C:\Users\Kai\Documents\Visual Studio 2015\Projects\BGEResolutionSettings\Release\BGEResolutionSettings.pdb
Static task
static1
General
-
Target
BGEResolutionSettings.exe
-
Size
290KB
-
MD5
63dc767811ab9916040bbff2f86ddc0f
-
SHA1
ab24e7c2813a2cb985e810191134e7edca7e02df
-
SHA256
543498baacd2207b2674d440b556163681d1010155daf23650c19ec9185412ec
-
SHA512
43a86c1ccdcf2b1993e72cf33087727ec6cc8eb5741fc2f885dfc01aaa4f0d38d027a6d29a95551a60ee8081ebb27116a2ed1a8b5e588c6d57c5a1a21895aa9b
-
SSDEEP
3072:yV0E+GErY2fNGuajhdkljseyr8OxmpTz7zj3UkRaRt3xAg0FubAyLS8voC7+:yVBE02fF+h0jse08Ool3+t3xAO/eId
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource BGEResolutionSettings.exe
Files
-
BGEResolutionSettings.exe.exe windows:6 windows x86 arch:x86
69bcbca84d19a867829cf8c159faa334
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
d3d9
Direct3DCreate9
user32
PostQuitMessage
EndDialog
DispatchMessageW
TranslateMessage
IsDialogMessageW
GetMessageW
ShowWindow
DestroyWindow
MessageBoxW
SendMessageW
GetDlgItem
CreateDialogParamW
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
RegSetValueExW
kernel32
GetConsoleMode
GetConsoleCP
HeapSize
SetStdHandle
SetFilePointerEx
FreeEnvironmentStringsW
FlushFileBuffers
WriteConsoleW
CreateFileW
QueryPerformanceCounter
WideCharToMultiByte
MultiByteToWideChar
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
SetLastError
InitializeCriticalSectionAndSpinCount
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
LCMapStringW
GetLocaleInfoW
GetCPInfo
CloseHandle
SetEvent
ResetEvent
WaitForSingleObjectEx
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RaiseException
RtlUnwind
GetLastError
FreeLibrary
LoadLibraryExW
HeapAlloc
HeapReAlloc
HeapFree
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
GetStdHandle
WriteFile
GetACP
GetFileType
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
GetProcessHeap
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
Sections
.text Size: 124KB - Virtual size: 124KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 59KB - Virtual size: 58KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 1024B - Virtual size: 564B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 92KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ