C:\Builddll\Release\truckmaindll.pdb
Static task
static1
Behavioral task
behavioral1
Sample
7ec3ecf50f1e2245ca5399b9f7079ca1.dll
Resource
win7-20231215-en
General
-
Target
7ec3ecf50f1e2245ca5399b9f7079ca1
-
Size
401KB
-
MD5
7ec3ecf50f1e2245ca5399b9f7079ca1
-
SHA1
8182d419b1952a2f6ddf8afe06ac14d524e57833
-
SHA256
ce49afb964a4e5edfe84c31533dcfed67175226b0e3a0114a03279881a50608b
-
SHA512
47c35e6d41ff905dd356aaf014383ad0d1ed158575b1cb9266d9ffdd2300a1ec57646cbcc0370e8a6f396f2cedde60258fcee2629ade3e2242b6b1a0893bac46
-
SSDEEP
6144:SYbxqY1tkUnvIRKYdZEMiXeUJqFfEGTJ210yGCZ0AlBqhmkh3brRLeeuXkHlFWkI:jxqY1tzwRKYdiMiXvqFfX2St6VmASvlc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 7ec3ecf50f1e2245ca5399b9f7079ca1
Files
-
7ec3ecf50f1e2245ca5399b9f7079ca1.dll regsvr32 windows:5 windows x86 arch:x86
3da17812d53e4c8ea40facb22cec21c8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
CancelWaitableTimer
SetEvent
SizeofResource
CreateEventA
MulDiv
VirtualAlloc
WaitForSingleObject
CloseHandle
CreateWaitableTimerA
CreateThread
SetStdHandle
WriteConsoleW
SetWaitableTimer
LoadResource
lstrlenA
DeleteTimerQueueEx
FindResourceA
CreateTimerQueueTimer
CreateTimerQueue
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetProcAddress
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeW
GetLocaleInfoW
GetACP
GetOEMCP
IsValidCodePage
WriteFile
GetModuleFileNameW
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
LoadLibraryW
CreateFileW
user32
GetDC
gdi32
SelectObject
CreateCompatibleDC
RealizePalette
SelectPalette
GetObjectA
GetDeviceCaps
Exports
Exports
DllRegisterServer
GetGreed
NtDpi
Sections
.text Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ