D:\James\Documents\Visual Studio 2017\Projects\AutoClicker\Release\AutoClicker.pdb
Static task
static1
1 signatures
General
-
Target
AutoClicker.exe
-
Size
35KB
-
MD5
28a4df84aeff9041f4627277d0715fc6
-
SHA1
626c10b72e0859d7640202dbe12cb8d73ca84d86
-
SHA256
c05cae0c1d02b5dafd0635d8ccc43c8e03643eb5b8e59a3028cf067824aa198f
-
SHA512
cc471c98ac20a1fc6d8f60cd93f070afd9740463a54dab1e933b091afa5cf021e80ba545d70ac77c8ae49df481ddc8d980a1e149f94e6b2dbb94c514a1b4a831
-
SSDEEP
768:yfRsnEDEISRFev4MAUmxus3C31/gUMmetDR:Pmv4MAUc7jt
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AutoClicker.exe
Files
-
AutoClicker.exe.exe windows:6 windows x86 arch:x86
22a1bde51348bdb6b052a2e7247f8b7e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
CloseHandle
Sleep
K32GetModuleFileNameExW
OpenProcess
GetModuleHandleW
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
K32EnumProcesses
user32
MessageBoxW
EnumWindows
GetWindowThreadProcessId
ShowWindow
LoadIconW
SetDlgItemInt
UnregisterHotKey
GetDlgItemInt
IsDlgButtonChecked
GetDlgItemTextW
SendMessageW
SetWindowTextW
GetWindowTextW
GetDlgItem
TrackPopupMenu
CreatePopupMenu
GetCursorPos
DestroyWindow
PostQuitMessage
InsertMenuW
EndDialog
UnhookWindowsHookEx
CreateDialogParamW
DispatchMessageW
TranslateMessage
RegisterHotKey
GetMessageW
IsDialogMessageW
comdlg32
GetOpenFileNameW
shell32
SHGetFolderPathW
SHCreateDirectoryExW
Shell_NotifyIconW
shlwapi
PathAppendW
msvcp140
??0?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
??0?$basic_ios@_WU?$char_traits@_W@std@@@std@@IAE@XZ
??0?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAE@PAV?$basic_streambuf@_WU?$char_traits@_W@std@@@1@_N@Z
?setstate@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?clear@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QAEXH_N@Z
?flush@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV12@XZ
?_Osfx@?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEXXZ
?_Init@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEXXZ
??6?$basic_ostream@_WU?$char_traits@_W@std@@@std@@QAEAAV01@K@Z
?getloc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QBE?AVlocale@2@XZ
??0?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAE@XZ
?widen@?$basic_ios@_WU?$char_traits@_W@std@@@std@@QBE_WD@Z
??1?$basic_ios@_WU?$char_traits@_W@std@@@std@@UAE@XZ
_Thrd_detach
?_Throw_C_error@std@@YAXH@Z
?_Throw_Cpp_error@std@@YAXH@Z
??1?$basic_ostream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
??1?$basic_istream@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?xsputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPB_W_J@Z
?xsgetn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JPA_W_J@Z
?_Xlength_error@std@@YAXPBD@Z
?in@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPA_W3AAPA_W@Z
?_Pninc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@IAEPA_WXZ
?out@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PB_W1AAPB_WPAD3AAPAD@Z
??1?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@UAE@XZ
?uncaught_exception@std@@YA_NXZ
?sputc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEG_W@Z
?_Xout_of_range@std@@YAXPBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
??Bid@locale@std@@QAEIXZ
?always_noconv@codecvt_base@std@@QBE_NXZ
?unshift@?$codecvt@_WDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?_Fiopen@std@@YAPAU_iobuf@@PB_WHH@Z
?id@?$codecvt@_WDU_Mbstatet@@@std@@2V0locale@2@A
?_Getcat@?$codecvt@_WDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?sgetc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sbumpc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
_Cnd_wait
_Thrd_start
_Mtx_unlock
_Mtx_destroy
_Cnd_destroy
_Cnd_signal
_Mtx_lock
_Cnd_do_broadcast_at_thread_exit
_Mtx_init
_Cnd_init
?showmanyc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@MAE_JXZ
?_Ipfx@?$basic_istream@_WU?$char_traits@_W@std@@@std@@QAE_N_N@Z
?snextc@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAEGXZ
?sputn@?$basic_streambuf@_WU?$char_traits@_W@std@@@std@@QAE_JPB_W_J@Z
vcruntime140
_except_handler4_common
memset
_CxxThrowException
__std_exception_copy
__std_terminate
__CxxFrameHandler3
memcpy
__std_exception_destroy
memmove
api-ms-win-crt-runtime-l1-1-0
_initterm
_initialize_wide_environment
exit
_errno
_seh_filter_exe
_initterm_e
_get_wide_winmain_command_line
_c_exit
_register_thread_local_exe_atexit_callback
_set_app_type
_configure_wide_argv
_invalid_parameter_noinfo_noreturn
_cexit
_register_onexit_function
_crt_atexit
terminate
_controlfp_s
_exit
_initialize_onexit_table
_invalid_parameter_noinfo
api-ms-win-crt-convert-l1-1-0
wcstol
api-ms-win-crt-stdio-l1-1-0
__p__commode
_set_fmode
fgetc
fclose
fgetwc
fwrite
ungetc
_fseeki64
fsetpos
setvbuf
fflush
fputwc
ungetwc
fgetpos
api-ms-win-crt-filesystem-l1-1-0
_lock_file
_unlock_file
api-ms-win-crt-string-l1-1-0
wcscpy_s
api-ms-win-crt-heap-l1-1-0
_set_new_mode
_callnewh
malloc
free
api-ms-win-crt-math-l1-1-0
__setusermatherr
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ