C:\Documents and Settings\cjg\My Documents\Visual Studio 2008\Projects\TR-PBD3D\Release\TR-PBD3D.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8fb4488756fcc980f45ed66ad2071993.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
8fb4488756fcc980f45ed66ad2071993.dll
Resource
win10v2004-20231215-en
General
-
Target
8fb4488756fcc980f45ed66ad2071993
-
Size
476KB
-
MD5
8fb4488756fcc980f45ed66ad2071993
-
SHA1
0b31a68056e6b43a2c5e4a5d720ace43813fe51c
-
SHA256
6af74b9334a01898ae212b1da0a8550ccd7bf326cd439a7130fca5d3328d8307
-
SHA512
b831df2fba58204e9ef0c7b4f2bf9627b635ebc10899ee5536104596b8a4674e8a038ad74c8a7d751a378d5e118691dbd4ac2d76bc0cba0d7c25fd60ff912e56
-
SSDEEP
12288:Lb/q6rdUYBvTP4dCFVIsZgZMyzR2ZBROAqql6oG0:trHvTP4kFVByzY0AM/0
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8fb4488756fcc980f45ed66ad2071993
Files
-
8fb4488756fcc980f45ed66ad2071993.dll windows:5 windows x86 arch:x86
38ad1740f5f39075837f56a0b2a9e1bc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetPrivateProfileIntA
GetTimeFormatA
VirtualProtectEx
GetSystemInfo
GetVolumeInformationA
GetComputerNameA
GetProcAddress
IsBadReadPtr
GetCurrentProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
TerminateProcess
WritePrivateProfileStringA
InterlockedCompareExchange
InterlockedExchange
OutputDebugStringA
LoadLibraryA
WideCharToMultiByte
MultiByteToWideChar
IsProcessorFeaturePresent
CreateThread
GetModuleFileNameA
VirtualProtect
GetModuleHandleA
GetVersionExA
Sleep
user32
GetAsyncKeyState
wsprintfA
GetCursorPos
advapi32
CryptGetHashParam
CryptCreateHash
CryptHashData
RegCloseKey
RegQueryValueExA
RegOpenKeyA
CryptAcquireContextA
msvcp90
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHPBDH@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?close@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?open@?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXPBDHH@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
??Bios_base@std@@QBEPAXXZ
??0?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAE@XZ
?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??_D?$basic_ofstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??$?6DU?$char_traits@D@std@@V?$allocator@D@1@@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@0@AAV10@ABV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
??$getline@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@YAAAV?$basic_istream@DU?$char_traits@D@std@@@0@AAV10@AAV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@@Z
?swap@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEXAAV12@@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@ABV01@@Z
?close@?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
??0?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAE@PBDHH@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??_D?$basic_ifstream@DU?$char_traits@D@std@@@std@@QAEXXZ
?eof@ios_base@std@@QBE_NXZ
??$?HDU?$char_traits@D@std@@V?$allocator@D@1@@std@@YA?AV?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@0@ABV10@0@Z
??4?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAEAAV01@PBD@Z
wininet
InternetReadFile
InternetOpenA
InternetCloseHandle
InternetOpenUrlA
msvcr90
_unlock
__dllonexit
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
rand
strtol
free
_vsnprintf
sprintf
iswspace
iswalpha
iswdigit
iswpunct
__CxxFrameHandler
strncpy
_ftol
_finite
_CIacos
clock
??2@YAPAXI@Z
_time64
??3@YAXPAX@Z
srand
??_V@YAXPAX@Z
_invalid_parameter_noinfo
??0exception@std@@QAE@ABV01@@Z
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@XZ
??1exception@std@@UAE@XZ
_encode_pointer
?what@exception@std@@UBEPBDXZ
__CxxFrameHandler3
memset
_CIsqrt
_CIatan2
_CxxThrowException
iphlpapi
GetAdaptersInfo
gdi32
GetTextMetricsA
GetGlyphOutlineA
CreateDIBSection
DeleteDC
DeleteObject
GetObjectW
GetCharacterPlacementA
GetCharacterPlacementW
SetTextColor
SetBkColor
SetBkMode
GetTextMetricsW
GetFontLanguageInfo
CreateFontIndirectA
CreateFontIndirectW
GetObjectA
ExtTextOutW
SelectObject
MoveToEx
ExtTextOutA
CreateCompatibleDC
SetMapMode
SetTextAlign
Sections
.text Size: 136KB - Virtual size: 136KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 71KB - Virtual size: 70KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 42KB - Virtual size: 124KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 688B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.v-lizer Size: 99KB - Virtual size: 98KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 125KB - Virtual size: 128KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE