D:\James\Documents\Visual Studio 2017\Projects\OutoKlicker\Release\OutoKlicker.pdb
Static task
static1
Behavioral task
behavioral1
Sample
5.exe
Resource
win7-20240508-en
General
-
Target
5
-
Size
35KB
-
MD5
c8770bb5491b304a68bd8c7b9d129c06
-
SHA1
47e0803b6a9a5903b17b32fdf64186ab5ed6a109
-
SHA256
39b8f377a954b0041fb58e37738d6823fe51137abdc9137a2a8f6931510578ec
-
SHA512
8508d95d519d1f606ed072dc8b838cedd8f28ae171ae70968fa768bc1cd0a0ea156a67128232e48c10d515106c0d01eedc939746ca202a8509d601a68108950a
-
SSDEEP
768:yfRsnEDEISRFev4MAUmxus3CL1/gUMmetDR:Pmv4MAUcXjt
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 5
Files
-
5.exe windows:6 windows x86 arch:x86
22a1bde51348bdb6b052a2e7247f8b7e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
CloseHandle
Sleep
K32GetModuleFileNameExW
OpenProcess
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
K32EnumProcesses
user32
MessageBoxW
EnumWindows
GetWindowThreadProcessId
ShowWindow
LoadIconW
SetDlgItemInt
UnregisterHotKey
GetDlgItemInt
IsDlgButtonChecked
GetDlgItemTextW
SendMessageW
SetWindowTextW
GetWindowTextW
GetDlgItem
TrackPopupMenu
CreatePopupMenu
GetCursorPos
DestroyWindow
PostQuitMessage
InsertMenuW
EndDialog
UnhookWindowsHookEx
CreateDialogParamW
DispatchMessageW
TranslateMessage
RegisterHotKey
GetMessageW
IsDialogMessageW
comdlg32
GetOpenFileNameW
shell32
SHGetFolderPathW
SHCreateDirectoryExW
Shell_NotifyIconW
shlwapi
PathAppendW
msvcp140
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
_Thrd_detach
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?_Xlength_error@std@@YAXPBD@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?uncaught_exception@std@@YA_NXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?_Xout_of_range@std@@YAXPBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??Bid@locale@std@@QAEIXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
_Cnd_wait
_Thrd_start
_Mtx_unlock
_Mtx_destroy
_Cnd_destroy
_Cnd_signal
_Mtx_lock
_Cnd_do_broadcast_at_thread_exit
_Mtx_init
_Cnd_init
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
vcruntime140
_except_handler4_common
memset
_CxxThrowException
__std_exception_copy
__std_terminate
__CxxFrameHandler3
memcpy
__std_exception_destroy
memmove
api-ms-win-crt-runtime-l1-1-0
_initterm
_initialize_wide_environment
exit
_errno
_seh_filter_exe
_initterm_e
_get_wide_winmain_command_line
_c_exit
_register_thread_local_exe_atexit_callback
_set_app_type
_configure_wide_argv
_invalid_parameter_noinfo_noreturn
_cexit
_register_onexit_function
_crt_atexit
terminate
_controlfp_s
_exit
_initialize_onexit_table
_invalid_parameter_noinfo
api-ms-win-crt-convert-l1-1-0
wcstol
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
fgetc
fclose
fgetwc
fwrite
ungetc
_fseeki64
fsetpos
setvbuf
fflush
fputwc
ungetwc
fgetpos
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
api-ms-win-crt-string-l1-1-0
wcscpy_s
api-ms-win-crt-heap-l1-1-0
_set_new_mode
_callnewh
malloc
free
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ