H:\baidu\netdisk\pc-common\output\libcef\Release\BaiduNetdiskRender.pdb
Static task
static1
Behavioral task
behavioral1
Sample
37f8cb806e553180170a8cdd1f1982b5779ebf525b6a1237a73aa22a974d160f.exe
Resource
win7-20241010-en
General
-
Target
37f8cb806e553180170a8cdd1f1982b5779ebf525b6a1237a73aa22a974d160f
-
Size
603KB
-
MD5
2d6b3806572af2ea63053eb8ccab88e8
-
SHA1
52ef9ec68eb429ed7e0e991c946bb2ef5e12fdad
-
SHA256
37f8cb806e553180170a8cdd1f1982b5779ebf525b6a1237a73aa22a974d160f
-
SHA512
45024ffdf1d10148e86a07a75323c9a642633dc6aba7c2954783feb191a4d7fd59f8b541b19dca68bda631be25cb32aa2db593b26de65f2bc9b342d522ea29c2
-
SSDEEP
12288:AYTCRVPYaMU6xq5DICdSwXeVJ1BfJJsxdyhnvOZ0kkX27VKzZ:AtwUXUCdSwyJvfJJsxdKvzzWKzZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 37f8cb806e553180170a8cdd1f1982b5779ebf525b6a1237a73aa22a974d160f
Files
-
37f8cb806e553180170a8cdd1f1982b5779ebf525b6a1237a73aa22a974d160f.exe windows:5 windows x86 arch:x86
89bec96a039cae9468d60c0c63982d30
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
SetEnvironmentVariableW
GetCommandLineW
HeapDestroy
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
GetProcessHeap
GetProcAddress
FreeLibrary
GetModuleFileNameW
FindFirstFileW
FindNextFileW
DeleteFileW
FindClose
SizeofResource
LockResource
LoadResource
FindResourceW
FindResourceExW
GetLastError
InitializeCriticalSectionAndSpinCount
RaiseException
CloseHandle
SetLastError
VirtualProtect
VirtualQuery
GetModuleHandleW
LoadLibraryExA
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
EnterCriticalSection
LeaveCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
OutputDebugStringW
DeleteCriticalSection
CreateFileW
GetSystemInfo
msvcp140
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
?_Xbad_alloc@std@@YAXXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?uncaught_exception@std@@YA_NXZ
?_BADOFF@std@@3_JB
?setw@std@@YA?AU?$_Smanip@_J@1@_J@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
crypt32
CertGetNameStringW
wintrust
WinVerifyTrust
WTHelperGetProvCertFromChain
WTHelperProvDataFromStateData
WTHelperGetProvSignerFromChain
vcruntime140
_except_handler4_common
_CxxThrowException
__vcrt_InitializeCriticalSectionEx
memset
memcpy
__CxxFrameHandler3
wcsrchr
_purecall
__std_terminate
__std_exception_copy
memmove
__std_exception_destroy
memchr
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vswprintf
_set_fmode
__p__commode
__stdio_common_vsprintf_s
__stdio_common_vswprintf_s
api-ms-win-crt-runtime-l1-1-0
_c_exit
_register_thread_local_exe_atexit_callback
_invalid_parameter_noinfo_noreturn
_exit
_crt_atexit
_controlfp_s
exit
_initterm_e
_invalid_parameter_noinfo
_initterm
_get_wide_winmain_command_line
_initialize_wide_environment
_configure_wide_argv
_register_onexit_function
_initialize_onexit_table
terminate
_set_app_type
_errno
_cexit
_seh_filter_exe
api-ms-win-crt-heap-l1-1-0
free
_set_new_mode
_callnewh
malloc
api-ms-win-crt-string-l1-1-0
isdigit
_wcsicmp
wmemcpy_s
strpbrk
api-ms-win-crt-convert-l1-1-0
_wtoi64
api-ms-win-crt-filesystem-l1-1-0
_waccess
api-ms-win-crt-math-l1-1-0
__setusermatherr
_except1
api-ms-win-crt-locale-l1-1-0
_configthreadlocale
Sections
.text Size: 277KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 47KB - Virtual size: 47KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 84B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 164KB - Virtual size: 164KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 90KB - Virtual size: 92KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE