D:\Jenkins\.jenkins\workspace\group_clean\desktop_quick\desktop_quick\Release\desktop_quick_ui.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
f01961809cbb9eedb117eade77367412d2b19e453114a8bd75567a2d287b0d19.exe
Resource
win7-20240903-en
General
-
Target
f01961809cbb9eedb117eade77367412d2b19e453114a8bd75567a2d287b0d19
-
Size
1.6MB
-
MD5
2d7b69ecee41e5aa3be0ea4a34f41538
-
SHA1
6836c91bb84d04173ede09f9fb2bc8690c5dfd03
-
SHA256
f01961809cbb9eedb117eade77367412d2b19e453114a8bd75567a2d287b0d19
-
SHA512
4c864d13b32cabb70514ed1b13ec203b382b3e4882acca64e9e13c573a7bf89ab9d0df51348edf6c7c083debc2ad1f506d60f8425b682484ea927e2b2a20ab7b
-
SSDEEP
24576:upAgq8HmTj6scESQXO2yROr5jDBM/cTKcdG2ueNeN:GAgqTTSbvROrhDBUcTddG2ukC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f01961809cbb9eedb117eade77367412d2b19e453114a8bd75567a2d287b0d19
Files
-
f01961809cbb9eedb117eade77367412d2b19e453114a8bd75567a2d287b0d19.exe windows:6 windows x86 arch:x86
ea92b11ecc74c5753779da72b1599805
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
ReleaseSemaphore
GetExitCodeProcess
GetPrivateProfileStringW
FindCloseChangeNotification
FindFirstChangeNotificationW
UnregisterWaitEx
RegisterWaitForSingleObject
GlobalAddAtomW
GlobalFindAtomW
SetEvent
SetLastError
CreateDirectoryW
GetCommandLineW
IsBadReadPtr
GetModuleHandleW
GetModuleFileNameW
FindResourceExW
VirtualProtect
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
WaitForSingleObject
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
HeapSetInformation
SetErrorMode
SetUnhandledExceptionFilter
CloseHandle
MultiByteToWideChar
GlobalFree
GlobalLock
GlobalUnlock
GlobalAlloc
LoadLibraryW
FindResourceW
SizeofResource
LockResource
LoadResource
LoadLibraryExW
GetProcAddress
FreeLibrary
GlobalMemoryStatusEx
DeleteCriticalSection
InitializeCriticalSectionEx
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
CreateFileA
GetSystemDirectoryW
lstrcmpiA
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
SetStdHandle
RaiseException
DecodePointer
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetTimeZoneInformation
GetFileType
GetConsoleMode
GetConsoleOutputCP
ExitProcess
ExitThread
RtlUnwind
QueryDepthSList
InterlockedFlushSList
FreeLibraryAndExitThread
GetThreadTimes
UnregisterWait
SetThreadAffinityMask
GetProcessAffinityMask
GetNumaHighestNodeNumber
DeleteTimerQueueTimer
ChangeTimerQueueTimer
CreateTimerQueueTimer
GetLogicalProcessorInformation
GetThreadPriority
SignalObjectAndWait
CreateTimerQueue
lstrcmpA
DeviceIoControl
GetSystemWindowsDirectoryW
GetLogicalDrives
GetFileAttributesExW
GetFileAttributesW
GetDriveTypeW
GetDiskFreeSpaceExW
FindNextFileW
FreeResource
CreateSemaphoreW
WaitForMultipleObjectsEx
FindFirstFileW
FindClose
WaitNamedPipeW
CopyFileW
WritePrivateProfileStringW
WideCharToMultiByte
GetStringTypeW
FormatMessageW
EncodePointer
TryEnterCriticalSection
InitializeCriticalSectionAndSpinCount
CreateEventW
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetTickCount
QueryPerformanceCounter
QueryPerformanceFrequency
DuplicateHandle
WaitForSingleObjectEx
Sleep
GetCurrentThread
GetNativeSystemInfo
CompareStringW
LCMapStringW
GetLocaleInfoW
GetCPInfo
InterlockedExchange
InterlockedCompareExchange
LocalFree
TerminateProcess
CreateThread
SetThreadPriority
CreateIoCompletionPort
GetQueuedCompletionStatus
PostQueuedCompletionStatus
ResumeThread
IsDebuggerPresent
ReleaseMutex
GetFileSizeEx
GetStdHandle
WriteFile
ReadFile
FlushFileBuffers
SetEndOfFile
SetFilePointer
SetFilePointerEx
CreateMutexW
GetModuleHandleA
GetModuleHandleExA
GetModuleHandleExW
CreateProcessW
OutputDebugStringA
CreateFileW
DeleteFileW
GetVersionExW
AssignProcessToJobObject
OutputDebugStringW
InitializeSListHead
InterlockedPopEntrySList
InterlockedPushEntrySList
FlushInstructionCache
IsProcessorFeaturePresent
VirtualAlloc
VirtualFree
LoadLibraryExA
UnhandledExceptionFilter
GetStartupInfoW
CreateFileMappingW
OpenFileMappingW
MapViewOfFile
UnmapViewOfFile
InterlockedIncrement
InterlockedDecrement
MapViewOfFileEx
lstrcmpiW
user32
PostMessageW
CallWindowProcW
ShowWindow
DestroyWindow
GetSystemMetrics
DefWindowProcW
SetWindowLongW
MonitorFromWindow
GetIconInfo
PostQuitMessage
IsWindow
CreateWindowExW
GetClassInfoExW
RegisterClassExW
DestroyIcon
FindWindowExW
SendMessageW
UnregisterClassW
OpenClipboard
CloseClipboard
RegisterWindowMessageW
FindWindowW
ReleaseDC
TranslateMessage
DispatchMessageW
PeekMessageW
WaitMessage
CallMsgFilterW
GetQueueStatus
MsgWaitForMultipleObjectsEx
SetTimer
KillTimer
wsprintfW
LoadCursorW
CharNextW
GetDC
EmptyClipboard
GetWindowLongW
SendMessageTimeoutW
SystemParametersInfoW
UnregisterHotKey
RegisterHotKey
SetClipboardData
gdi32
GetDeviceCaps
DeleteObject
GetObjectW
comdlg32
GetOpenFileNameW
shell32
ShellExecuteW
SHCreateDirectoryExW
SHGetFileInfoW
SHGetSpecialFolderPathW
ShellExecuteExW
SHGetFolderPathW
SHAppBarMessage
SHFileOperationW
ole32
CoCreateGuid
CoTaskMemRealloc
CoTaskMemAlloc
CoInitializeEx
CoInitialize
CoTaskMemFree
CoCreateInstance
CoUninitialize
oleaut32
VarUI4FromStr
shlwapi
SHGetValueW
PathAppendW
PathRemoveFileSpecW
SHSetValueA
SHGetValueA
StrCmpIW
StrTrimA
StrCmpNIW
PathIsDirectoryW
PathCombineW
StrStrIA
StrStrIW
PathFileExistsW
comctl32
InitCommonControlsEx
urlmon
URLDownloadToCacheFileW
URLDownloadToFileW
version
VerQueryValueW
GetFileVersionInfoW
GetFileVersionInfoSizeW
gdiplus
GdipDisposeImage
GdipGetImageEncodersSize
GdipBitmapUnlockBits
GdipBitmapLockBits
GdipCreateBitmapFromHICON
GdiplusShutdown
GdiplusStartup
GdipAlloc
GdipCreateBitmapFromHBITMAP
GdipCreateBitmapFromScan0
GdipGetImagePixelFormat
GdipGetImageHeight
GdipGetImageWidth
GdipSaveImageToFile
GdipFree
GdipCloneImage
GdipGetImageEncoders
winmm
timeGetTime
timeBeginPeriod
timeEndPeriod
userenv
CreateEnvironmentBlock
DestroyEnvironmentBlock
crypt32
CertGetNameStringW
wintrust
WTHelperProvDataFromStateData
WinVerifyTrust
wininet
InternetGetConnectedState
iphlpapi
GetAdaptersInfo
advapi32
RegQueryValueExA
RegOpenKeyExA
RegEnumKeyExA
SetSecurityDescriptorDacl
InitializeSecurityDescriptor
RegGetValueW
OpenProcessToken
GetTokenInformation
CreateProcessAsUserW
RegCloseKey
RegCreateKeyExW
RegDeleteKeyW
RegDeleteValueW
RegEnumKeyExW
RegOpenKeyExW
RegQueryInfoKeyW
RegQueryValueExW
RegSetValueExW
Sections
.text Size: 899KB - Virtual size: 898KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 191KB - Virtual size: 190KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 30KB - Virtual size: 43KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 424KB - Virtual size: 424KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 115KB - Virtual size: 116KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE