d:\AutoView\v11_Integration\OPTITEX\Release\ModRes.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c33f886a157fd6245f414d1fe9325549.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c33f886a157fd6245f414d1fe9325549.dll
Resource
win10v2004-20240226-en
General
-
Target
c33f886a157fd6245f414d1fe9325549
-
Size
1.3MB
-
MD5
c33f886a157fd6245f414d1fe9325549
-
SHA1
61f8044c7143855ea6457d23932bdcc6963ec74a
-
SHA256
52e9c2a3ee3dc100602d0151c44f4c4e9a3a93fbeae3c9531801c6aad3e42595
-
SHA512
5c0cef1d56f7e1e545de84181904a18b96ea8280004c7044e87b04145f578811b2478314d82cd8340b1ae3259618091063f1b099ed12ab3ddcb88bbc4678837c
-
SSDEEP
12288:IMAMYlnc83JN7PiNuXXTRj8nZuWuHaeWhiJHnX3R3W24rWdXbQrlY:IMAMYcyNriNuXFaeai5824uLQrlY
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c33f886a157fd6245f414d1fe9325549
Files
-
c33f886a157fd6245f414d1fe9325549.dll windows:4 windows x86 arch:x86
9221dfea433ffe39beca4564e22ae90d
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mfc80
ord764
ord1175
ord762
ord1098
ord1084
ord1185
ord1187
ord1191
ord371
msvcr80
_adjust_fdiv
_amsg_exit
_initterm_e
_initterm
_decode_pointer
_encoded_null
_malloc_crt
_encode_pointer
__CppXcptFilter
wcslen
__CxxFrameHandler3
_resetstkoflw
_recalloc
calloc
wcscpy_s
free
malloc
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
_onexit
_lock
__dllonexit
_unlock
_except_handler4_common
__clean_type_info_names_internal
kernel32
MultiByteToWideChar
GetThreadLocale
GetLocaleInfoA
GetACP
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
GetStringTypeExW
GetStringTypeExA
GetEnvironmentVariableW
GetEnvironmentVariableA
lstrlenA
lstrcmpiW
lstrcmpiA
CompareStringW
CompareStringA
lstrlenW
GetVersion
GetLastError
WideCharToMultiByte
GetVersionExA
InterlockedExchange
user32
CharUpperA
CharLowerW
CharLowerA
CharUpperW
oleaut32
SysFreeString
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 8KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ