?PresentHook@@YAJPEAUIDXGISwapChain@@II@Z
?ResizeHook@@YAJPEAUIDXGISwapChain@@IIIW4DXGI_FORMAT@@I@Z
?WndProcHook@@YA_JPEAUHWND__@@I_K_J@Z
Static task
static1
1 signatures
General
-
Target
test.dll
-
Size
283KB
-
MD5
a79738817153ed010ec51ece36b0b956
-
SHA1
e44a033d098a7b87caec1cebbf6072d1c842c285
-
SHA256
a7fad582c401b8d95a90db4e6b4856f30f4b43bbb5a7090ae9e11d5eab958a1a
-
SHA512
04f4f28a862658082608fe8a2650359cb76859bc669eadbf555a5b441b0f060acf684311a08627d1c76a743dd37b353193c4953f58d6abfed3beaa7ed1a4035f
-
SSDEEP
6144:ZBDc9PneyB0ZXXuZEz3zLzTZSjdzQ6WmUwZjZEEyLAWfgKJEIFUH6nbcMb:ZBDw2yBWXXmUAYsCiH6nbr
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource test.dll
Files
-
test.dll.dll windows:6 windows x64 arch:x64
d3fc7bf614e6c075afeaa556c5949312
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
Imports
kernel32
ResumeThread
MultiByteToWideChar
GetLastError
CloseHandle
VirtualProtect
VirtualFree
GetCurrentProcess
VirtualAlloc
GetCurrentThreadId
SuspendThread
GetCurrentThread
GetThreadContext
FlushInstructionCache
SetThreadContext
VirtualQuery
GetProcAddress
GetModuleHandleW
FreeLibrary
SetLastError
GetModuleHandleA
GetTickCount64
DisableThreadLibraryCalls
LoadLibraryA
GetCurrentProcessId
QueryPerformanceCounter
GetTickCount
GlobalAlloc
GlobalLock
GlobalUnlock
QueryPerformanceFrequency
GetProcessHeap
InitializeSListHead
GetSystemTimeAsFileTime
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
WideCharToMultiByte
RaiseException
IsDebuggerPresent
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
GetSystemInfo
Thread32Next
Thread32First
CreateToolhelp32Snapshot
Sleep
OpenThread
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
HeapCreate
TerminateProcess
IsBadWritePtr
user32
GetClipboardData
CallWindowProcW
EmptyClipboard
MessageBoxW
SetWindowLongPtrW
CloseClipboard
GetAsyncKeyState
GetForegroundWindow
FindWindowW
OpenClipboard
SetCursorPos
ReleaseCapture
GetClientRect
MessageBoxA
SetCursor
GetKeyState
GetCapture
ClientToScreen
SetCapture
SetClipboardData
msvcp140
??Bid@locale@std@@QEAA_KXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Getcat@?$ctype@_W@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z
?_Xlength_error@std@@YAXPEBD@Z
?id@?$ctype@_W@std@@2V0locale@2@A
?narrow@?$ctype@_W@std@@QEBAPEB_WPEB_W0DPEAD@Z
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
winmm
timeGetTime
d3d11
D3D11CreateDeviceAndSwapChain
imm32
ImmGetContext
ImmSetCompositionWindow
vcruntime140
__vcrt_GetModuleFileNameW
__std_type_info_destroy_list
_CxxThrowException
memmove
memcmp
__C_specific_handler
__C_specific_handler_noexcept
__vcrt_LoadLibraryExW
__std_terminate
__current_exception
memset
memcpy
strchr
strstr
__std_exception_copy
__std_exception_destroy
__current_exception_context
vcruntime140_1
__CxxFrameHandler4
api-ms-win-crt-stdio-l1-1-0
__stdio_common_vsprintf
__stdio_common_vsprintf_s
__stdio_common_vsscanf
fread
_wfopen
ftell
__acrt_iob_func
__stdio_common_vfprintf
fseek
fclose
fflush
api-ms-win-crt-heap-l1-1-0
free
malloc
_callnewh
api-ms-win-crt-runtime-l1-1-0
_configure_narrow_argv
_seh_filter_dll
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
_cexit
_crt_atexit
_execute_onexit_table
terminate
api-ms-win-crt-string-l1-1-0
isprint
strncpy
strcpy_s
strcat_s
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-math-l1-1-0
sinf
sqrt
cosf
fmodf
powf
sqrtf
tan
ceil
atan2f
floor
Exports
Exports
Sections
.text Size: 204KB - Virtual size: 204KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 37KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.detourc Size: 26KB - Virtual size: 25KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.detourd Size: 512B - Virtual size: 64B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ