Static task
static1
General
-
Target
pandora_legacy.dll
-
Size
7.2MB
-
MD5
f554df4a63fc30247d068b73bcd3f19d
-
SHA1
71df4b2f5ca49ad89fcc92eb515987e6f71410f4
-
SHA256
b0aad3dfaf817fc7c3b8fec93945fd15d451d6b65c8a5382a7c9584a3b386898
-
SHA512
6fed4105f4d2481d96597b5894c2593e4b6575c6591fddccd38541706630003f160e5ce3cfddbf3a83b5d881ff6fb61dcb1122a14fabb0fceb276b71c726c5dd
-
SSDEEP
98304:CxU9S180+BExWgqEG63vumB/nXHOncmvWBQTxn05fFQYalVjyblXb:CxT/++HlVnKzWaTxWill
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource pandora_legacy.dll
Files
-
pandora_legacy.dll.dll windows x86
Password: 12345
ea8c8da719b933b7444cd8ed157d8f01
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
SetConsoleTitleA
TerminateProcess
Module32Next
Module32First
GetModuleHandleA
CreateToolhelp32Snapshot
Sleep
LoadLibraryA
CreateThread
GetProcAddress
GetCurrentProcessId
AllocConsole
VirtualQuery
VirtualProtect
VirtualFree
VirtualAlloc
HeapCreate
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
HeapReAlloc
CloseHandle
HeapAlloc
GetThreadContext
FlushInstructionCache
SetThreadContext
OpenThread
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
IsProcessorFeaturePresent
msvcp140
?_Xout_of_range@std@@YAXPBD@Z
?id@?$numpunct@D@std@@2V0locale@2@A
?_Init@locale@std@@CAPAV_Locimp@12@_N@Z
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??1facet@locale@std@@MAE@XZ
??0facet@locale@std@@IAE@I@Z
?_Decref@facet@locale@std@@UAEPAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UAEXXZ
??Bid@locale@std@@QAEIXZ
?_Gettrue@_Locinfo@std@@QBEPBDXZ
?_Getfalse@_Locinfo@std@@QBEPBDXZ
?_Getlconv@_Locinfo@std@@QBEPBUlconv@@XZ
?_Getcvt@_Locinfo@std@@QBE?AU_Cvtvec@@XZ
??1_Locinfo@std@@QAE@XZ
??0_Locinfo@std@@QAE@PBD@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exceptions@std@@YAHXZ
??0_Lockit@std@@QAE@H@Z
??1_Lockit@std@@QAE@XZ
?_Xbad_alloc@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
ws2_32
recv
send
connect
vcruntime140
__std_terminate
_CxxThrowException
memset
_except_handler4_common
__std_type_info_destroy_list
memchr
memcpy
__std_exception_copy
__std_exception_destroy
__CxxFrameHandler3
memmove
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vfprintf
__acrt_iob_func
freopen
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
free
calloc
api-ms-win-crt-string-l1-1-0
toupper
api-ms-win-crt-math-l1-1-0
_dclass
_dsign
_fdclass
_ldclass
ceil
_fdsign
_ldsign
api-ms-win-crt-convert-l1-1-0
strtoul
api-ms-win-crt-runtime-l1-1-0
system
_initialize_onexit_table
_initterm_e
_invalid_parameter_noinfo_noreturn
_initterm
_cexit
_crt_atexit
_register_onexit_function
_execute_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
Sections
.text Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 137KB - Virtual size: 136KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7.0MB - Virtual size: 7.0MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ