C:\Users\chris\Documents\PalWorld-NetCrack-NuLL\bin\NuLL Internal.pdb
Static task
static1
Behavioral task
behavioral1
Sample
NuLL Internal.dll
Resource
win7-20231215-en
Behavioral task
behavioral2
Sample
NuLL Internal.dll
Resource
win10v2004-20231215-en
General
-
Target
NuLL Internal.dll
-
Size
1.5MB
-
MD5
d6472040b1b3ab5cdea55c908852b3c2
-
SHA1
dcc68e7049427e0413206006341e07a4e6db2e2b
-
SHA256
de00549e61ada2515b9c15957518ac5651d7aa8ca6ab74f4ecda521260289618
-
SHA512
c75178db4598d99af77125b5b60bbfcc94f43beac8323464837d5641e738b6213e2b7603c53b22c4470f72e5f628017a20c1cf87f44aa80d43528af6d27710e5
-
SSDEEP
24576:FcClB96GVhjyUqQ3+eWPdgBUrKQ4caTKWRZF69OuBO1h0lhSMXlJyiJ43G9wNhnQ:ueCgtTi5BOsZSG9wNhnxQl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NuLL Internal.dll
Files
-
NuLL Internal.dll.dll windows:6 windows x64 arch:x64
26684a74fa2326485c4ddc5a892a39fc
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
QueryPerformanceFrequency
QueryPerformanceCounter
LoadLibraryA
GetProcAddress
GetModuleHandleA
VirtualFree
VirtualAlloc
GetSystemInfo
VirtualQuery
HeapCreate
VirtualProtect
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
Sleep
HeapReAlloc
CloseHandle
HeapAlloc
GlobalLock
GetCurrentProcessId
GlobalFree
SetThreadContext
OpenThread
AllocConsole
GetStdHandle
GetConsoleWindow
SetConsoleTitleA
SetConsoleTextAttribute
FreeConsole
Beep
K32GetModuleFileNameExA
MultiByteToWideChar
InitializeSListHead
GetSystemTimeAsFileTime
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
CreateThread
DisableThreadLibraryCalls
GetLocaleInfoA
GlobalAlloc
GlobalUnlock
FlushInstructionCache
WideCharToMultiByte
FreeLibraryAndExitThread
GetThreadContext
GetModuleHandleW
user32
GetClassNameA
GetWindowTextA
GetWindowRect
SetWindowLongPtrW
CallWindowProcW
ShowWindow
UnregisterClassW
DestroyWindow
CreateWindowExW
RegisterClassExW
DefWindowProcW
OpenClipboard
GetCursorPos
SetCursorPos
IsWindowUnicode
ReleaseCapture
SetCapture
GetCapture
TrackMouseEvent
GetMessageExtraInfo
GetClientRect
ClientToScreen
GetForegroundWindow
GetAsyncKeyState
ScreenToClient
GetKeyState
LoadCursorW
SetCursor
GetKeyboardLayout
SetClipboardData
EmptyClipboard
CloseClipboard
GetClipboardData
msvcp140
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?snextc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?_Ipfx@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA_N_N@Z
?id@?$numpunct@D@std@@2V0locale@2@A
?_Getlconv@_Locinfo@std@@QEBAPEBUlconv@@XZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?_Gettrue@_Locinfo@std@@QEBAPEBDXZ
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHXZ
??Bid@locale@std@@QEAA_KXZ
?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?_Getfalse@_Locinfo@std@@QEBAPEBDXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ
?_Xlength_error@std@@YAXPEBD@Z
_Mtx_init_in_situ
_Mtx_destroy_in_situ
_Mtx_lock
?_Throw_Cpp_error@std@@YAXH@Z
_Mtx_unlock
?_Xbad_alloc@std@@YAXXZ
?_Getcvt@_Locinfo@std@@QEBA?AU_Cvtvec@@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Xout_of_range@std@@YAXPEBD@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAXAEBVlocale@2@@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAPEAV12@PEAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAAHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAAXXZ
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Incref@facet@locale@std@@UEAAXXZ
??1_Locinfo@std@@QEAA@XZ
??1_Lockit@std@@QEAA@XZ
??0_Locinfo@std@@QEAA@PEBD@Z
??0_Lockit@std@@QEAA@H@Z
??1facet@locale@std@@MEAA@XZ
??0facet@locale@std@@IEAA@_K@Z
d3d11
D3D11CreateDeviceAndSwapChain
imm32
ImmGetContext
ImmSetCandidateWindow
ImmReleaseContext
ImmSetCompositionWindow
d3dcompiler_47
D3DCompile
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__current_exception_context
_CxxThrowException
memset
__std_type_info_destroy_list
memmove
memcpy
strchr
strstr
__std_exception_destroy
__std_exception_copy
__std_terminate
__C_specific_handler
memcmp
memchr
__current_exception
api-ms-win-crt-runtime-l1-1-0
_crt_atexit
_initterm
_initterm_e
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
_cexit
api-ms-win-crt-stdio-l1-1-0
fseek
_wfopen
__stdio_common_vsprintf
__acrt_iob_func
freopen_s
fread
__stdio_common_vsprintf_s
fwrite
__stdio_common_vswprintf
ftell
__stdio_common_vfprintf
__stdio_common_vsscanf
fflush
fclose
api-ms-win-crt-string-l1-1-0
strncmp
toupper
strcmp
strncpy
tolower
_strdup
strcpy_s
api-ms-win-crt-utility-l1-1-0
qsort
rand
api-ms-win-crt-heap-l1-1-0
_callnewh
calloc
malloc
free
api-ms-win-crt-convert-l1-1-0
strtoul
atof
api-ms-win-crt-math-l1-1-0
atan2f
sqrt
ceilf
sinf
sqrtf
acosf
powf
pow
logf
_fdsign
_dsign
_ldsign
_ldclass
cosf
floor
_fdclass
_dclass
floorf
fmodf
log
Sections
.text Size: 1.1MB - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 366KB - Virtual size: 365KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 25KB - Virtual size: 111KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 26KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ