C:\Users\Sigma\Desktop\programy\borderless-imgui-window-main\Release\sigma.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7c6b9bc644a6edd5f30ed52f2a547b10b4938841668330b26018b48d12ac7e4b.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
7c6b9bc644a6edd5f30ed52f2a547b10b4938841668330b26018b48d12ac7e4b.exe
Resource
win10v2004-20240709-en
General
-
Target
7c6b9bc644a6edd5f30ed52f2a547b10b4938841668330b26018b48d12ac7e4b
-
Size
983KB
-
MD5
912821aff43c7c1a194c539df000fc8c
-
SHA1
8a7b5a0e4a6e8895361bf1517eea298d6b7cbea0
-
SHA256
7c6b9bc644a6edd5f30ed52f2a547b10b4938841668330b26018b48d12ac7e4b
-
SHA512
8aa04b37c65db9ae8f815c2680d4458f4a694de241bf8ac6a5249f1dcba4cc53f0838bdd3c010ca902096e7488a592cabdf998a5f0f49ed5c6934d92627e71a5
-
SSDEEP
12288:sKUZmpiYl2iy4obv223My4Pv/ySjDmadESxXJ3o5188907cFdpH3gtRnDf:sKUZmrl2iyvbv223PihGaf65pH3pH3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7c6b9bc644a6edd5f30ed52f2a547b10b4938841668330b26018b48d12ac7e4b
Files
-
7c6b9bc644a6edd5f30ed52f2a547b10b4938841668330b26018b48d12ac7e4b.exe windows:6 windows x86 arch:x86
9312d1c513c52042eba0e19167dda56d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
d3d9
Direct3DCreate9
kernel32
WaitForMultipleObjects
GetCurrentProcessId
SleepEx
VerifyVersionInfoW
CreateFileA
GetFileSizeEx
GetModuleHandleA
GetLocaleInfoEx
GetCurrentDirectoryW
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
GetFileAttributesExW
AreFileApisANSI
GetFileInformationByHandleEx
WakeAllConditionVariable
GetEnvironmentVariableA
UnhandledExceptionFilter
PeekNamedPipe
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentThreadId
WaitForSingleObjectEx
MoveFileExA
GetSystemDirectoryA
CreateEventA
LocalFree
CloseHandle
GetModuleHandleW
GetProcessHeap
DeleteCriticalSection
HeapDestroy
HeapAlloc
CreateThread
HeapReAlloc
GetLastError
Sleep
HeapSize
InitializeCriticalSectionEx
GetModuleFileNameW
GetCurrentProcess
HeapFree
GetSystemTimeAsFileTime
InitializeSListHead
MultiByteToWideChar
GlobalAlloc
GetModuleFileNameA
GlobalFree
GlobalLock
WideCharToMultiByte
GlobalUnlock
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
VerSetConditionMask
FreeLibrary
QueryPerformanceCounter
WaitForSingleObject
ReadFile
GetFileType
SetUnhandledExceptionFilter
GetStdHandle
FormatMessageA
SetEvent
LeaveCriticalSection
EnterCriticalSection
GetTickCount
FormatMessageW
SetLastError
AcquireSRWLockExclusive
SleepConditionVariableSRW
ReleaseSRWLockExclusive
OutputDebugStringW
user32
SetLayeredWindowAttributes
CreateWindowExA
DefWindowProcA
MessageBoxA
ShowWindow
GetSystemMetrics
SetWindowPos
DestroyWindow
GetWindowRect
DispatchMessageA
SetClipboardData
GetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
GetCursorPos
TranslateMessage
SetCursorPos
ReleaseCapture
GetClientRect
SetCursor
UnregisterClassA
GetForegroundWindow
TrackMouseEvent
IsChild
ClientToScreen
GetCapture
ScreenToClient
UpdateWindow
RegisterClassExA
PeekMessageA
LoadCursorA
PostQuitMessage
SetCapture
advapi32
GetTokenInformation
GetLengthSid
OpenProcessToken
IsValidSid
CopySid
ConvertSidToStringSidA
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptCreateHash
CryptHashData
CryptDestroyHash
CryptDestroyKey
CryptImportKey
CryptEncrypt
shell32
ShellExecuteA
msvcp140
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?uncaught_exception@std@@YA_NXZ
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?id@?$ctype@D@std@@2V0locale@2@A
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QAE_N_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
?getloc@ios_base@std@@QBE?AVlocale@2@XZ
??7ios_base@std@@QBE_NXZ
?_Getcat@?$ctype@D@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
_Query_perf_counter
?_Syserror_map@std@@YAPBDH@Z
?_Xlength_error@std@@YAXPBD@Z
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
?_Xbad_function_call@std@@YAXXZ
?_Winerror_map@std@@YAHH@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??0_Lockit@std@@QAE@H@Z
_Query_perf_frequency
??1_Lockit@std@@QAE@XZ
normaliz
IdnToAscii
IdnToUnicode
wldap32
ord217
ord46
ord211
ord60
ord45
ord50
ord41
ord22
ord27
ord32
ord143
ord33
ord35
ord79
ord30
ord200
ord301
ord26
crypt32
CryptDecodeObjectEx
CertGetCertificateChain
CertFreeCertificateChainEngine
CertCreateCertificateChainEngine
CryptQueryObject
CertGetNameStringA
CertFindExtension
CertAddCertificateContextToStore
CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CryptStringToBinaryA
PFXImportCertStore
CertFreeCertificateChain
ws2_32
WSAStartup
WSAEventSelect
WSAResetEvent
WSACreateEvent
WSAWaitForMultipleEvents
closesocket
WSASetLastError
WSAGetLastError
ntohs
WSACloseEvent
WSACleanup
getsockopt
gethostname
ioctlsocket
getpeername
setsockopt
sendto
recvfrom
freeaddrinfo
getaddrinfo
recv
listen
htonl
getsockname
connect
bind
accept
select
__WSAFDIsSet
socket
htons
send
WSAIoctl
WSAEnumNetworkEvents
imm32
ImmReleaseContext
ImmSetCompositionWindow
ImmGetContext
shlwapi
PathFindFileNameW
rpcrt4
UuidCreate
UuidToStringA
RpcStringFreeA
userenv
UnloadUserProfile
bcrypt
BCryptGenRandom
vcruntime140
memcpy
strrchr
memchr
strstr
__std_terminate
memmove
__std_exception_destroy
__CxxFrameHandler3
__current_exception
__current_exception_context
_except_handler4_common
_CxxThrowException
strchr
memset
__std_exception_copy
api-ms-win-crt-runtime-l1-1-0
_cexit
terminate
_seh_filter_exe
_set_app_type
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_initterm_e
_exit
exit
_c_exit
_register_thread_local_exe_atexit_callback
_register_onexit_function
_initialize_onexit_table
abort
_controlfp_s
system
_errno
_invalid_parameter_noinfo_noreturn
_resetstkoflw
_invalid_parameter_noinfo
__sys_errlist
__sys_nerr
_beginthreadex
_crt_atexit
api-ms-win-crt-stdio-l1-1-0
_set_fmode
_open
__p__commode
fputc
fflush
fopen
fclose
fgetc
feof
__stdio_common_vswprintf
fputs
fwrite
_read
_lseeki64
_close
__stdio_common_vsprintf
_fileno
_popen
fgetpos
setvbuf
fgets
_pclose
ungetc
fsetpos
__stdio_common_vsscanf
_wfopen
fread
_fseeki64
fseek
__acrt_iob_func
_write
ftell
_get_stream_buffer_pointers
api-ms-win-crt-heap-l1-1-0
realloc
malloc
_set_new_mode
calloc
free
_callnewh
api-ms-win-crt-math-l1-1-0
_libm_sse2_sqrt_precise
ceil
_libm_sse2_sin_precise
_libm_sse2_cos_precise
_libm_sse2_acos_precise
_fdopen
_dsign
_dclass
_CIfmod
__setusermatherr
api-ms-win-crt-convert-l1-1-0
wcstombs
strtod
strtoull
strtol
strtoul
strtoll
atoi
api-ms-win-crt-filesystem-l1-1-0
_unlink
_fstat64
_unlock_file
_lock_file
_access
_stat64
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
___lc_codepage_func
localeconv
api-ms-win-crt-string-l1-1-0
strncpy
strncmp
strpbrk
_strdup
strcspn
strspn
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-time-l1-1-0
_time64
strftime
_gmtime64
_localtime64
api-ms-win-crt-environment-l1-1-0
getenv
Sections
.text Size: 691KB - Virtual size: 690KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 111KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 27KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ