Y:\code\compactor\target\release\deps\Compactor.pdb
Static task
static1
General
-
Target
Compactor.exe
-
Size
1.4MB
-
MD5
e73b96f41a431f80de40d0feace79418
-
SHA1
2146898f07897fea54d79785a19bd15de8dfe858
-
SHA256
c78f9bef71355797642a3c3e4b1402b803aa80143e4a9c61f1fcaa18898f3379
-
SHA512
f3d3a6ce95db94ea8a89ed737e2369efd664645155e642cd0a74126ff415be69d957598cc37c35e5e1d95e4f36b91d5044d039e0273d9131622431330e0fc9d5
-
SSDEEP
24576:Ru4NOPlNN9cMN/ITWBdNr39WZoA9E844y:Y4QPl79cMN/T9kH9E849
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Compactor.exe
Files
-
Compactor.exe.exe windows:6 windows x64 arch:x64
f812843f88b7e18ac129f9cb8fb90b67
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
ole32
CoCreateInstance
OleSetContainedObject
OleUninitialize
OleInitialize
CoGetClassObject
CoUninitialize
CoTaskMemFree
CoInitializeEx
oleaut32
VariantClear
VariantInit
SafeArrayAccessData
SafeArrayDestroy
SafeArrayCreate
SysAllocStringLen
SysFreeString
gdi32
GetDeviceCaps
user32
LoadImageW
GetDesktopWindow
SetWindowLongPtrW
GetWindowLongPtrW
AdjustWindowRect
GetClientRect
ReleaseDC
GetDC
UpdateWindow
SetFocus
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
PostQuitMessage
DefWindowProcW
PostMessageW
PeekMessageW
DispatchMessageW
TranslateMessage
GetMessageW
GetForegroundWindow
MessageBoxA
MessageBoxW
shell32
SHGetKnownFolderPath
SHCreateItemFromParsingName
ShellExecuteW
advapi32
RegCreateKeyW
RegCloseKey
SystemFunction036
RegSetValueExW
kernel32
SetStdHandle
ReadConsoleInputW
FindFirstFileExW
CreatePipe
GetFileAttributesExW
GetExitCodeProcess
GetFileSizeEx
LCMapStringW
CompareStringW
GetCommandLineW
IsValidCodePage
GetModuleHandleExW
GetConsoleCP
GetStringTypeW
GetFileType
DuplicateHandle
DeleteFileW
LoadLibraryExW
FreeLibrary
TlsFree
InitializeCriticalSectionAndSpinCount
EncodePointer
RaiseException
RtlPcToFileHeader
RtlUnwindEx
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetACP
GetOEMCP
GetCPInfo
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetCommandLineA
SetEnvironmentVariableW
GetCurrentProcessId
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
SetConsoleMode
CreateProcessW
HeapSize
SetEndOfFile
GetCurrentThread
GetProcessHeap
HeapFree
SwitchToThread
HeapAlloc
HeapReAlloc
LeaveCriticalSection
CloseHandle
WaitForSingleObject
GetLastError
DeviceIoControl
SetFileTime
UnlockFile
WriteFile
GetConsoleWindow
AttachConsole
CreateSemaphoreA
SetConsoleCtrlHandler
ReadFile
AllocConsole
FreeConsole
AddVectoredExceptionHandler
WaitForSingleObjectEx
LoadLibraryA
CreateMutexA
GetProcAddress
GetCurrentProcess
ReleaseMutex
RtlLookupFunctionEntry
RtlCaptureContext
Sleep
ReleaseSemaphore
lstrlenW
SetLastError
GetCompressedFileSizeW
LockFileEx
FlushFileBuffers
GetFileInformationByHandle
TlsGetValue
TlsSetValue
DeleteCriticalSection
GetModuleHandleW
GetEnvironmentVariableW
GetStdHandle
GetConsoleMode
WriteConsoleW
InitializeCriticalSection
EnterCriticalSection
GetCurrentDirectoryW
TlsAlloc
FormatMessageW
CreateFileW
SetFilePointerEx
FindNextFileW
CreateDirectoryW
ReadConsoleW
TryEnterCriticalSection
ExitProcess
QueryPerformanceCounter
QueryPerformanceFrequency
CreateThread
FindClose
FindFirstFileW
OutputDebugStringW
GetModuleFileNameW
GlobalAlloc
GlobalFree
MulDiv
MultiByteToWideChar
WideCharToMultiByte
Sections
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 281KB - Virtual size: 280KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 43KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ