E:\VSsource\repos\TMCompLayer\Release\TMCompPatch.pdb
Static task
static1
Behavioral task
behavioral1
Sample
98a58df8875af59761d1d131c00d06cf.dll
Resource
win7-20231129-en
Behavioral task
behavioral2
Sample
98a58df8875af59761d1d131c00d06cf.dll
Resource
win10v2004-20231215-en
General
-
Target
98a58df8875af59761d1d131c00d06cf
-
Size
1.9MB
-
MD5
98a58df8875af59761d1d131c00d06cf
-
SHA1
4077259d209feb95bc193ae2223f7e7bc2d8f1c4
-
SHA256
1e3564d9d6d61d0e784a6dcc5fceaf4e67d34c28ba585ad57e5399cd1299a45d
-
SHA512
767c72dc16ee6576bd189103c355b84f16e5d68f66b989209c81bdf0fa79047cda68d35b93d8798795ec7c0430adcce2c2b951256a148bc5db88d2bdea17550f
-
SSDEEP
24576:yh+KpPi0PmIzkQqO3cv1iVLHEo0dQymYoXBo+QoaZgcNr+R1M1Opz/tk3h6VjQt6:8a4eghHnaB+5MS5/tk3h6VctPAJv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 98a58df8875af59761d1d131c00d06cf
Files
-
98a58df8875af59761d1d131c00d06cf.dll windows:6 windows x86 arch:x86
dc2f7eccde70bb80b7b2a32d93177610
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
hid
HidP_GetUsages
HidP_GetValueCaps
HidP_GetButtonCaps
HidP_GetScaledUsageValue
HidP_GetUsageValue
HidP_GetCaps
kernel32
GetCurrentThreadId
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualAlloc
VirtualFree
SetLastError
GetStdHandle
GetEnvironmentVariableW
GetFileType
WriteFile
MultiByteToWideChar
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
QueryPerformanceCounter
GetSystemTimeAsFileTime
DeleteFiber
WideCharToMultiByte
ConvertFiberToThread
FreeLibrary
LoadLibraryA
LoadLibraryW
FindClose
FindFirstFileW
TerminateProcess
GetConsoleMode
SetConsoleMode
ReadConsoleA
ReadConsoleW
GetSystemTime
SystemTimeToFileTime
WriteConsoleW
HeapSize
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
GetModuleFileNameW
GetModuleHandleExW
VirtualProtect
GetCurrentProcessId
CloseHandle
VirtualQuery
GetCurrentProcess
K32GetModuleInformation
GetCurrentThread
GetModuleHandleW
IsValidCodePage
FindFirstFileExW
GetProcAddress
GetModuleHandleA
DisableThreadLibraryCalls
LocalFree
FormatMessageW
GetLastError
InterlockedCompareExchange
GetTimeZoneInformation
GetFullPathNameW
GetCurrentDirectoryW
SetStdHandle
GetFileSizeEx
SetFilePointerEx
GetConsoleOutputCP
SetEndOfFile
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
HeapReAlloc
HeapAlloc
HeapFree
FileTimeToSystemTime
SystemTimeToTzSpecificLocalTime
FindNextFileW
PeekNamedPipe
InitializeCriticalSectionEx
EncodePointer
DecodePointer
LCMapStringEx
GetStringTypeW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
IsDebuggerPresent
GetStartupInfoW
InitializeSListHead
RtlUnwind
RaiseException
InterlockedFlushSList
LoadLibraryExW
ExitProcess
SetConsoleCtrlHandler
ReadFile
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
user32
RegisterRawInputDevices
CallWindowProcW
GetAsyncKeyState
MessageBoxW
GetProcessWindowStation
GetUserObjectInformationW
SetWindowTextA
GetWindowTextA
SetWindowLongW
advapi32
CryptEnumProvidersW
RegisterEventSourceW
ReportEventW
CryptAcquireContextW
CryptReleaseContext
CryptDestroyKey
CryptSetHashParam
CryptGetProvParam
CryptGetUserKey
CryptExportKey
CryptDecrypt
CryptCreateHash
CryptDestroyHash
CryptSignHashW
DeregisterEventSource
bcrypt
BCryptGenRandom
crypt32
CertOpenStore
CertCloseStore
CertEnumCertificatesInStore
CertFindCertificateInStore
CertDuplicateCertificateContext
CertFreeCertificateContext
CertGetCertificateContextProperty
ws2_32
send
recv
WSACleanup
closesocket
WSASetLastError
WSAGetLastError
Sections
.text Size: 1.5MB - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 455KB - Virtual size: 454KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 18KB - Virtual size: 34KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ