e:\project\ime_comp\branch\PinyinDev_R_8_5_Game\Bin\SogouPdb\Component\VoiceInput\VoiceInput.exe.pdb
Static task
static1
Behavioral task
behavioral1
Sample
12c9b77a26e5e62bfd30e1e1edf804eab971b9f9c26a4f4f2551de47a47310fd.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
12c9b77a26e5e62bfd30e1e1edf804eab971b9f9c26a4f4f2551de47a47310fd.exe
Resource
win10v2004-20240802-en
General
-
Target
12c9b77a26e5e62bfd30e1e1edf804eab971b9f9c26a4f4f2551de47a47310fd
-
Size
892KB
-
MD5
f798987361c36857615c7170728025de
-
SHA1
6b2f6e7987e47689c6b24914d51036b15c000324
-
SHA256
12c9b77a26e5e62bfd30e1e1edf804eab971b9f9c26a4f4f2551de47a47310fd
-
SHA512
e506b191315b8abde4ac6057b800e0c2d2647acfc11714e29e844de571b1dceee329f7c4dc632592e6d949ad1eb8cecbe7c67d7ef21a7de959726b6a3082a188
-
SSDEEP
12288:cbisxgmGBYo6QNBhZIL8UB44a/KWq1dq0Tf7JYOgTe3U1R6cggZFthigjig5T:cyB395/PCdq0TjJYrTQMgc9Zhigjig5T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 12c9b77a26e5e62bfd30e1e1edf804eab971b9f9c26a4f4f2551de47a47310fd
Files
-
12c9b77a26e5e62bfd30e1e1edf804eab971b9f9c26a4f4f2551de47a47310fd.exe windows:5 windows x86 arch:x86
71f00c7e293413ef68aecee2430864c7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
ssasr
sogou_speech_asr_close
sogou_speech_create_engine
sogou_speech_cleanup
sogou_speech_release_engine
sogou_speech_init
sogou_speech_notify_network_status
sogou_speech_asr_init
sogou_speech_asr_stop
sogou_speech_do_idle
sogou_speech_process_sound_data
sogou_speech_asr_start
iphlpapi
GetAdaptersInfo
psapi
GetProcessImageFileNameW
kernel32
InterlockedIncrement
GetLastError
GetVersionExW
Sleep
GetModuleHandleW
GlobalDeleteAtom
SwitchToThread
GetCurrentProcessId
GetModuleHandleA
GetTickCount
DeleteCriticalSection
CreateEventW
EnterCriticalSection
InterlockedExchange
LeaveCriticalSection
InitializeCriticalSection
SetEvent
InterlockedCompareExchange
WaitForSingleObject
GlobalUnlock
SetEnvironmentVariableA
CompareStringW
GlobalLock
GetDriveTypeA
GetLocaleInfoA
GetStringTypeW
GetStringTypeA
CreateFileA
WriteConsoleW
GetConsoleOutputCP
WriteConsoleA
GetProcessHeap
SetEndOfFile
SetStdHandle
LCMapStringW
LCMapStringA
GetCurrentDirectoryA
GetFullPathNameW
QueryPerformanceCounter
GetEnvironmentStringsW
FreeEnvironmentStringsW
LoadLibraryA
CloseHandle
IsValidCodePage
GetOEMCP
OpenProcess
GetACP
GetModuleFileNameA
GlobalFree
MultiByteToWideChar
GetModuleFileNameW
WideCharToMultiByte
GlobalAlloc
GlobalAddAtomW
CompareStringA
GetProcAddress
GetCPInfo
GetTimeZoneInformation
HeapSize
GetStartupInfoA
SetHandleCount
SetFilePointer
VirtualQuery
CreateProcessW
SetUnhandledExceptionFilter
GetCurrentProcess
OutputDebugStringW
WriteFile
LoadLibraryW
FormatMessageW
CreateFileW
lstrlenW
GetLocalTime
lstrcatW
IsDebuggerPresent
GetCurrentThreadId
lstrcpyW
FreeLibrary
ExitThread
SetLastError
LocalFree
CreateThread
FileTimeToSystemTime
SetFileAttributesW
OpenEventW
FindFirstFileW
GetSystemDirectoryW
FindClose
GetCommandLineW
GetConsoleMode
GetFileSize
ReadFile
FlushFileBuffers
LocalAlloc
CreateMutexW
OpenMutexW
ReleaseMutex
InitializeCriticalSectionAndSpinCount
InterlockedDecrement
HeapFree
HeapAlloc
GetSystemTimeAsFileTime
GetFileAttributesA
DeleteFileA
ExitProcess
TerminateProcess
UnhandledExceptionFilter
GetStartupInfoW
HeapReAlloc
FileTimeToLocalFileTime
GetDriveTypeW
ResumeThread
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
RtlUnwind
GetFileType
RaiseException
HeapCreate
VirtualFree
VirtualAlloc
GetStdHandle
GetConsoleCP
user32
CloseClipboard
EmptyClipboard
OpenClipboard
SetClipboardData
PtInRect
GetDC
ReleaseDC
GetDesktopWindow
EnumDisplayMonitors
SetTimer
GetWindowRect
MonitorFromPoint
SendInput
PostQuitMessage
SetCapture
KillTimer
GetKeyState
SubtractRect
FindWindowW
GetClassLongW
EnumWindows
TranslateMessage
GetForegroundWindow
LoadIconW
wvsprintfW
GetMessageW
PostThreadMessageW
LoadCursorW
DrawTextW
ClientToScreen
DefWindowProcW
CallWindowProcW
GetPropW
CreateWindowExW
IsWindow
RegisterClassExW
SetPropW
BeginPaint
IsWindowEnabled
TrackMouseEvent
IsIconic
ScreenToClient
SetCursor
DestroyWindow
EndPaint
UpdateLayeredWindow
IntersectRect
SetClassLongW
GetClassNameW
SetWindowPos
GetCursorPos
ShowWindow
ReleaseCapture
GetSystemMetrics
IsWindowVisible
SendMessageW
UnregisterHotKey
DestroyIcon
RegisterHotKey
GetMonitorInfoW
GetWindowThreadProcessId
MoveWindow
DispatchMessageW
PostMessageW
wininet
InternetGetConnectedState
InternetOpenW
InternetOpenUrlW
InternetSetOptionW
InternetCloseHandle
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
winmm
waveInClose
waveInPrepareHeader
waveInOpen
waveInAddBuffer
waveInReset
waveInGetNumDevs
waveInUnprepareHeader
waveInStart
msimg32
AlphaBlend
gdi32
BitBlt
GetFontData
SetTextColor
DeleteDC
CreateCompatibleDC
SelectObject
DeleteObject
CreateFontIndirectW
SetBkMode
CreateDIBSection
advapi32
InitializeSecurityDescriptor
AddAccessAllowedAceEx
RegCloseKey
RegOpenKeyExW
InitializeAcl
ConvertStringSecurityDescriptorToSecurityDescriptorW
SetSecurityInfo
GetSidLengthRequired
GetSecurityDescriptorSacl
SetSecurityDescriptorDacl
RegCreateKeyExW
RegQueryValueExW
shell32
SHGetFolderPathW
ShellExecuteW
Sections
.text Size: 464KB - Virtual size: 464KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 100KB - Virtual size: 99KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 11KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 212KB - Virtual size: 212KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE