D:\work\projects\3_WOMic\4_src\1_womicclient-TS\womicclient\Release\WOMicClient.pdb
Static task
static1
1 signatures
General
-
Target
WOMicClient.exe
-
Size
158KB
-
MD5
26ba164873f020120e2267ac1cf16d43
-
SHA1
9d8d69bbe7f37d9e359dc24459f2160b677566fe
-
SHA256
9e07dbce584991a821ea7030bc8228271d1d2aa8ce3d4bf8f1d2309796d7ebcf
-
SHA512
6d60ebf347aab27579d47c9a6e34d5035e70ae8e189ddd71c451c92387fc857c30a8b1ddae51c6fe19ce29070e1911480d680e5477fa02caf5072162ab00fedd
-
SSDEEP
3072:EQUcrL6KmL783vtpkBAoH66Gop/q/rQms3cp6L8EcSufWr7+GavZZsXILNeu998:EQfSKm/6kBoRop/q/rQm6k6QEcSzr6GD
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource WOMicClient.exe
Files
-
WOMicClient.exe.exe windows:6 windows x86 arch:x86
cab71e19c04a41cbdb2e1b1d531fce98
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
advapi32
RegOpenKeyExW
RegSetValueExW
RegCloseKey
RegQueryValueExW
bthprops.cpl
BluetoothSdpGetAttributeValue
BluetoothSdpGetContainerElementData
BluetoothFindFirstDevice
BluetoothFindNextDevice
BluetoothSdpGetString
BluetoothFindDeviceClose
ws2_32
WSALookupServiceNextW
WSALookupServiceBeginW
WSAStartup
WSALookupServiceEnd
setsockopt
freeaddrinfo
htons
recv
send
getaddrinfo
select
closesocket
bind
__WSAFDIsSet
getsockopt
socket
WSAGetLastError
WSAAddressToStringW
connect
winmm
waveOutPrepareHeader
waveOutOpen
waveOutClose
waveOutUnprepareHeader
timeBeginPeriod
timeGetDevCaps
timeKillEvent
timeEndPeriod
timeSetEvent
waveOutWrite
cfgmgr32
CM_Get_Device_Interface_ListW
CM_Get_Device_Interface_List_SizeW
kernel32
QueryPerformanceCounter
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LoadLibraryExW
GetModuleHandleW
GlobalUnlock
GlobalLock
GlobalAlloc
SetThreadExecutionState
CreateThread
GetCurrentProcessId
GetLastError
Sleep
GetCurrentThreadId
SetThreadPriority
GetTickCount
WideCharToMultiByte
MultiByteToWideChar
CreateSemaphoreW
ReleaseSemaphore
ReleaseMutex
CreateMutexW
GetProcessHeap
HeapAlloc
CreateFileW
DeviceIoControl
CreatePipe
WriteFile
HeapFree
CreateProcessW
CloseHandle
GetSystemTimeAsFileTime
InitializeSListHead
ReadFile
WaitForSingleObject
user32
IsIconic
UpdateWindow
EnableMenuItem
PostQuitMessage
CheckMenuItem
FlashWindowEx
LoadCursorW
FindWindowW
TranslateMessage
EndPaint
DispatchMessageW
GetSubMenu
LoadAcceleratorsW
RegisterClassExW
DeleteMenu
GetMenu
LoadMenuW
DefWindowProcW
GetMessageW
TrackPopupMenu
CreatePopupMenu
TranslateAcceleratorW
LoadIconW
BeginPaint
wsprintfW
DialogBoxParamW
GetDlgItem
EndDialog
SendMessageW
SetWindowPos
GetWindowRect
EnableWindow
IsDlgButtonChecked
ShowWindow
LoadStringW
MessageBoxW
DestroyWindow
CreateDialogParamW
SetClipboardData
EmptyClipboard
CloseClipboard
OpenClipboard
CreateWindowExW
GetCursorPos
SetForegroundWindow
InsertMenuW
shell32
Shell_NotifyIconW
msvcp140
?_Xlength_error@std@@YAXPBD@Z
vcruntime140
__std_exception_copy
__std_exception_destroy
memchr
__std_terminate
wcsstr
_purecall
memset
memmove
memcpy
_CxxThrowException
__current_exception
__current_exception_context
_except_handler4_common
__CxxFrameHandler3
api-ms-win-crt-runtime-l1-1-0
_controlfp_s
abort
_initialize_onexit_table
_register_onexit_function
_errno
_cexit
_seh_filter_exe
_set_app_type
_invalid_parameter_noinfo_noreturn
_configure_wide_argv
_initialize_wide_environment
_get_wide_winmain_command_line
_initterm
_initterm_e
exit
_exit
terminate
_c_exit
_register_thread_local_exe_atexit_callback
_crt_atexit
_invalid_parameter_noinfo
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswscanf
_set_fmode
__p__commode
__acrt_iob_func
fread
__stdio_common_vfwprintf
fclose
__stdio_common_vsnprintf_s
__stdio_common_vfprintf
fopen
api-ms-win-crt-convert-l1-1-0
wcstombs
_wtoi
api-ms-win-crt-string-l1-1-0
wcscpy_s
api-ms-win-crt-heap-l1-1-0
free
_callnewh
malloc
_set_new_mode
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Exports
Exports
opus_decode
opus_decode_float
opus_decoder_create
opus_decoder_ctl
opus_decoder_destroy
opus_decoder_get_nb_samples
opus_decoder_get_size
opus_decoder_init
opus_get_version_string
opus_packet_get_bandwidth
opus_packet_get_nb_channels
opus_packet_get_nb_frames
opus_packet_get_nb_samples
opus_packet_get_samples_per_frame
opus_packet_parse
opus_pcm_soft_clip
opus_strerror
Sections
.text Size: 114KB - Virtual size: 114KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ