G:\Установки\Vega.wtf-main\output\src.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Кликер.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
Кликер.exe
Resource
win10v2004-20240802-en
General
-
Target
Кликер.exe
-
Size
2.1MB
-
MD5
4b71c83a1789494a5e974cc37690d4d9
-
SHA1
dc88e911becf501f913fa0a7603a27ab2507f457
-
SHA256
708b8d45445a5e6e5f3134320753f9e6c07b7cf49513a1bdf1c8eb84335ec6bd
-
SHA512
f8aa17764d1be2f7b41838c076e808b0e4233e1d4dd551155ba6f0b856b4e55ff1a9e4eca4b2bffcf4fd2b9e22374ef9cc32ffafe434f40f2cc313c1bbd5cc68
-
SSDEEP
49152:+/3uNC88NMuLVnEZukTZswkEv9PMnNFvML:Wm5Z1dWQ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Кликер.exe
Files
-
Кликер.exe.exe windows:6 windows x64 arch:x64
b1e8786c1ba25926664f5791305bb030
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
d3d9
Direct3DCreate9
kernel32
MultiByteToWideChar
WideCharToMultiByte
VerSetConditionMask
QueryPerformanceCounter
QueryPerformanceFrequency
GetProcAddress
LoadLibraryA
VerifyVersionInfoW
GetModuleHandleW
GetConsoleWindow
HeapReAlloc
HeapSize
CreateFileW
GetStringTypeW
SetStdHandle
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
GlobalFree
FindClose
SetConsoleCtrlHandler
OutputDebugStringW
GetFileSizeEx
SetFilePointerEx
ReadConsoleW
GetConsoleMode
GetConsoleOutputCP
FlushFileBuffers
GetCurrentThread
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
GetTimeFormatW
GetDateFormatW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetCommandLineW
GlobalLock
GlobalUnlock
GlobalAlloc
SetEndOfFile
FindFirstFileExW
CreateSemaphoreExW
GetCommandLineA
WriteFile
ExitProcess
ReleaseSRWLockExclusive
ReleaseSRWLockShared
AcquireSRWLockExclusive
AcquireSRWLockShared
TryAcquireSRWLockExclusive
TryAcquireSRWLockShared
Sleep
RtlPcToFileHeader
RaiseException
InitOnceBeginInitialize
InitOnceComplete
CloseHandle
WaitForSingleObjectEx
SwitchToThread
GetCurrentThreadId
GetExitCodeThread
GetNativeSystemInfo
WakeConditionVariable
WakeAllConditionVariable
SleepConditionVariableSRW
FormatMessageA
GetLastError
FreeLibraryWhenCallbackReturns
CreateThreadpoolWork
SubmitThreadpoolWork
CloseThreadpoolWork
GetModuleHandleExW
RtlCaptureStackBackTrace
IsProcessorFeaturePresent
SetFileInformationByHandle
GetTempPathW
InitializeCriticalSectionEx
InitOnceExecuteOnce
CreateEventExW
RtlUnwind
FlushProcessWriteBuffers
GetCurrentProcessorNumber
GetSystemTimeAsFileTime
GetTickCount64
CreateThreadpoolTimer
SetThreadpoolTimer
WaitForThreadpoolTimerCallbacks
CloseThreadpoolTimer
CreateThreadpoolWait
SetThreadpoolWait
CloseThreadpoolWait
GetFileInformationByHandleEx
CreateSymbolicLinkW
LocalFree
GetLocaleInfoEx
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
HeapAlloc
HeapFree
GetProcessHeap
VirtualQuery
FreeLibrary
RtlUnwindEx
InterlockedPushEntrySList
InterlockedFlushSList
GetModuleFileNameW
LoadLibraryExW
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
ReadFile
GetStdHandle
GetFileType
WriteConsoleW
CreateThread
ExitThread
ResumeThread
FreeLibraryAndExitThread
user32
OpenClipboard
CloseClipboard
SetClipboardData
UpdateWindow
ShowWindow
DestroyWindow
CreateWindowExW
RegisterClassExW
UnregisterClassW
PostQuitMessage
DefWindowProcW
PeekMessageW
DispatchMessageW
TranslateMessage
GetAsyncKeyState
SendMessageW
SetProcessDPIAware
MonitorFromWindow
LoadCursorW
ScreenToClient
GetClipboardData
GetCursorPos
SetCursor
SetCursorPos
GetClientRect
ReleaseDC
GetDC
GetForegroundWindow
ReleaseCapture
SetCapture
GetCapture
GetKeyState
IsChild
EmptyClipboard
ClientToScreen
gdi32
GetDeviceCaps
imm32
ImmGetContext
ImmReleaseContext
ImmSetCompositionWindow
xinput1_4
ord4
ord2
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 588KB - Virtual size: 588KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 28KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 62KB - Virtual size: 62KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.msvcjmc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ