nidafol.pdb
Static task
static1
Behavioral task
behavioral1
Sample
VirusShare_f6b8209d624b32f118ae977bb1c4dc7c.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
VirusShare_f6b8209d624b32f118ae977bb1c4dc7c.dll
Resource
win10v2004-20231215-en
General
-
Target
VirusShare_f6b8209d624b32f118ae977bb1c4dc7c
-
Size
140KB
-
MD5
f6b8209d624b32f118ae977bb1c4dc7c
-
SHA1
145f3c9c4240418ccf9da119cfd9450afa89e2ab
-
SHA256
cb6a12f88ba3f3ea38765733f2508a06793e210805084768003684f4a9876b7d
-
SHA512
37922e5941355277e42f4c2fff1190c8a5d5d8f4b12cd6c8113bf9c380940ee6673b8baae80ae6e19059cedc4ad25a3bb5fa391faa0dd22f684fc94ea5cca7e3
-
SSDEEP
1536:6Ba3mQbYopD3Jn6AygRFmD1AeHc33GqWkj6ddnv6FU58ijOBxYctvD/iDZNbXWyt:TbY04oI1ActMot6FUXOBHtbaDZZz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource VirusShare_f6b8209d624b32f118ae977bb1c4dc7c
Files
-
VirusShare_f6b8209d624b32f118ae977bb1c4dc7c.dll windows:4 windows x86 arch:x86
391f77d2a755d0d4e2fa829ff5902439
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
user32
CheckRadioButton
CloseWindow
PtInRect
LoadImageA
OffsetRect
CheckDlgButton
OpenIcon
MoveWindow
CascadeWindows
AnimateWindow
DrawIconEx
GetActiveWindow
InsertMenuA
CloseClipboard
OpenClipboard
GetClipboardOwner
ChangeMenuA
SetMenu
GetWindowInfo
advapi32
CryptDestroyHash
CryptGenRandom
Exports
Exports
YCIIQyryo
Sections
.text Size: 19KB - Virtual size: 18KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 384KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.INIT2 Size: 1024B - Virtual size: 908B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.INIT3 Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.INIT Size: 111KB - Virtual size: 110KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 760B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ