C:\Builddll\Release\truckmaindll.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b58519e0befd07168c8b4f9105572ede.dll
Resource
win7-20240220-en
General
-
Target
b58519e0befd07168c8b4f9105572ede
-
Size
401KB
-
MD5
b58519e0befd07168c8b4f9105572ede
-
SHA1
76c3d56ae27cd4e446ea200d6909e0baf9f3deaa
-
SHA256
71ae1e824882047d32a2698a3772fdc80e581c1ab0212c3b41a43a08a19228aa
-
SHA512
7109707ddc3af4b49d35a367c1479ccee6adf9e539d15fbba6af317b145f34b641f59c8c1d6631225fd882b9c277bfba2f78353aa3791d0623de7a65576167b3
-
SSDEEP
6144:SYbxqY1tkUnvIRKYdZEMiXeUJqFfEGTJ210yGCZ0AlBqhmkh3brRLeeuXkHlFWkc:jxqY1tzwRKYdiMiXvqFfX2St6VmASvlA
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource b58519e0befd07168c8b4f9105572ede
Files
-
b58519e0befd07168c8b4f9105572ede.dll regsvr32 windows:5 windows x86 arch:x86
3da17812d53e4c8ea40facb22cec21c8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
CancelWaitableTimer
SetEvent
SizeofResource
CreateEventA
MulDiv
VirtualAlloc
WaitForSingleObject
CloseHandle
CreateWaitableTimerA
CreateThread
SetStdHandle
WriteConsoleW
SetWaitableTimer
LoadResource
lstrlenA
DeleteTimerQueueEx
FindResourceA
CreateTimerQueueTimer
CreateTimerQueue
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetProcAddress
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeW
GetLocaleInfoW
GetACP
GetOEMCP
IsValidCodePage
WriteFile
GetModuleFileNameW
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
LoadLibraryW
CreateFileW
user32
GetDC
gdi32
SelectObject
CreateCompatibleDC
RealizePalette
SelectPalette
GetObjectA
GetDeviceCaps
Exports
Exports
DllRegisterServer
GetGreed
NtDpi
Sections
.text Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ