D:\BuildAgent\work\Buckeye\Perforce\BioShock1\master\Output_Win32\Final\BioshockHD.pdb
Static task
static1
Behavioral task
behavioral1
Sample
vivo Договор на оказание рекламных услуг.scr
Resource
win10v2004-20240508-en
General
-
Target
vivo 2024 - Материалы.rar
-
Size
58.5MB
-
MD5
7adcf82dde9e8c8b49b7a3e9f0f70954
-
SHA1
c6b7b816ff0728dbb1207fa6504961082a52eb1b
-
SHA256
2f1caea4b57ec875eeabcf3d25c32a559564be15147b1b5ce85522b1fb6c78f0
-
SHA512
38471fc477b0c4464e680c9d9ba5c6ba654f4b1d1a55c29e58301d295c9e962dae822add4795f18309ba80cccb95bf11c8013b0ebceee34bea183f9e25ad2cf4
-
SSDEEP
1572864:vYrZeq4w4pdErotxYu0ORdww+jQnT44dFar:vuEK4p0qEOowpnT43r
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource unpack001/vivo Договор на оказание рекламных услуг.scr
Files
-
vivo 2024 - Материалы.rar.rar
Password: 2024
-
vivo Договор на оказание рекламных услуг.scr.exe windows:6 windows x86 arch:x86
Password: 2024
b5504d340681f80a29e585410bb19fbb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetWindowsDirectoryA
GetWindowsDirectoryW
FreeLibrary
GetModuleFileNameA
GetModuleFileNameW
GetProcAddress
LoadLibraryW
CopyFileA
CopyFileW
MoveFileA
MoveFileW
SetUnhandledExceptionFilter
GetCurrentProcess
GetCurrentProcessId
GetLocalTime
TlsGetValue
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsSetValue
TlsFree
RaiseException
WaitForSingleObject
CreateThread
GetExitCodeThread
OutputDebugStringA
LoadLibraryA
GetSystemInfo
InterlockedExchangeAdd
FlushFileBuffers
ReleaseSemaphore
ExitProcess
GetComputerNameA
GlobalMemoryStatus
CreateProcessW
SystemTimeToFileTime
GlobalLock
GetComputerNameW
GetFileAttributesExA
GetSystemDirectoryW
GetSystemDirectoryA
SetThreadPriority
GetCurrentThread
OutputDebugStringW
TerminateProcess
GetSystemTimeAsFileTime
Sleep
CreateMutexW
CreateMutexA
DeleteCriticalSection
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
QueryPerformanceFrequency
GetLastError
CloseHandle
WriteFile
SetFilePointer
SetFileAttributesW
SetFileAttributesA
RemoveDirectoryW
RemoveDirectoryA
ReadFile
GetFullPathNameA
GetFileSize
GetFileAttributesExW
GetFileAttributesW
GetFileAttributesA
GetDiskFreeSpaceExW
FindNextFileA
FindFirstFileA
DeleteFileW
DeleteFileA
CreateFileW
CreateFileA
CreateDirectoryW
CreateDirectoryA
GetCurrentDirectoryW
GetCurrentDirectoryA
WideCharToMultiByte
MultiByteToWideChar
lstrlenW
VerSetConditionMask
VerifyVersionInfoW
GetFullPathNameW
lstrcmpW
LoadLibraryExW
GetModuleHandleA
SetLastError
lstrcmpA
LocalAlloc
IsProcessorFeaturePresent
DecodePointer
EncodePointer
GetLocaleInfoA
GetLocaleInfoW
GetSystemDefaultLangID
GlobalDeleteAtom
LockResource
LoadResource
FindResourceA
MulDiv
GlobalAddAtomW
GetModuleHandleW
LocalFree
InterlockedDecrement
InterlockedIncrement
SetFilePointerEx
SetThreadIdealProcessor
ResumeThread
SuspendThread
TerminateThread
SetThreadAffinityMask
CreateSemaphoreW
ResetEvent
SetEvent
CreateEventA
PulseEvent
TryEnterCriticalSection
ExpandEnvironmentStringsW
DebugBreak
GetVersionExA
IsDebuggerPresent
lstrlenA
GetCurrentThreadId
InitializeCriticalSectionEx
SetCurrentDirectoryW
SetConsoleCtrlHandler
GlobalUnlock
CreateProcessA
GetExitCodeProcess
GetVersionExW
FormatMessageW
GlobalAlloc
GetCommandLineA
FormatMessageA
QueryPerformanceCounter
FindNextFileW
FindFirstFileW
FindClose
InterlockedCompareExchange
InterlockedExchange
GetTickCount
user32
PeekMessageW
MessageBoxW
RegisterWindowMessageA
RegisterWindowMessageW
DispatchMessageA
PeekMessageA
SendMessageA
SendMessageW
SendMessageTimeoutW
DestroyWindow
ShowWindow
SetWindowPos
CreateDialogParamA
CreateDialogParamW
AdjustWindowRect
SetCursorPos
DispatchMessageW
TranslateMessage
SetActiveWindow
GetMenu
GetMenuState
GetKeyNameTextW
GetDlgItem
SetFocus
keybd_event
MapVirtualKeyW
GetSystemMetrics
UpdateWindow
GetForegroundWindow
SetForegroundWindow
SetPropA
SetPropW
GetPropA
GetPropW
RemovePropA
RemovePropW
GetDesktopWindow
FindWindowExA
FindWindowExW
GetWindowThreadProcessId
UnhookWindowsHookEx
CallNextHookEx
SystemParametersInfoW
GetFocus
GetSysColor
EnableWindow
ShowCursor
SystemParametersInfoA
AdjustWindowRectEx
GetUpdateRect
DrawTextExA
DrawTextExW
MessageBeep
CheckMenuItem
AppendMenuW
DrawFocusRect
DrawIcon
GetIconInfo
SetTimer
KillTimer
SetClassLongA
GetClassLongA
GetClassLongW
SetClassLongW
GetParent
FrameRect
DrawTextA
DrawTextW
GetDlgCtrlID
GetWindow
GetWindowTextA
CreateDialogIndirectParamA
EndDeferWindowPos
BeginDeferWindowPos
EndPaint
ClientToScreen
SetCursor
ScreenToClient
GetWindowRect
InsertMenuItemA
RegisterClassExA
TrackPopupMenu
IsIconic
FillRect
GetClassInfoExA
SetCapture
PostMessageW
IsZoomed
GetSubMenu
DialogBoxParamW
LoadMenuA
LoadIconA
LoadCursorW
IsWindowEnabled
SetMenu
UnregisterHotKey
GetAsyncKeyState
GetMessageTime
ValidateRect
SetParent
SetKeyboardState
SetRect
AttachThreadInput
WindowFromPoint
DrawEdge
MapWindowPoints
GetMenuItemInfoW
BeginPaint
GetClassInfoExW
GetCapture
GetKeyState
SetClipboardData
OpenClipboard
GetActiveWindow
EmptyClipboard
GetClipboardData
PostQuitMessage
CloseClipboard
ReleaseDC
GetDC
GetClientRect
MessageBoxA
MoveWindow
DefWindowProcW
CallWindowProcW
SetMenuItemInfoW
DialogBoxParamA
LoadCursorA
SetMenuItemInfoA
DestroyMenu
CallWindowProcA
ReleaseCapture
DefMDIChildProcA
CreateWindowExW
ClipCursor
PostMessageA
IsWindow
GetMenuItemCount
DefMDIChildProcW
GetSysColorBrush
CreatePopupMenu
EnumChildWindows
GetMenuItemInfoA
GetCursorPos
RegisterClassExW
DefWindowProcA
EndDialog
SetWindowLongW
CreateWindowExA
GetWindowLongA
GetWindowLongW
BringWindowToTop
LoadMenuW
InvalidateRect
SetWindowLongA
LoadIconW
gdi32
GetObjectA
CreateCompatibleDC
SetBkMode
DeleteObject
PatBlt
DeleteDC
BitBlt
CreatePen
MoveToEx
LineTo
Rectangle
SetTextColor
SetBkColor
ExtTextOutA
GetTextExtentPoint32W
GetTextExtentPoint32A
TextOutW
SelectObject
CreateFontW
CreateDIBitmap
GetStockObject
CreateSolidBrush
GetDeviceCaps
GetPixel
comdlg32
GetSaveFileNameA
ChooseColorA
shell32
ShellExecuteW
ShellExecuteA
SHGetFolderPathW
Shell_NotifyIconA
wsock32
WSAStartup
WSAGetLastError
gethostname
__WSAFDIsSet
accept
bind
closesocket
connect
inet_ntoa
htons
ioctlsocket
inet_addr
listen
ntohs
recv
select
send
setsockopt
socket
gethostbyname
WSAAsyncSelect
winmm
timeBeginPeriod
timeEndPeriod
advapi32
RegQueryValueExA
RegOpenKeyExA
GetUserNameW
GetUserNameA
RegCloseKey
RegSetValueExA
RegCreateKeyExA
ole32
CoUninitialize
CoSetProxyBlanket
CoCreateInstance
CoInitialize
CoCreateGuid
oleaut32
SysFreeString
SysAllocString
Sections
.text Size: 11.8MB - Virtual size: 11.8MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2.8MB - Virtual size: 2.8MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.9MB - Virtual size: 5.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.tls Size: 512B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.6MB - Virtual size: 1.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
-
vivo Промо-Ролик.mp4
-
vivo Техническое Задание.pdf.pdf
Password: 2024