D:\Noise_Main\x64\Release\Noise_Main.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Noise+.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
Noise+.dll
Resource
win10v2004-20240226-en
General
-
Target
Noise+.dll
-
Size
4.7MB
-
MD5
e37061124f536011cb063b833205c5a5
-
SHA1
544bb4d0b589cafa92a3459311a546b978a3fe70
-
SHA256
189b4b78d74426900b3d6cdff08712d82086893fba91561003e07a05453dcb19
-
SHA512
89af5717b29f88dfd3b7b624e7e3ec3f3993dbf3c23c3305e1596bed524d4032501c9ddbc1a7b8600ad1f66a84a210e40273796b67e3f47af33180de08c06d36
-
SSDEEP
98304:Zm2GP+2EhSYt/+dKp22AINMRina3yqZOKIXyHRX9I4CkL4:s2r2M3tAKp2KMya34vXkRmd
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Noise+.dll
Files
-
Noise+.dll.dll windows:6 windows x64 arch:x64
2e8770f40a45d373fb4dae1254a55064
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
opengl32
wglGetCurrentDC
kernel32
GetCurrentDirectoryW
HeapAlloc
HeapFree
ExitProcess
LoadLibraryA
GetModuleHandleA
GetProcAddress
user32
SetWindowLongPtrA
gdi32
SwapBuffers
advapi32
GetUserNameW
shell32
SHGetFolderPathW
ole32
CoTaskMemFree
urlmon
URLDownloadToFileA
imm32
ImmGetContext
Sections
.text Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 269KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.detourc Size: - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.detourd Size: - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
_RDATA Size: - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.NNP Size: - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.]Yt Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.IPP Size: 4.6MB - Virtual size: 4.6MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ