C:\Users\YAN\Documents\개발 프로젝트\OneWay\FileAgent\OneWayFileRecvProgram\Debug\OneWayFileRecvProgram.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a6b2eed511e149fe7e90c5a60931e10083e69851355f06e2c907bf97cbc56cc6.exe
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
a6b2eed511e149fe7e90c5a60931e10083e69851355f06e2c907bf97cbc56cc6.exe
Resource
win10v2004-20240508-en
General
-
Target
a6b2eed511e149fe7e90c5a60931e10083e69851355f06e2c907bf97cbc56cc6
-
Size
5.3MB
-
MD5
5fc81da765d48948893a9894eeefdac0
-
SHA1
0e25e527bd099d7c203c10b4686e1bc2683988da
-
SHA256
a6b2eed511e149fe7e90c5a60931e10083e69851355f06e2c907bf97cbc56cc6
-
SHA512
80506719cc1a1c636436459bf6b425121b7ec78b35d5d83455efaa9a8617ed952a607d1791162c067109b95239e4d73419538a9f75ae10075157a2c30fbd2be4
-
SSDEEP
98304:pWqcTZMeuWcjiJpbeB25dKaZh4vC6CPslTssT:kqcTv1FZh4afEtss
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a6b2eed511e149fe7e90c5a60931e10083e69851355f06e2c907bf97cbc56cc6
Files
-
a6b2eed511e149fe7e90c5a60931e10083e69851355f06e2c907bf97cbc56cc6.exe windows:5 windows x86 arch:x86
2021007cb4834edfade735f36cbd7bd8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
RaiseException
GetSystemTimeAsFileTime
DecodePointer
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
EncodePointer
FileTimeToLocalFileTime
GetDriveTypeA
FindFirstFileExA
GetTimeZoneInformation
GetModuleFileNameA
ExitProcess
ExitThread
VirtualAlloc
GetSystemInfo
VirtualQuery
SetStdHandle
GetFileType
GetStdHandle
OutputDebugStringA
WriteConsoleW
OutputDebugStringW
QueryPerformanceCounter
FreeEnvironmentStringsW
GetEnvironmentStringsW
SetHandleCount
HeapCreate
HeapDestroy
FatalAppExitA
SetConsoleCtrlHandler
IsProcessorFeaturePresent
GetACP
GetOEMCP
GetCPInfo
IsValidCodePage
LCMapStringW
HeapAlloc
HeapReAlloc
HeapSize
HeapQueryInformation
HeapFree
GetConsoleCP
GetConsoleMode
GetStringTypeW
GetLocaleInfoA
IsValidLocale
EnumSystemLocalesA
GetFileInformationByHandle
PeekNamedPipe
CreateFileA
SetCurrentDirectoryW
GetFullPathNameA
GetProcessHeap
GetDriveTypeW
SetEnvironmentVariableA
OpenEventA
UnmapViewOfFile
MapViewOfFile
CreateFileMappingA
OpenFileMappingA
InterlockedCompareExchange
HeapSetInformation
GetCommandLineW
LocalLock
LocalUnlock
SetFileAttributesW
LocalFileTimeToFileTime
GetFileAttributesExW
GetFileSizeEx
GetUserDefaultLCID
ReplaceFileW
GetDiskFreeSpaceW
GetFileTime
SetFileTime
SearchPathW
GetTickCount
GetNumberFormatW
GetWindowsDirectoryW
GetTempPathW
GetTempFileNameW
GetShortPathNameW
lstrcmpiW
GetStringTypeExW
IsBadReadPtr
GetVolumeInformationW
SetEndOfFile
UnlockFile
LockFile
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetCurrentProcess
DuplicateHandle
GetHandleInformation
GetThreadLocale
GetCurrentDirectoryW
TlsGetValue
LocalReAlloc
TlsSetValue
TlsFree
GlobalHandle
TlsAlloc
LocalAlloc
InitializeCriticalSection
InterlockedIncrement
GetProfileIntW
VirtualProtect
SetErrorMode
InterlockedDecrement
ReleaseActCtx
CreateActCtxW
GlobalFlags
GetSystemDirectoryW
FindNextFileW
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
PulseEvent
EnterCriticalSection
LeaveCriticalSection
GlobalReAlloc
lstrcpyW
WritePrivateProfileStringW
GetPrivateProfileStringW
GetPrivateProfileIntW
CompareStringA
InterlockedExchange
GetCurrentThread
GetLocaleInfoW
LoadLibraryExW
GetUserDefaultUILanguage
ConvertDefaultLocale
GetSystemDefaultUILanguage
WaitForMultipleObjects
ReleaseMutex
CreateMutexW
GetAtomNameW
lstrcmpA
SystemTimeToFileTime
FileTimeToSystemTime
MulDiv
CopyFileW
GlobalSize
GlobalAlloc
FormatMessageW
LocalFree
GetCurrentProcessId
GetModuleFileNameW
SuspendThread
GetThreadPriority
SetThreadPriority
CompareStringW
GetVersionExW
lstrcmpW
FreeLibrary
GetCurrentThreadId
GlobalGetAtomNameW
GlobalAddAtomW
GlobalFindAtomW
GlobalDeleteAtom
GlobalLock
GlobalUnlock
GlobalFree
FreeResource
GetModuleHandleW
LoadLibraryW
GetProcAddress
ActivateActCtx
DeactivateActCtx
SetLastError
HeapValidate
RtlUnwind
GetFullPathNameW
GetStartupInfoW
GetFileSize
GetFileAttributesW
CreateThread
ResumeThread
ResetEvent
SetEvent
CreateDirectoryW
CreateFileW
MoveFileW
ReleaseSemaphore
WaitForSingleObject
DeleteFileW
CloseHandle
CreateSemaphoreW
CreateEventW
Sleep
FindFirstFileW
FindClose
lstrlenA
MultiByteToWideChar
lstrlenW
WideCharToMultiByte
GetLastError
LoadResource
LockResource
SizeofResource
FindResourceExW
FindResourceW
user32
GetAsyncKeyState
SetRectEmpty
ReleaseCapture
GetDialogBaseUnits
GetClipboardFormatNameA
GetClipboardFormatNameW
UnpackDDElParam
DestroyMenu
MessageBeep
CharUpperW
MonitorFromPoint
UpdateLayeredWindow
LoadAcceleratorsW
TranslateAcceleratorW
ReuseDDElParam
GetMenuBarInfo
WaitMessage
CharNextW
CopyAcceleratorTableW
DrawIconEx
DestroyAcceleratorTable
CreateAcceleratorTableW
ToUnicodeEx
GetKeyboardLayout
GetKeyboardState
SetCursorPos
SetClassLongW
UnregisterClassW
GetIconInfo
RegisterClipboardFormatW
PtInRect
OffsetRect
CopyIcon
IsRectEmpty
CharUpperBuffW
GetDoubleClickTime
DefFrameProcW
TranslateMDISysAccel
DefMDIChildProcW
IsClipboardFormatAvailable
IsCharLowerW
MapVirtualKeyExW
InSendMessage
EnumChildWindows
DestroyCursor
SetRect
InflateRect
IntersectRect
UnionRect
SubtractRect
DispatchMessageA
GetMessageA
IsWindowUnicode
PeekMessageA
ModifyMenuW
InsertMenuItemW
InsertMenuW
GetSubMenu
SetMenuItemInfoW
GetMenuItemInfoW
GetMenuStringW
GetMenuState
GetMenuItemID
GetMenuItemCount
GetMenuDefaultItem
SetMenuDefaultItem
EnableMenuItem
CheckMenuItem
AppendMenuW
DeleteMenu
IsMenu
CreatePopupMenu
CreateMenu
ScrollDC
GrayStringW
GetTabbedTextExtentW
DrawTextExW
DrawTextW
DrawFocusRect
DrawFrameControl
DrawStateW
DrawIcon
InvertRect
FrameRect
FillRect
ExcludeUpdateRgn
WindowFromDC
GetSysColorBrush
ShowWindow
MoveWindow
SetWindowTextW
IsDialogMessageW
ScrollWindowEx
IsDlgButtonChecked
SetDlgItemTextW
SetDlgItemInt
GetDlgItemTextW
GetDlgItemInt
CheckRadioButton
CheckDlgButton
OpenIcon
CloseWindow
LoadCursorW
PostThreadMessageW
NotifyWinEvent
GetWindowContextHelpId
SetWindowContextHelpId
SendNotifyMessageW
GetForegroundWindow
SetForegroundWindow
ShowCaret
HideCaret
SetCaretPos
GetCaretPos
CreateCaret
GetClipboardViewer
GetClipboardOwner
GetOpenClipboardWindow
OpenClipboard
SetClipboardViewer
ChangeClipboardChain
FlashWindow
WindowFromPoint
SetParent
GetLastActivePopup
FindWindowExW
FindWindowW
CopyImage
RealChildWindowFromPoint
ShowScrollBar
GetNextDlgTabItem
GetNextDlgGroupItem
DlgDirSelectComboBoxExW
DlgDirSelectExW
DlgDirListComboBoxW
DlgDirListW
SetCapture
KillTimer
SetTimer
DrawCaption
DrawAnimatedRects
EnableScrollBar
RedrawWindow
LockWindowUpdate
GetDCEx
ShowOwnedPopups
IsWindowVisible
ValidateRgn
ValidateRect
InvalidateRgn
InvalidateRect
GetUpdateRgn
GetUpdateRect
UpdateWindow
ReleaseDC
GetWindowDC
GetDC
EndPaint
BeginPaint
ClientToScreen
BringWindowToTop
GetWindowRgn
SetWindowRgn
ArrangeIconicWindows
IsZoomed
IsIconic
HiliteMenuItem
GetSystemMenu
DrawMenuBar
DragDetect
GetMenuCheckMarkDimensions
SetMenuItemBitmaps
RegisterWindowMessageW
MessageBoxW
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
LoadIconW
SendDlgItemMessageW
SendDlgItemMessageA
MonitorFromWindow
GetMonitorInfoW
GetClientRect
MapWindowPoints
GetSysColor
PeekMessageW
DispatchMessageW
GetFocus
SetFocus
AdjustWindowRectEx
ScreenToClient
EqualRect
DeferWindowPos
BeginDeferWindowPos
CopyRect
EndDeferWindowPos
ScrollWindow
GetWindowRect
GetScrollInfo
SetScrollInfo
GetScrollRange
SetScrollRange
GetScrollPos
SetScrollPos
GetTopWindow
IsChild
GetWindow
GetCapture
WinHelpW
TrackPopupMenuEx
TrackPopupMenu
SetWindowPlacement
GetWindowPlacement
GetWindowTextLengthW
GetWindowTextW
GetKeyState
GetDlgCtrlID
SetWindowsHookExW
CallNextHookEx
GetClassLongW
SetPropW
UnhookWindowsHookEx
GetPropW
CallWindowProcW
RemovePropW
DefWindowProcW
SetMenu
GetMenu
GetMessageTime
GetMessagePos
SetWindowLongW
SetWindowPos
EndDialog
GetDesktopWindow
GetActiveWindow
SetActiveWindow
EnableWindow
CreateDialogIndirectParamW
DestroyWindow
GetWindowLongW
GetDlgItem
IsWindowEnabled
TabbedTextOutW
MapDialogRect
MapVirtualKeyW
GetKeyNameTextW
GetClassNameW
LoadBitmapW
GetSystemMetrics
SendMessageW
PostMessageW
GetParent
IsWindow
LoadImageW
SetCursor
GetMessageW
SetLayeredWindowAttributes
EnumDisplayMonitors
SystemParametersInfoW
DestroyIcon
EmptyClipboard
CloseClipboard
ChildWindowFromPoint
SetClipboardData
TranslateMessage
MsgWaitForMultipleObjectsEx
PostQuitMessage
GetWindowThreadProcessId
GetCursorPos
CheckMenuRadioItem
GetMenuContextHelpId
SetMenuContextHelpId
LoadMenuIndirectW
LoadMenuW
ChildWindowFromPointEx
RemoveMenu
DrawEdge
shell32
DragAcceptFiles
SHGetDesktopFolder
SHGetSpecialFolderLocation
DragFinish
DragQueryFileW
SHAddToRecentDocs
SHGetFileInfoW
ExtractIconW
ShellExecuteW
SHAppBarMessage
ShellExecuteExW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetMalloc
oleaut32
SysStringByteLen
VarDateFromStr
SysAllocString
SysStringLen
SafeArrayGetDim
SafeArrayGetElemsize
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SafeArrayUnaccessData
SafeArrayAccessData
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayRedim
SafeArrayCreate
VariantCopy
SysReAllocStringLen
VarCyFromStr
VariantClear
SystemTimeToVariantTime
SysAllocStringByteLen
SysAllocStringLen
VariantInit
VarBstrFromCy
SafeArrayCopy
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayGetElement
SafeArrayPtrOfIndex
SafeArrayPutElement
SafeArrayLock
SafeArrayUnlock
SafeArrayDestroy
SysFreeString
VarBstrFromDate
SafeArrayDestroyData
SafeArrayDestroyDescriptor
VarBstrFromDec
VarDecFromStr
OleCreateFontIndirect
DosDateTimeToVariantTime
VariantTimeToSystemTime
VarUdateFromDate
VarDateFromUdate
VariantChangeType
libcurl
curl_easy_setopt
curl_global_init
curl_slist_free_all
curl_easy_perform
curl_slist_append
curl_global_cleanup
curl_easy_cleanup
curl_easy_strerror
curl_easy_init
msimg32
TransparentBlt
AlphaBlend
GradientFill
comctl32
ImageList_GetIconSize
InitCommonControlsEx
ImageList_DrawEx
ImageList_GetImageCount
ImageList_GetIcon
ImageList_Remove
ImageList_AddMasked
ImageList_Destroy
ImageList_ReplaceIcon
ImageList_Create
shlwapi
PathIsUNCW
PathRemoveFileSpecW
PathFindFileNameW
PathRemoveExtensionW
PathFindExtensionW
PathFileExistsW
PathStripToRootW
oledlg
OleUIInsertObjectW
OleUIConvertW
OleUIChangeIconW
OleUIEditLinksW
OleUIUpdateLinksW
OleUIPasteSpecialW
OleUIBusyW
gdiplus
GdipBitmapUnlockBits
GdiplusStartup
GdipCreateBitmapFromStream
GdipBitmapLockBits
GdipCreateBitmapFromScan0
GdipGetImagePalette
GdipGetImagePaletteSize
GdipCreateBitmapFromHBITMAP
GdipDrawImageRectI
GdipSetInterpolationMode
GdipCreateFromHDC
GdipGetImageGraphicsContext
GdipDeleteGraphics
GdipDrawImageI
GdipGetImageWidth
GdipGetImageHeight
GdipGetImagePixelFormat
GdiplusShutdown
GdipCreateBitmapFromFile
GdipCreateBitmapFromFileICM
GdipFree
GdipDisposeImage
GdipCloneImage
GdipAlloc
GdipCreateBitmapFromStreamICM
ws2_32
accept
ioctlsocket
listen
bind
htons
inet_addr
setsockopt
socket
WSAGetLastError
recv
inet_ntoa
closesocket
getpeername
WSAStartup
WSACleanup
select
oleacc
LresultFromObject
AccessibleObjectFromWindow
CreateStdAccessibleObject
imm32
ImmReleaseContext
ImmGetContext
ImmGetOpenStatus
winmm
PlaySoundW
gdi32
CloseMetaFile
CreateEnhMetaFileW
CloseEnhMetaFile
ExtTextOutW
SetTextColor
SetBkColor
CreateBitmap
UnrealizeObject
GetObjectType
CreatePen
CreatePenIndirect
ExtCreatePen
CreateSolidBrush
CreateHatchBrush
CreateBrushIndirect
CreatePatternBrush
CreateDIBPatternBrushPt
CreateFontIndirectW
CreateFontW
CreateBitmapIndirect
SetBitmapBits
GetBitmapBits
SetBitmapDimensionEx
CreateMetaFileW
GetStockObject
DeleteObject
FrameRgn
FillRgn
LPtoDP
DPtoLP
GetWindowExtEx
GetWindowOrgEx
GetViewportExtEx
GetViewportOrgEx
GetBitmapDimensionEx
CreateCompatibleBitmap
CreateDiscardableBitmap
CreatePalette
CreateHalftonePalette
GetPaletteEntries
SetPaletteEntries
AnimatePalette
GetNearestPaletteIndex
ResizePalette
CreateRectRgn
CreateRectRgnIndirect
CreateEllipticRgn
CreateEllipticRgnIndirect
CreatePolygonRgn
CreatePolyPolygonRgn
CreateRoundRectRgn
PathToRegion
ExtCreateRegion
GetRegionData
SetRectRgn
CombineRgn
EqualRgn
GetWorldTransform
GetGraphicsMode
GetMapMode
GetTextColor
GetStretchBltMode
GetROP2
GetPolyFillMode
GetBkMode
GetBkColor
UpdateColors
RealizePalette
GetNearestColor
SelectObject
EnumObjects
SetBrushOrgEx
GetBrushOrgEx
GetDeviceCaps
CreateCompatibleDC
CreateICW
GetObjectW
GetTextExtentPointW
DeleteMetaFile
GetSystemPaletteEntries
EnumFontFamiliesExW
StretchDIBits
CreateDIBitmap
GetTextCharsetInfo
EnumFontFamiliesW
SetDIBColorTable
GetDIBits
CreateDIBSection
PlayMetaFile
EnumMetaFile
PlayMetaFileRecord
ExtSelectClipRgn
OffsetRgn
GetRgnBox
PtInRegion
RectInRegion
InvertRgn
PaintRgn
PtVisible
RectVisible
SelectClipPath
GetClipRgn
GetCurrentPositionEx
Arc
Polyline
Chord
Ellipse
Pie
Polygon
PolyPolygon
Rectangle
RoundRect
PatBlt
BitBlt
StretchBlt
GetPixel
SetPixel
FloodFill
ExtFloodFill
TextOutW
GetTextExtentPoint32W
GetTextAlign
GetTextFaceW
GetTextMetricsW
GetTextCharacterExtra
GetCharWidthW
GetFontLanguageInfo
GetCharacterPlacementW
GetAspectRatioFilterEx
Escape
SetBoundsRect
GetBoundsRect
ResetDCW
GetOutlineTextMetricsW
GetCharABCWidthsW
GetFontData
GetKerningPairsW
GetGlyphOutlineW
StartDocW
StartPage
EndPage
SetAbortProc
AbortDoc
EndDoc
MaskBlt
PlgBlt
SetPixelV
AngleArc
GetArcDirection
PolyPolyline
GetColorAdjustment
GetCurrentObject
PolyBezier
DrawEscape
ExtEscape
GetCharABCWidthsFloatW
GetCharWidthFloatW
AbortPath
BeginPath
CloseFigure
EndPath
FillPath
FlattenPath
GetMiterLimit
GetPath
SetMiterLimit
StrokeAndFillPath
StrokePath
WidenPath
GdiComment
PlayEnhMetaFile
CopyMetaFileW
DeleteDC
SaveDC
RestoreDC
SelectPalette
SetBkMode
SetPolyFillMode
SetROP2
SetStretchBltMode
SetGraphicsMode
SetWorldTransform
ModifyWorldTransform
SetMapMode
SetViewportOrgEx
OffsetViewportOrgEx
SetViewportExtEx
ScaleViewportExtEx
SetWindowOrgEx
OffsetWindowOrgEx
SetWindowExtEx
ScaleWindowExtEx
GetClipBox
SelectClipRgn
CreateDCW
ExcludeClipRect
IntersectClipRect
OffsetClipRgn
MoveToEx
LineTo
SetTextAlign
SetTextJustification
SetTextCharacterExtra
SetMapperFlags
GetLayout
SetLayout
ArcTo
SetArcDirection
PolyDraw
PolylineTo
SetColorAdjustment
PolyBezierTo
winspool.drv
ClosePrinter
DocumentPropertiesW
OpenPrinterW
GetJobW
comdlg32
GetFileTitleW
advapi32
GetFileSecurityW
OpenThreadToken
RegCloseKey
RegSetValueW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegSetValueExW
RegDeleteValueW
RegDeleteKeyW
RegQueryValueW
RegEnumKeyW
RegEnumValueW
RegEnumKeyExW
SetFileSecurityW
RevertToSelf
SetThreadToken
ole32
OleInitialize
OleUninitialize
CoFreeUnusedLibraries
CoGetMalloc
CreateFileMoniker
StgCreateDocfile
StgOpenStorage
StgIsStorageFile
OleCreateMenuDescriptor
OleDestroyMenuDescriptor
OleTranslateAccelerator
IsAccelerator
OleLockRunning
OleSetMenuDescriptor
OleSetContainedObject
StgOpenStorageOnILockBytes
OleCreateLinkFromData
OleCreateStaticFromData
OleCreateFromFile
OleCreateLinkToFile
OleCreate
OleLoad
OleSave
StgIsStorageILockBytes
GetHGlobalFromILockBytes
OleGetIconOfClass
WriteClassStm
OleSaveToStream
CreateGenericComposite
CreateItemMoniker
OleIsRunning
RegisterDragDrop
CoLockObjectExternal
RevokeDragDrop
OleGetClipboard
PropVariantCopy
OleRegEnumVerbs
OleRegGetMiscStatus
OleQueryCreateFromData
OleQueryLinkFromData
GetClassFile
GetRunningObjectTable
CreateOleAdviseHolder
CreateDataAdviseHolder
CoReleaseMarshalData
CoMarshalInterface
CoUnmarshalInterface
CoGetClassObject
StringFromGUID2
CoDisconnectObject
CoInitializeEx
CoUninitialize
CoInitialize
CoCreateInstance
OleDuplicateData
CoTaskMemFree
CreateBindCtx
SetConvertStg
WriteFmtUserTypeStg
WriteClassStg
OleRegGetUserType
ReadFmtUserTypeStg
CreateStreamOnHGlobal
CLSIDFromString
CLSIDFromProgID
CoCreateGuid
ReleaseStgMedium
CoTaskMemAlloc
CoTreatAsClass
StringFromCLSID
DoDragDrop
OleFlushClipboard
OleSetClipboard
OleIsCurrentClipboard
OleRun
CoRevokeClassObject
CoRegisterClassObject
CreateILockBytesOnHGlobal
CoRegisterMessageFilter
StgCreateDocfileOnILockBytes
ReadClassStg
OleCreateFromData
Sections
.text Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 830KB - Virtual size: 830KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 36KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 246KB - Virtual size: 246KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ