D:\000Develop\EasyVision\000_exe\Release\EVision.PublicUtil.pdb
Static task
static1
Behavioral task
behavioral1
Sample
711e114e8b72e2c4999a334133d69a019c5766f6dcc02aee4ea8df4bf38b2153.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
711e114e8b72e2c4999a334133d69a019c5766f6dcc02aee4ea8df4bf38b2153.dll
Resource
win10v2004-20231215-en
General
-
Target
711e114e8b72e2c4999a334133d69a019c5766f6dcc02aee4ea8df4bf38b2153
-
Size
1.1MB
-
MD5
0d4de51c03509fe99eae13df14ee0ca8
-
SHA1
f7c7e91afdde6af5cb5b80bca768a96e1d203c7d
-
SHA256
711e114e8b72e2c4999a334133d69a019c5766f6dcc02aee4ea8df4bf38b2153
-
SHA512
d4c97ba07beb491b3f5941d286844d834b8f9fc2dede9f42155449bbc165d358c963bd36e64d5844175dd4b0f16c20604bc7ad99e5d26fcef1b5e2e44bd96932
-
SSDEEP
24576:AQcUvv7WKRl0trFfwZdDBNUFMUjY9Y7uUpv0sI4/qQ2woc:AQDv7WL7wZdDLz7Y7BpJI4//2woc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 711e114e8b72e2c4999a334133d69a019c5766f6dcc02aee4ea8df4bf38b2153
Files
-
711e114e8b72e2c4999a334133d69a019c5766f6dcc02aee4ea8df4bf38b2153.dll windows:6 windows x64 arch:x64
6afe23685a04f308cecf8f8c3da9ad3a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
api-ms-win-crt-string-l1-1-0
strnlen
api-ms-win-crt-heap-l1-1-0
_callnewh
api-ms-win-crt-math-l1-1-0
sin
api-ms-win-crt-runtime-l1-1-0
exit
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memcpy
msvcp140
?_Xout_of_range@std@@YAXPEBD@Z
oleaut32
SysAllocString
gdi32
CreateDIBitmap
kernel32
InitializeSListHead
hklicense
?GetLisenceID4HK@LisenceID4HK@@SA_NPEAH@Z
hvboxlicense
?GetLisenceID4VB@LisenceID4VB@@SA_NPEAHPEAN@Z
opencv_world455
??1Mat@cv@@QEAA@XZ
dbghelp
MiniDumpWriteDump
evision.cc
?ToPointCloud@ccHObjectCaster@@SAPEAVccPointCloud@@PEAVccHObject@@PEA_N@Z
user32
BringWindowToTop
qt5gui
?ascent@QFontMetrics@@QEBAHXZ
qt5widgets
?closeEvent@QWidget@@MEAAXPEAVQCloseEvent@@@Z
d2d1
ord2
freeimage
FreeImage_AllocateT
qt5core
?read@QIODevice@@QEAA_JPEAD_J@Z
Sections
.text Size: - Virtual size: 708KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: - Virtual size: 198KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 1024B - Virtual size: 777B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: - Virtual size: 373B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.vdata Size: - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.text Size: - Virtual size: 1.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 155KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 1.0MB - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 512B - Virtual size: 124B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ