C:\Users\koko\Desktop\momokbire Ia\imgui factura\imgui factura\examples\example_win32_directx11\Release\PANEL MOMO KBIR.pdb
Static task
static1
Behavioral task
behavioral1
Sample
a48843fab8633a5c0af98782af7932a9f87dae0a800ed71c8c43674eec05b9e3N.exe
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
a48843fab8633a5c0af98782af7932a9f87dae0a800ed71c8c43674eec05b9e3N.exe
Resource
win10v2004-20240910-en
General
-
Target
a48843fab8633a5c0af98782af7932a9f87dae0a800ed71c8c43674eec05b9e3N
-
Size
3.1MB
-
MD5
cdc9da44e6337c31f8f111a9cf0fee20
-
SHA1
0d3162c42ac75a56680a80007f87b7a5bbf1f6e1
-
SHA256
a48843fab8633a5c0af98782af7932a9f87dae0a800ed71c8c43674eec05b9e3
-
SHA512
0935c559531e1a2968ed83a65f50c6e7ea4f2a0565eed3574402eb1117370d95b84370fc14606652bc8b99729026e8e724b8e0011698163ad7e6277585e651ab
-
SSDEEP
49152:J69Ll6ey/ACI284XcCwScn3Tiq+YTbHTiq+YTbliNsLmac:J69Is21Xs+YTR+YTEom
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource a48843fab8633a5c0af98782af7932a9f87dae0a800ed71c8c43674eec05b9e3N
Files
-
a48843fab8633a5c0af98782af7932a9f87dae0a800ed71c8c43674eec05b9e3N.exe windows:6 windows x64 arch:x64
c3a7fc7f910b15b2d8d0e8f68c97b494
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
d3dx11_43
D3DX11CreateShaderResourceViewFromMemory
d3d11
D3D11CreateDeviceAndSwapChain
d3dcompiler_47
D3DCompile
kernel32
VerSetConditionMask
VirtualQueryEx
IsDebuggerPresent
AllocConsole
VirtualFreeEx
CreateRemoteThread
WinExec
GetModuleHandleW
SetLastError
QueryPerformanceFrequency
LoadLibraryA
GetModuleHandleA
GlobalUnlock
WideCharToMultiByte
GlobalLock
GlobalFree
GlobalAlloc
FormatMessageA
GetCurrentProcess
MultiByteToWideChar
ReadProcessMemory
LocalFree
OutputDebugStringW
InitializeSListHead
EnterCriticalSection
GetSystemTimeAsFileTime
GetCurrentProcessId
VirtualAllocEx
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
LeaveCriticalSection
UnhandledExceptionFilter
SleepEx
WakeAllConditionVariable
GetSystemDirectoryA
GetCurrentThreadId
Beep
VirtualProtectEx
CreateThread
GetSystemInfo
CloseHandle
Process32FirstW
Process32Next
DeleteFileW
CreateFileA
Process32NextW
GetLastError
GetTickCount64
Sleep
CreateToolhelp32Snapshot
OpenProcess
ReleaseMutex
GetFileAttributesW
CreateFileW
WaitForSingleObject
CreateMutexA
TerminateProcess
VerifyVersionInfoA
GetTickCount
MoveFileExA
WaitForSingleObjectEx
GetEnvironmentVariableA
GetStdHandle
SleepConditionVariableSRW
GetFileType
ReadFile
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
CreateFileMappingA
UnmapViewOfFile
PeekNamedPipe
MapViewOfFile
WriteFile
HeapAlloc
HeapDestroy
WriteProcessMemory
DeleteCriticalSection
WaitForMultipleObjects
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
GetFileSizeEx
HeapFree
HeapReAlloc
GetProcAddress
Process32First
QueryPerformanceCounter
GetStartupInfoW
FreeLibrary
user32
CreateWindowExW
GetSystemMetrics
UnregisterClassW
RegisterClassExW
ShowWindow
GetAsyncKeyState
SetWindowLongA
GetClipboardData
MessageBoxA
MoveWindow
DefWindowProcA
SetLayeredWindowAttributes
TranslateMessage
DestroyWindow
PeekMessageA
PostQuitMessage
FindWindowA
UpdateWindow
GetKeyState
GetMessageExtraInfo
LoadCursorA
ScreenToClient
GetCapture
ClientToScreen
TrackMouseEvent
GetForegroundWindow
SetCapture
SetCursor
GetClientRect
GetWindowRect
DispatchMessageA
SetClipboardData
LoadIconA
IsWindowUnicode
ReleaseCapture
SetCursorPos
GetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
GetWindowLongA
msvcp140
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?_Xbad_function_call@std@@YAXXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
_Query_perf_frequency
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAVios_base@1@AEAV21@@Z@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAPEADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exception@std@@YA_NXZ
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?good@ios_base@std@@QEBA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@K@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
_Query_perf_counter
imm32
ImmGetContext
ImmReleaseContext
ImmSetCandidateWindow
ImmSetCompositionWindow
dwmapi
DwmExtendFrameIntoClientArea
wininet
InternetCloseHandle
InternetReadFile
InternetOpenUrlW
InternetOpenA
ntdll
RtlAdjustPrivilege
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
NtRaiseHardError
normaliz
IdnToAscii
wldap32
ord143
ord217
ord46
ord211
ord60
ord45
ord50
ord41
ord22
ord27
ord32
ord33
ord35
ord79
ord30
ord200
ord301
ord26
crypt32
CryptQueryObject
CertCreateCertificateChainEngine
PFXImportCertStore
CertGetNameStringA
CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertFreeCertificateContext
CryptStringToBinaryA
CertFreeCertificateChainEngine
CryptDecodeObjectEx
CertAddCertificateContextToStore
CertFindExtension
CertFreeCertificateChain
CertGetCertificateChain
ws2_32
getsockname
getpeername
connect
bind
htons
send
recv
closesocket
getsockopt
ntohs
setsockopt
socket
WSASetLastError
WSAIoctl
WSAStartup
WSACleanup
accept
listen
htonl
ioctlsocket
__WSAFDIsSet
select
getaddrinfo
freeaddrinfo
recvfrom
sendto
gethostname
WSAGetLastError
ntohl
rpcrt4
UuidToStringA
UuidCreate
RpcStringFreeA
psapi
GetModuleInformation
userenv
UnloadUserProfile
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__intrinsic_setjmp
__std_exception_destroy
__std_exception_copy
__std_terminate
strstr
_CxxThrowException
memchr
memcmp
memcpy
memmove
memset
strchr
strrchr
longjmp
__current_exception
__current_exception_context
__C_specific_handler
api-ms-win-crt-stdio-l1-1-0
_wfopen
__stdio_common_vfprintf
_lseeki64
__stdio_common_vsprintf
_set_fmode
fread
fgets
__stdio_common_vsscanf
fseek
feof
__p__commode
fputs
fputc
fclose
_read
fwrite
_write
fflush
__acrt_iob_func
ftell
_open
_close
__stdio_common_vsprintf_s
fopen
api-ms-win-crt-utility-l1-1-0
rand
qsort
api-ms-win-crt-string-l1-1-0
_strdup
strncmp
strcpy_s
isupper
tolower
strpbrk
strncpy
strcmp
strcspn
strspn
api-ms-win-crt-heap-l1-1-0
_msize
malloc
free
calloc
realloc
_callnewh
_set_new_mode
api-ms-win-crt-runtime-l1-1-0
_errno
__sys_nerr
_invalid_parameter_noinfo
_resetstkoflw
strerror
abort
exit
_invalid_parameter_noinfo_noreturn
_initialize_narrow_environment
_wassert
_register_thread_local_exe_atexit_callback
_c_exit
_beginthreadex
_exit
_initterm_e
_initterm
_get_narrow_winmain_command_line
_set_app_type
_seh_filter_exe
_cexit
_crt_atexit
_register_onexit_function
_initialize_onexit_table
system
_configure_narrow_argv
terminate
_getpid
api-ms-win-crt-convert-l1-1-0
strtoul
atoi
strtod
strtol
strtoll
strtoull
api-ms-win-crt-multibyte-l1-1-0
_mbsicmp
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
localeconv
api-ms-win-crt-math-l1-1-0
powf
sinf
fmodf
cosf
ceilf
acosf
__setusermatherr
_dclass
sqrtf
api-ms-win-crt-time-l1-1-0
_time64
_gmtime64
api-ms-win-crt-filesystem-l1-1-0
_unlink
_stat64
_fstat64
_access
advapi32
CryptGenRandom
CryptEncrypt
CryptImportKey
CryptDestroyKey
CryptDestroyHash
OpenProcessToken
CopySid
GetLengthSid
GetTokenInformation
IsValidSid
ConvertSidToStringSidA
CryptAcquireContextA
CryptReleaseContext
CryptGetHashParam
CryptHashData
CryptCreateHash
Sections
.text Size: 1.2MB - Virtual size: 1.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 329KB - Virtual size: 329KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 53KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 488B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ