c:\DotNetZip\Zip\obj\Release\Ionic.Zip.pdb
Overview
overview
3Static
static
3BoardViewer.zip
windows10-1703-x64
1BoardViewer.zip
windows10-2004-x64
1BoardViewe...er.exe
windows10-1703-x64
3BoardViewe...er.exe
windows10-2004-x64
1BoardViewe...xe.xml
windows10-1703-x64
1BoardViewe...xe.xml
windows10-2004-x64
1BoardViewe...ip.dll
windows10-1703-x64
1BoardViewe...ip.dll
windows10-2004-x64
1BoardViewe...ES.lng
windows10-1703-x64
3BoardViewe...ES.lng
windows10-2004-x64
3BoardViewe...MX.lng
windows10-1703-x64
3BoardViewe...MX.lng
windows10-2004-x64
3BoardViewe...FR.lng
windows10-1703-x64
3BoardViewe...FR.lng
windows10-2004-x64
3BoardViewe...IT.lng
windows10-1703-x64
3BoardViewe...IT.lng
windows10-2004-x64
3BoardViewe...RU.lng
windows10-1703-x64
3BoardViewe...RU.lng
windows10-2004-x64
3BoardViewe...TR.lng
windows10-1703-x64
3BoardViewe...TR.lng
windows10-2004-x64
3BoardViewe...TW.lng
windows10-1703-x64
3BoardViewe...TW.lng
windows10-2004-x64
3BoardViewe...ew.dll
windows10-1703-x64
1BoardViewe...ew.dll
windows10-2004-x64
1BoardViewe...GI.dll
windows10-1703-x64
1BoardViewe...GI.dll
windows10-2004-x64
1BoardViewe...D1.dll
windows10-1703-x64
1BoardViewe...D1.dll
windows10-2004-x64
1BoardViewe...11.dll
windows10-1703-x64
1BoardViewe...11.dll
windows10-2004-x64
1BoardViewe...DX.dll
windows10-1703-x64
1BoardViewe...DX.dll
windows10-2004-x64
1Static task
static1
Behavioral task
behavioral1
Sample
BoardViewer.zip
Resource
win10-20231220-en
Behavioral task
behavioral2
Sample
BoardViewer.zip
Resource
win10v2004-20231215-en
Behavioral task
behavioral3
Sample
BoardViewer/BoardViewer.exe
Resource
win10-20231215-en
Behavioral task
behavioral4
Sample
BoardViewer/BoardViewer.exe
Resource
win10v2004-20231215-en
Behavioral task
behavioral5
Sample
BoardViewer/BoardViewer.exe.xml
Resource
win10-20231215-en
Behavioral task
behavioral6
Sample
BoardViewer/BoardViewer.exe.xml
Resource
win10v2004-20231215-en
Behavioral task
behavioral7
Sample
BoardViewer/Ionic.Zip.dll
Resource
win10-20231215-en
Behavioral task
behavioral8
Sample
BoardViewer/Ionic.Zip.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral9
Sample
BoardViewer/Lang/es-ES.lng
Resource
win10-20231215-en
Behavioral task
behavioral10
Sample
BoardViewer/Lang/es-ES.lng
Resource
win10v2004-20231215-en
Behavioral task
behavioral11
Sample
BoardViewer/Lang/es-MX.lng
Resource
win10-20231220-en
Behavioral task
behavioral12
Sample
BoardViewer/Lang/es-MX.lng
Resource
win10v2004-20231215-en
Behavioral task
behavioral13
Sample
BoardViewer/Lang/fr-FR.lng
Resource
win10-20231215-en
Behavioral task
behavioral14
Sample
BoardViewer/Lang/fr-FR.lng
Resource
win10v2004-20231222-en
Behavioral task
behavioral15
Sample
BoardViewer/Lang/it-IT.lng
Resource
win10-20231215-en
Behavioral task
behavioral16
Sample
BoardViewer/Lang/it-IT.lng
Resource
win10v2004-20231215-en
Behavioral task
behavioral17
Sample
BoardViewer/Lang/ru-RU.lng
Resource
win10-20231215-en
Behavioral task
behavioral18
Sample
BoardViewer/Lang/ru-RU.lng
Resource
win10v2004-20231215-en
Behavioral task
behavioral19
Sample
BoardViewer/Lang/tr-TR.lng
Resource
win10-20231215-en
Behavioral task
behavioral20
Sample
BoardViewer/Lang/tr-TR.lng
Resource
win10v2004-20231215-en
Behavioral task
behavioral21
Sample
BoardViewer/Lang/zh-TW.lng
Resource
win10-20231215-en
Behavioral task
behavioral22
Sample
BoardViewer/Lang/zh-TW.lng
Resource
win10v2004-20231215-en
Behavioral task
behavioral23
Sample
BoardViewer/ObjectListView.dll
Resource
win10-20231215-en
Behavioral task
behavioral24
Sample
BoardViewer/ObjectListView.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral25
Sample
BoardViewer/SharpDX.DXGI.dll
Resource
win10-20231215-en
Behavioral task
behavioral26
Sample
BoardViewer/SharpDX.DXGI.dll
Resource
win10v2004-20231222-en
Behavioral task
behavioral27
Sample
BoardViewer/SharpDX.Direct2D1.dll
Resource
win10-20231215-en
Behavioral task
behavioral28
Sample
BoardViewer/SharpDX.Direct2D1.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral29
Sample
BoardViewer/SharpDX.Direct3D11.dll
Resource
win10-20231215-en
Behavioral task
behavioral30
Sample
BoardViewer/SharpDX.Direct3D11.dll
Resource
win10v2004-20231215-en
Behavioral task
behavioral31
Sample
BoardViewer/SharpDX.dll
Resource
win10-20231215-en
Behavioral task
behavioral32
Sample
BoardViewer/SharpDX.dll
Resource
win10v2004-20231215-en
General
-
Target
BoardViewer.zip
-
Size
1.4MB
-
MD5
f323bdc4063a7289d32ebb8e7309d7b4
-
SHA1
4da1ec2c1aca39effb2580e45b9d993e956b8df3
-
SHA256
3bf261cc55ecf64bbc8e1868c4c9256be26840e2865a70c4625059d274621e08
-
SHA512
b0666f59c27c1727160ced6d70036af0d5e6ddf0e155cfc807738f33b910cc664bf60836aece5800e00c82d4ef145478d816c38247c9194bce93b1f23f43dc28
-
SSDEEP
24576:k2gJkhhbMewKVzPh9mgt+0MPECXpCiylmd+KNdDPvmyLZDh:k7JkHbMQVzPygu95Bylm4MPOyLZh
Malware Config
Signatures
-
Unsigned PE 7 IoCs
Checks for missing Authenticode signature.
resource unpack001/BoardViewer/BoardViewer.exe unpack001/BoardViewer/Ionic.Zip.dll unpack001/BoardViewer/ObjectListView.dll unpack001/BoardViewer/SharpDX.DXGI.dll unpack001/BoardViewer/SharpDX.Direct2D1.dll unpack001/BoardViewer/SharpDX.Direct3D11.dll unpack001/BoardViewer/SharpDX.dll
Files
-
BoardViewer.zip.zip
-
BoardViewer/BoardViewer.exe.exe windows:4 windows x86 arch:x86
f34d5f2d4577ed6d9ceec516c1f5a744
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
Imports
mscoree
_CorExeMain
Sections
.text Size: 1.4MB - Virtual size: 1.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
BoardViewer/BoardViewer.exe.config.xml
-
BoardViewer/Ionic.Zip.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mscoree
_CorDllMain
Sections
.text Size: 449KB - Virtual size: 448KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
BoardViewer/Lang/es-ES.lng
-
BoardViewer/Lang/es-MX.lng
-
BoardViewer/Lang/fr-FR.lng
-
BoardViewer/Lang/it-IT.lng
-
BoardViewer/Lang/ru-RU.lng
-
BoardViewer/Lang/tr-TR.lng
-
BoardViewer/Lang/zh-TW.lng
-
BoardViewer/ObjectListView.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
c:\jpp\Workspaces\ObjectListView\trunk\ObjectListView\obj\Release\ObjectListView.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 432KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
BoardViewer/SharpDX.DXGI.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
C:\Code\SharpDX\Bin\DirectX11-net20\SharpDX.DXGI.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 85KB - Virtual size: 84KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
BoardViewer/SharpDX.Direct2D1.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
C:\Code\SharpDX\Bin\DirectX11-net20\SharpDX.Direct2D1.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 222KB - Virtual size: 222KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
BoardViewer/SharpDX.Direct3D11.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
C:\Code\SharpDX\Bin\DirectX11-net20\SharpDX.Direct3D11.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 164KB - Virtual size: 163KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
-
BoardViewer/SharpDX.dll.dll windows:4 windows x86 arch:x86
dae02f32a21e03ce65412f6e56942daa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
C:\Code\SharpDX\Bin\DirectX11-net20\SharpDX.pdb
Imports
mscoree
_CorDllMain
Sections
.text Size: 536KB - Virtual size: 535KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 1024B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ