760043a22a7347a97d5266705901faac78e38db3.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
fcb472c7f4fc421d9b71f922760043a22a7347a97d5266705901faac78e38db3.exe
Resource
win10v2004-20240226-en
General
-
Target
fcb472c7f4fc421d9b71f922760043a22a7347a97d5266705901faac78e38db3
-
Size
6.1MB
-
MD5
4b51765d48c21db4b4fd0a7580e5f02c
-
SHA1
11a9df4368d787b15e0db5536d96175a66fdbef0
-
SHA256
fcb472c7f4fc421d9b71f922760043a22a7347a97d5266705901faac78e38db3
-
SHA512
d07976974ffd9923577d8d57f69503215966941e75085d89de7fd828139bb41cb48eb668bb74e83c0b1f4d8231f6152eea3a42d35b4e8c275932d9006bd6c4e6
-
SSDEEP
12288:Nf1ph8URvgOzcFmswVrgOQHlU09pGHNu4B2U/JV:Nf1HXzcAswVrgOuyI4rRV
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fcb472c7f4fc421d9b71f922760043a22a7347a97d5266705901faac78e38db3
Files
-
fcb472c7f4fc421d9b71f922760043a22a7347a97d5266705901faac78e38db3.exe windows:5 windows x86 arch:x86
dc9213f30cd85aea810c4b3870f5e7e3
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCommandLineA
GetStartupInfoA
HeapAlloc
HeapFree
RtlUnwind
RaiseException
VirtualAlloc
HeapReAlloc
ExitProcess
HeapSize
SetStdHandle
GetFileType
GetACP
IsValidCodePage
GetStringTypeA
GetStringTypeW
LCMapStringA
LCMapStringW
GetStdHandle
FreeEnvironmentStringsA
TerminateProcess
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
InitializeCriticalSectionAndSpinCount
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringW
SetEnvironmentVariableA
SetErrorMode
GetFileTime
GetFileSizeEx
GetFileAttributesA
GetOEMCP
GetCPInfo
CreateFileA
GetFullPathNameA
GetVolumeInformationA
FindFirstFileA
FindClose
GetCurrentProcess
DuplicateHandle
GetFileSize
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GlobalFlags
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
InterlockedIncrement
GetModuleHandleW
LocalAlloc
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
FileTimeToLocalFileTime
FileTimeToSystemTime
GlobalGetAtomNameA
GlobalFindAtomA
lstrcmpW
GetVersionExA
InterlockedDecrement
GetModuleFileNameW
GetCurrentProcessId
GlobalAddAtomA
WaitForSingleObject
WritePrivateProfileStringA
GlobalDeleteAtom
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
EnumResourceLanguagesA
GetLocaleInfoA
LoadLibraryA
CompareStringA
InterlockedExchange
lstrcmpA
FreeLibrary
GetModuleHandleA
GetProcAddress
SetLastError
GlobalFree
FormatMessageA
LocalFree
MulDiv
FreeResource
GlobalUnlock
GlobalLock
GlobalAlloc
GetModuleFileNameA
MultiByteToWideChar
lstrlenA
lstrcpynW
ReadProcessMemory
VirtualQueryEx
OpenProcess
Sleep
CloseHandle
GetLastError
CreateMutexA
FindResourceA
LoadResource
LockResource
SizeofResource
GetEnvironmentStrings
WideCharToMultiByte
user32
DestroyMenu
UnregisterClassA
CharUpperA
GetSysColorBrush
EndPaint
BeginPaint
GetWindowDC
ClientToScreen
GrayStringA
DrawTextExA
DrawTextA
TabbedTextOutA
ShowWindow
SetWindowTextA
IsDialogMessageA
RegisterWindowMessageA
SendDlgItemMessageA
WinHelpA
GetCapture
GetClassLongA
GetClassNameA
SetPropA
GetPropA
RemovePropA
SetFocus
GetWindowTextLengthA
GetWindowTextA
GetTopWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetMenu
SetForegroundWindow
UpdateWindow
CreateWindowExA
GetClassInfoExA
GetClassInfoA
RegisterClassA
GetSysColor
CopyRect
GetDlgCtrlID
DefWindowProcA
CallWindowProcA
GetMenu
GetWindowPlacement
GetSystemMetrics
GetWindow
UnhookWindowsHookEx
GetLastActivePopup
MessageBoxA
SetCursor
SetWindowsHookExA
CallNextHookEx
GetMessageA
TranslateMessage
DispatchMessageA
IsWindowVisible
GetKeyState
PeekMessageA
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
GetFocus
ModifyMenuA
EnableMenuItem
CheckMenuItem
GetDesktopWindow
GetActiveWindow
SetActiveWindow
CreateDialogIndirectParamA
DestroyWindow
GetDlgItem
IsWindowEnabled
GetNextDlgTabItem
EndDialog
PostQuitMessage
GetMenuState
GetMenuItemID
GetMenuItemCount
GetSubMenu
GetParent
LoadCursorA
IsWindow
ReleaseCapture
PostMessageA
SetCapture
ScreenToClient
GetCursorPos
PtInRect
SetWindowRgn
OffsetRect
GetWindowRect
IntersectRect
IsRectEmpty
IsZoomed
IsIconic
ReleaseDC
GetDC
LoadBitmapA
InvalidateRect
SetWindowLongA
GetWindowLongA
GetClientRect
SetWindowPos
SystemParametersInfoA
DestroyIcon
EnableWindow
GetWindowThreadProcessId
GetForegroundWindow
SetRect
SetTimer
SendMessageA
LoadIconA
AdjustWindowRectEx
gdi32
SetWindowExtEx
ScaleWindowExtEx
DeleteDC
ScaleViewportExtEx
DeleteObject
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutA
TextOutA
RectVisible
PtVisible
GetStockObject
SetMapMode
SetBkMode
RestoreDC
SaveDC
SetBkColor
SetTextColor
GetClipBox
CreateBitmap
GetDIBits
CreateFontA
CombineRgn
CreateRectRgn
SetPixel
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateFontIndirectA
GetDeviceCaps
GetObjectA
msimg32
AlphaBlend
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
ClosePrinter
OpenPrinterA
advapi32
RegDeleteKeyA
RegQueryValueA
RegOpenKeyA
RegEnumKeyA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
RegQueryValueExA
shell32
DragQueryFileA
DragAcceptFiles
comctl32
InitCommonControlsEx
_TrackMouseEvent
shlwapi
PathIsDirectoryA
PathFindFileNameA
UrlUnescapeA
PathStripToRootA
PathIsUNCA
PathFindExtensionA
ole32
CreateStreamOnHGlobal
oleaut32
VariantClear
VariantChangeType
VariantInit
gdiplus
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromFile
GdipDeleteGraphics
GdipCreateFromHDC
GdipDisposeImage
GdipLoadImageFromStream
GdipFree
GdipGetImageWidth
GdipGetImageHeight
GdiplusStartup
GdipDrawImageRectRect
GdipCloneImage
GdipAlloc
wininet
HttpOpenRequestA
InternetConnectA
HttpSendRequestA
InternetReadFile
InternetWriteFile
InternetSetFilePointer
InternetSetStatusCallback
InternetOpenA
InternetGetLastResponseInfoA
InternetCloseHandle
HttpAddRequestHeadersA
InternetQueryDataAvailable
InternetSetOptionExA
InternetQueryOptionA
InternetCanonicalizeUrlA
InternetCrackUrlA
Sections
.text Size: 200KB - Virtual size: 199KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 45KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 289KB - Virtual size: 288KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 33KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ