CreateGPDebugBridgeWrapper
Static task
static1
Behavioral task
behavioral1
Sample
ae1fdca1220948e779323574022268d856311b02a72b586ec8ef71979bd7fe1e.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
ae1fdca1220948e779323574022268d856311b02a72b586ec8ef71979bd7fe1e.dll
Resource
win10v2004-20231215-en
General
-
Target
ae1fdca1220948e779323574022268d856311b02a72b586ec8ef71979bd7fe1e
-
Size
307KB
-
MD5
77310bac9ab4072a552fbee4e1a02bc4
-
SHA1
faad204ab70c88e8f9c77fe1c3ee11b5cf2b8a86
-
SHA256
ae1fdca1220948e779323574022268d856311b02a72b586ec8ef71979bd7fe1e
-
SHA512
7d50cca0c1f3d5d42244b96fa72ff2d0acead37c0dee8679f0890ae3239f240b9ab8a5a211697741777d1dbb2dbeb2590496a6b8c82c2e907f4820ccd8728e5b
-
SSDEEP
3072:Sf6N0qQu7dOwaKnjEoWte2tXO5jJ8igSSOhZZfJoJZlLmvdlMZJ9rY5iGkz:STGd6+TkO5jJ8itoJvLmvzMZJxvpz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ae1fdca1220948e779323574022268d856311b02a72b586ec8ef71979bd7fe1e
Files
-
ae1fdca1220948e779323574022268d856311b02a72b586ec8ef71979bd7fe1e.dll windows:5 windows x86 arch:x86
ff0dbc30a3fd4969f71b854f76d7e6b7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
Imports
shlwapi
PathRemoveFileSpecA
kernel32
SetLastError
SetEnvironmentVariableA
FreeLibrary
OutputDebugStringA
GetProcAddress
LoadLibraryA
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
CloseHandle
CreateFileA
GetLastError
GetACP
RtlUnwind
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
RaiseException
HeapFree
GetFullPathNameA
HeapAlloc
LCMapStringA
LCMapStringW
GetCPInfo
GetFileType
HeapReAlloc
GetModuleHandleW
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
CompareStringW
ExitProcess
SetHandleCount
GetStdHandle
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
WriteFile
GetOEMCP
IsValidCodePage
VirtualAlloc
GetDriveTypeA
GetModuleHandleA
HeapSize
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetUserDefaultLCID
EnumSystemLocalesA
IsValidLocale
SetFilePointer
ReadFile
GetConsoleCP
GetConsoleMode
FlushFileBuffers
SetStdHandle
SetEndOfFile
GetProcessHeap
InitializeCriticalSectionAndSpinCount
GetLocaleInfoW
GetCurrentDirectoryA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CompareStringA
user32
MessageBoxA
Exports
Exports
Sections
.text Size: 238KB - Virtual size: 238KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 42KB - Virtual size: 41KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 904B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ