D:\lander_duilib_2008\Bin\lander_duilib.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4d89259b5b8b4dd7b40388bd4199b7f5e47e1ca620bab86e1f5df27b36214b7c.exe
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4d89259b5b8b4dd7b40388bd4199b7f5e47e1ca620bab86e1f5df27b36214b7c.exe
Resource
win10v2004-20240802-en
General
-
Target
4d89259b5b8b4dd7b40388bd4199b7f5e47e1ca620bab86e1f5df27b36214b7c
-
Size
812KB
-
MD5
40f20d8a1c71e754e74d079c2d726d89
-
SHA1
de2117585f3d44f111cb6c6c196cfb0dcd2b152f
-
SHA256
4d89259b5b8b4dd7b40388bd4199b7f5e47e1ca620bab86e1f5df27b36214b7c
-
SHA512
d588f33f0098514dac640236b1ee912808a24acee975d5e42e696688bd43d46960d536f662b56d9b111a344d49b5f0cfae7b784017259f16c8e47090d17c33fe
-
SSDEEP
12288:MGw8qIZNYRrWcBP0ABOjQsnK6vOqK7ZE9jxItdtZi5xnAaqHB:MBdBEn1vOL14jxUtk5xe
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4d89259b5b8b4dd7b40388bd4199b7f5e47e1ca620bab86e1f5df27b36214b7c
Files
-
4d89259b5b8b4dd7b40388bd4199b7f5e47e1ca620bab86e1f5df27b36214b7c.exe windows:6 windows x86 arch:x86
9a8ef0e73264f0c8c99efb08aa61289f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
libcef
cef_string_map_value
cef_string_map_append
cef_string_multimap_size
cef_string_multimap_key
cef_string_multimap_value
cef_string_multimap_append
cef_string_multimap_alloc
cef_string_multimap_free
cef_string_list_copy
cef_string_map_size
cef_quit_message_loop
cef_run_message_loop
cef_shutdown
cef_initialize
cef_execute_process
cef_string_list_free
cef_string_list_alloc
cef_string_userfree_utf16_free
cef_log
cef_string_list_append
cef_string_list_value
cef_string_list_size
cef_string_utf16_cmp
cef_command_line_create
cef_string_map_key
cef_string_map_free
cef_string_map_alloc
cef_browser_host_create_browser
cef_api_hash
cef_string_utf16_set
cef_string_utf8_clear
cef_string_utf16_to_utf8
cef_string_utf8_to_utf16
cef_string_utf16_clear
kernel32
RtlUnwind
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
FlushFileBuffers
CreateFileW
SetStdHandle
FreeEnvironmentStringsW
IsProcessorFeaturePresent
TerminateProcess
FreeLibrary
LoadLibraryExW
GetModuleHandleExW
HeapValidate
GetSystemInfo
ExitProcess
GetStdHandle
WriteFile
GetFileType
WriteConsoleW
HeapQueryInformation
SetFilePointerEx
GetConsoleMode
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FindFirstFileExW
FindNextFileW
WideCharToMultiByte
MultiByteToWideChar
FindClose
LeaveCriticalSection
GetModuleFileNameW
EnterCriticalSection
CreateDirectoryW
GetCommandLineW
GetProcessHeap
DeleteCriticalSection
DecodePointer
HeapAlloc
RaiseException
HeapReAlloc
GetLastError
HeapSize
InitializeCriticalSectionEx
SetLastError
HeapFree
GetConsoleCP
IsValidCodePage
GetACP
GetOEMCP
GetCommandLineA
GetStartupInfoW
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
WaitForSingleObjectEx
ResetEvent
SetEvent
CloseHandle
GetCPInfo
GetLocaleInfoW
LCMapStringW
EncodePointer
GetProcAddress
GetModuleHandleW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
GetEnvironmentStringsW
TlsAlloc
SwitchToThread
CreateEventW
InitializeCriticalSectionAndSpinCount
GetStringTypeW
OutputDebugStringW
IsDebuggerPresent
user32
SetWindowPos
PostMessageW
InvalidateRect
GetClientRect
SetWindowLongW
LoadIconW
MoveWindow
SetWindowPlacement
GetSystemMetrics
ShowWindow
GetWindowPlacement
IsWindowVisible
GetWindowRect
GetWindowLongW
PostQuitMessage
OffsetRect
SetTimer
KillTimer
SystemParametersInfoW
UpdateWindow
SendMessageW
SetWindowTextW
CopyRect
shell32
Shell_NotifyIconW
SHGetSpecialFolderPathW
ShellExecuteW
ole32
CoUninitialize
CoInitialize
OleInitialize
duilib_d
??BCDuiString@DuiLib@@QBEPB_WXZ
??HCDuiString@DuiLib@@QBE?AV01@PB_W@Z
?GetInstancePath@CPaintManagerUI@DuiLib@@SA?AVCDuiString@2@XZ
?SetInstance@CPaintManagerUI@DuiLib@@SAXPAUHINSTANCE__@@@Z
?SetResourcePath@CPaintManagerUI@DuiLib@@SAXPB_W@Z
?Navigate2@CWebBrowserUI@DuiLib@@QAEXPB_W@Z
?ShowModal@CWindowWnd@DuiLib@@QAEIXZ
?CenterWindow@CWindowWnd@DuiLib@@QAEXXZ
??1CDialogBuilder@DuiLib@@QAE@XZ
??0CDuiString@DuiLib@@QAE@XZ
?GetHWND@CWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
?ResizeClient@CWindowWnd@DuiLib@@QAEXHH@Z
??0CDialogBuilder@DuiLib@@QAE@XZ
?GetInstance@CPaintManagerUI@DuiLib@@SAPAUHINSTANCE__@@XZ
??0WindowImplBase@DuiLib@@QAE@XZ
??1WindowImplBase@DuiLib@@UAE@XZ
?InitWindow@WindowImplBase@DuiLib@@UAEXXZ
??0CDuiString@DuiLib@@QAE@PB_WH@Z
??0CDuiString@DuiLib@@QAE@ABV01@@Z
??1CDuiString@DuiLib@@QAE@XZ
??8CDuiString@DuiLib@@QBE_NPB_W@Z
??BCWindowWnd@DuiLib@@QBEPAUHWND__@@XZ
?Create@CWindowWnd@DuiLib@@QAEPAUHWND__@@PAU3@PB_WKKHHHHPAUHMENU__@@@Z
?ShowWindow@CWindowWnd@DuiLib@@QAEX_N0@Z
?Close@CWindowWnd@DuiLib@@UAEXI@Z
?GetSuperClassName@CWindowWnd@DuiLib@@MBEPB_WXZ
?OnFinalMessage@WindowImplBase@DuiLib@@UAEXPAUHWND__@@@Z
?Notify@WindowImplBase@DuiLib@@UAEXAAUtagTNotifyUI@2@@Z
?GetMessageMap@WindowImplBase@DuiLib@@MBEPBUDUI_MSGMAP@2@XZ
?OnClick@WindowImplBase@DuiLib@@MAEXAAUtagTNotifyUI@2@@Z
?ResponseDefaultKeyEvent@WindowImplBase@DuiLib@@MAEJI@Z
?GetClassStyle@WindowImplBase@DuiLib@@UBEIXZ
?CreateControl@WindowImplBase@DuiLib@@UAEPAVCControlUI@2@PB_W@Z
?MessageHandler@WindowImplBase@DuiLib@@UAEJIIJAA_N@Z
?OnClose@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnDestroy@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcActivate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcCalcSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnWindowPosChanging@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcPaint@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnNcHitTest@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnGetMinMaxInfo@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseWheel@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseHover@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSize@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnChar@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSysCommand@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnCreate@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKeyDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnKillFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnSetFocus@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonDown@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnLButtonUp@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?OnMouseMove@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?HandleMessage@WindowImplBase@DuiLib@@UAEJIIJ@Z
?HandleCustomMessage@WindowImplBase@DuiLib@@UAEJIIJAAH@Z
?GetStyle@WindowImplBase@DuiLib@@UAEJXZ
?messageMap@CNotifyPump@DuiLib@@1UDUI_MSGMAP@2@B
?FindControl@CPaintManagerUI@DuiLib@@QBEPAVCControlUI@2@PB_W@Z
shlwapi
PathFileExistsW
Sections
.text Size: 381KB - Virtual size: 380KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 136KB - Virtual size: 135KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 265KB - Virtual size: 265KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ