D:\build\quicksee\see\Screenshot\Release\Screenshot.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4a112f0f8c832b326958f91bc9d2effc14a959063d7ef2efb4c3109b3d8aeb8c.exe
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
4a112f0f8c832b326958f91bc9d2effc14a959063d7ef2efb4c3109b3d8aeb8c.exe
Resource
win10v2004-20240426-en
General
-
Target
4a112f0f8c832b326958f91bc9d2effc14a959063d7ef2efb4c3109b3d8aeb8c
-
Size
2.1MB
-
MD5
bea97adda218c50c5adbd162ad14b4ac
-
SHA1
ae2d64e7606862a28c1e6b482c5b7a9604def754
-
SHA256
4a112f0f8c832b326958f91bc9d2effc14a959063d7ef2efb4c3109b3d8aeb8c
-
SHA512
e0a60a5e96474381efe41abe7c4bc2384a941fb9e4212d6f450b246e58e25997540bd37f4cc65caf39299759a9793969933bd0ce1fc4cd1e35b484b4d874179d
-
SSDEEP
49152:I5LWYgC0n6GD7dEwHRnDoxA18B1xAcZpGB:I5yYgCUL7dECRnDoxA18B1xAcZQB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4a112f0f8c832b326958f91bc9d2effc14a959063d7ef2efb4c3109b3d8aeb8c
Files
-
4a112f0f8c832b326958f91bc9d2effc14a959063d7ef2efb4c3109b3d8aeb8c.exe windows:6 windows x86 arch:x86
dedf7e408e3514463e418fb292397a9d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetACP
ExitProcess
GetStdHandle
GetFileType
SetStdHandle
QueryPerformanceFrequency
VirtualQuery
VirtualAlloc
GetSystemInfo
GetStringTypeW
GetCommandLineA
HeapQueryInformation
FreeLibraryAndExitThread
ExitThread
CreateThread
RtlUnwind
OutputDebugStringW
LCMapStringW
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableA
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
UnhandledExceptionFilter
GetTempFileNameW
Sleep
SearchPathW
GetTempPathW
VerifyVersionInfoW
VerSetConditionMask
GetTickCount
SystemTimeToTzSpecificLocalTime
GetFileTime
GetFileSizeEx
GetFileAttributesExW
GetFileAttributesW
FileTimeToLocalFileTime
SetErrorMode
FindResourceExW
lstrcpyW
GetWindowsDirectoryW
lstrcmpiW
GetCurrentProcess
DuplicateHandle
WriteFile
UnlockFile
SetFilePointer
SetEndOfFile
ReadFile
LockFile
GetVolumeInformationW
GetFullPathNameW
GetFileSize
FlushFileBuffers
FindFirstFileW
FindClose
CreateFileW
DeleteFileW
GetCurrentDirectoryW
GetUserDefaultUILanguage
GetSystemDefaultUILanguage
GetLocaleInfoW
GetThreadLocale
FileTimeToSystemTime
GlobalGetAtomNameW
LocalReAlloc
LocalAlloc
GlobalHandle
GlobalReAlloc
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
lstrcmpA
GetCurrentThread
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
GlobalFlags
GetVersionExW
CompareStringW
GlobalFindAtomW
GlobalAddAtomW
lstrcmpW
GlobalDeleteAtom
LoadLibraryA
LoadLibraryExW
FreeLibrary
GetSystemDirectoryW
EncodePointer
ResumeThread
SetThreadPriority
CreateEventW
GetModuleHandleA
OutputDebugStringA
WideCharToMultiByte
SetLastError
CopyFileW
FormatMessageW
MulDiv
LocalFree
GlobalFree
GlobalSize
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
HeapSize
InitializeCriticalSectionEx
HeapFree
IsBadReadPtr
SetUnhandledExceptionFilter
VirtualProtect
GetCurrentProcessId
GetModuleFileNameW
GetCurrentThreadId
CreateMutexW
WaitForSingleObject
CloseHandle
GetLastError
SizeofResource
GetProcAddress
LoadLibraryW
GetModuleHandleW
GetProfileIntW
FreeResource
GlobalUnlock
GlobalLock
GlobalAlloc
lstrlenW
MultiByteToWideChar
GetModuleHandleExW
FindResourceW
LoadResource
LockResource
GetCommandLineW
WriteConsoleW
user32
SendDlgItemMessageA
GetSysColorBrush
ShowOwnedPopups
MapDialogRect
SetWindowContextHelpId
RealChildWindowFromPoint
LoadMenuW
LoadBitmapW
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
GetMonitorInfoW
MonitorFromWindow
WinHelpW
GetScrollInfo
SetScrollInfo
LoadIconW
GetClassNameW
GetClassLongW
MapWindowPoints
AdjustWindowRectEx
RemovePropW
GetPropW
SetPropW
ShowScrollBar
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
ScrollWindow
GetForegroundWindow
TrackPopupMenu
SetMenu
GetMenu
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
SetWindowPlacement
GetWindowPlacement
IsMenu
GetClassInfoExW
GetClassInfoW
RegisterClassW
CallWindowProcW
DefWindowProcW
GetMessageTime
GetMessagePos
RegisterWindowMessageW
CallNextHookEx
SetWindowsHookExW
ValidateRect
PeekMessageW
TranslateMessage
IsDialogMessageW
GetWindowTextLengthW
SetWindowTextW
GetFocus
GetDlgCtrlID
CheckDlgButton
UnhookWindowsHookEx
MessageBoxW
ClientToScreen
EndPaint
BeginPaint
GetWindowDC
TabbedTextOutW
GrayStringW
DrawTextExW
SetActiveWindow
IsWindowEnabled
GetActiveWindow
GetNextDlgTabItem
GetDlgItem
EndDialog
CreateDialogIndirectParamW
GetMenuItemID
GetSubMenu
UnionRect
InvertRect
OffsetRect
IsWindow
RealGetWindowClassW
GetWindowTextW
GetTopWindow
GetWindow
GetParent
GetWindowThreadProcessId
GetDesktopWindow
UnregisterClassW
GetKeyState
IsChild
SetProcessDPIAware
DestroyIcon
PostMessageW
NotifyWinEvent
MapVirtualKeyW
GetKeyNameTextW
GetWindowRect
GetSystemMetrics
IsWindowVisible
SetRect
LoadCursorW
SetForegroundWindow
GetMenuStringW
GetMenuItemCount
DrawIconEx
GetSysColor
GetIconInfo
InsertMenuW
AppendMenuW
RemoveMenu
EnableMenuItem
GetMenuState
CheckMenuItem
InsertMenuItemW
SetMenuItemInfoW
LoadImageW
SystemParametersInfoW
CopyImage
WaitMessage
WindowFromPoint
DeleteMenu
SetTimer
KillTimer
CharNextW
CopyAcceleratorTableW
GetNextDlgGroupItem
MessageBeep
CharUpperW
GetMenuDefaultItem
TrackMouseEvent
GetMenuItemInfoW
DestroyMenu
CreatePopupMenu
ReleaseCapture
ReleaseDC
EqualRect
BringWindowToTop
UnpackDDElParam
ReuseDDElParam
RegisterClipboardFormatW
DrawFocusRect
EnableScrollBar
GetLastActivePopup
CopyIcon
GetDC
FillRect
SetWindowPos
GetClientRect
MoveWindow
LoadAcceleratorsW
CopyRect
DrawTextW
IsIconic
SendMessageW
PtInRect
GetCursor
SetCursor
IsRectEmpty
OpenClipboard
EmptyClipboard
SetClipboardData
CloseClipboard
InvalidateRgn
SetFocus
InvalidateRect
RedrawWindow
GetAsyncKeyState
TranslateAcceleratorW
PostQuitMessage
EnableWindow
DestroyWindow
CreateWindowExW
GetWindowLongW
SetWindowLongW
ShowWindow
GetCursorPos
SetRectEmpty
ScreenToClient
InflateRect
GetCapture
SetCapture
UpdateWindow
GetMessageW
DispatchMessageW
SetLayeredWindowAttributes
EnumDisplayMonitors
SetClassLongW
SetWindowRgn
HideCaret
SetParent
DrawStateW
DrawEdge
DrawFrameControl
IsZoomed
GetSystemMenu
SetCursorPos
DestroyCursor
GetWindowRgn
CreateMenu
SubtractRect
TranslateMDISysAccel
DefMDIChildProcW
DefFrameProcW
DrawMenuBar
GetUpdateRect
IsClipboardFormatAvailable
CharUpperBuffW
ModifyMenuW
GetDoubleClickTime
SetMenuDefaultItem
LockWindowUpdate
DestroyAcceleratorTable
CreateAcceleratorTableW
GetKeyboardState
ToUnicodeEx
MapVirtualKeyExW
IsCharLowerW
GetKeyboardLayout
GetComboBoxInfo
MonitorFromPoint
UpdateLayeredWindow
PostThreadMessageW
DrawIcon
FrameRect
IntersectRect
gdi32
StretchBlt
CreateBitmap
UnrealizeObject
PatBlt
CreateDIBSection
GetObjectW
CopyMetaFileW
GetDeviceCaps
CreateHatchBrush
Escape
ExcludeClipRect
GetClipBox
GetObjectType
GetViewportExtEx
GetWindowExtEx
IntersectClipRect
PtVisible
RectVisible
RestoreDC
SaveDC
SelectClipRgn
ExtSelectClipRgn
SelectPalette
SetBkColor
SetMapMode
SetLayout
GetLayout
SetPolyFillMode
SetROP2
SetTextAlign
ExtTextOutW
SetViewportExtEx
SetViewportOrgEx
SetWindowExtEx
SetWindowOrgEx
GetPixel
OffsetWindowOrgEx
ScaleViewportExtEx
ScaleWindowExtEx
CreateFontIndirectW
GetMapMode
SetRectRgn
DPtoLP
GetTextMetricsW
GetBkColor
GetTextColor
GetRgnBox
EnumFontFamiliesExW
CreatePalette
GetNearestPaletteIndex
GetPaletteEntries
GetSystemPaletteEntries
RealizePalette
CreateDIBitmap
EnumFontFamiliesW
GetTextCharsetInfo
SetPixel
SetDIBColorTable
CreateEllipticRgn
CreatePolygonRgn
Polygon
Polyline
CreateRoundRectRgn
LPtoDP
OffsetRgn
RoundRect
FillRgn
FrameRgn
GetBoundsRect
PtInRegion
ExtFloodFill
SetPaletteEntries
SetPixelV
GetWindowOrgEx
GetViewportOrgEx
GetTextFaceW
TextOutW
CreateFontW
CombineRgn
CreateRectRgnIndirect
CreateDCW
BitBlt
MoveToEx
Ellipse
Rectangle
GetTextExtentPoint32W
SetBkMode
SetTextColor
GetStockObject
CreatePen
DeleteDC
CreateSolidBrush
SelectObject
CreateCompatibleBitmap
CreateCompatibleDC
DeleteObject
CreateRectRgn
OffsetViewportOrgEx
LineTo
CreatePatternBrush
msimg32
TransparentBlt
AlphaBlend
winspool.drv
DocumentPropertiesW
ClosePrinter
OpenPrinterW
advapi32
RegEnumValueW
RegOpenKeyExW
RegQueryValueExW
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegQueryValueW
RegEnumKeyW
shell32
SHGetFileInfoW
SHGetPathFromIDListW
SHGetSpecialFolderLocation
SHGetDesktopFolder
DragQueryFileW
DragFinish
SHAppBarMessage
SHBrowseForFolderW
ShellExecuteW
ShellExecuteExW
comctl32
ImageList_Create
ImageList_Add
InitCommonControlsEx
ImageList_Destroy
shlwapi
PathFindFileNameW
PathFindExtensionW
PathIsUNCW
PathStripToRootW
StrFormatKBSizeW
PathRemoveFileSpecW
uxtheme
DrawThemeText
GetWindowTheme
IsAppThemed
GetThemePartSize
IsThemeBackgroundPartiallyTransparent
GetCurrentThemeName
DrawThemeParentBackground
OpenThemeData
CloseThemeData
DrawThemeBackground
GetThemeColor
GetThemeSysColor
ole32
OleFlushClipboard
OleIsCurrentClipboard
CoRegisterMessageFilter
DoDragDrop
OleGetClipboard
CoLockObjectExternal
RegisterDragDrop
RevokeDragDrop
OleLockRunning
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
CoRevokeClassObject
OleUninitialize
OleInitialize
CoFreeUnusedLibraries
CreateILockBytesOnHGlobal
StgOpenStorageOnILockBytes
StgCreateDocfileOnILockBytes
CoGetClassObject
CoDisconnectObject
CoInitialize
CLSIDFromProgID
CLSIDFromString
CoCreateGuid
CoCreateInstance
CoInitializeEx
CoUninitialize
ReleaseStgMedium
OleDuplicateData
CoTaskMemFree
CoTaskMemAlloc
CreateStreamOnHGlobal
oleaut32
SysStringLen
SystemTimeToVariantTime
VariantTimeToSystemTime
SafeArrayDestroy
LoadTypeLi
VariantCopy
VarBstrFromDate
OleCreateFontIndirect
SysAllocString
VariantChangeType
VariantClear
SysAllocStringLen
VariantInit
SysFreeString
oledlg
OleUIBusyW
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
gdiplus
GdipBitmapUnlockBits
GdipCreateBitmapFromScan0
GdipGetImagePaletteSize
GdipGetImagePalette
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipDrawImageI
GdiplusShutdown
GdipCreateHBITMAPFromBitmap
GdipCreateBitmapFromStream
GdiplusStartup
GdipGetImageEncoders
GdipGetImageEncodersSize
GdipCreateBitmapFromHBITMAP
GdipSaveImageToFile
GdipCloneImage
GdipDrawLineI
GdipSetSmoothingMode
GdipSetInterpolationMode
GdipDrawImageRectI
GdipGetImageGraphicsContext
GdipBitmapLockBits
GdipFree
GdipAlloc
GdipDisposeImage
GdipCreatePen1
GdipDeletePen
GdipSetPenCustomEndCap
GdipDeleteCustomLineCap
GdipCreateAdjustableArrowCap
GdipCreateFromHDC
GdipDeleteGraphics
oleacc
AccessibleObjectFromWindow
LresultFromObject
CreateStdAccessibleObject
imm32
ImmGetContext
ImmReleaseContext
ImmGetOpenStatus
winmm
PlaySoundW
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 330KB - Virtual size: 330KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 23KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 196KB - Virtual size: 195KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 138KB - Virtual size: 137KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ