C:\Builddll\Release\truckmaindll.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c498840b97d1c1629601de1b4c51f25c.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c498840b97d1c1629601de1b4c51f25c.dll
Resource
win10v2004-20240226-en
General
-
Target
c498840b97d1c1629601de1b4c51f25c
-
Size
401KB
-
MD5
c498840b97d1c1629601de1b4c51f25c
-
SHA1
c54a01e00943c01d8f8f0de6d33721858738a72b
-
SHA256
60093f72c89334682f2355b3985549402b2146a945bb41d8a45bb3e0327edff7
-
SHA512
7dfa51f8a7f2a0f1ee7e85983eaa5daf0afec3c6df7a58b324c1b0fa0897a3ca78ebdf4ee08e3ae46097a5679dd31829018d8c72f046c9fd5e64ef5a6ed8e42f
-
SSDEEP
6144:SYbxqY1tkUnvIRKYdZEMiXeUJqFfEGTJ210yGCZ0AlBqhmkh3brRLeeuXkHlFWk2:jxqY1tzwRKYdiMiXvqFfX2St6VmASvla
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource c498840b97d1c1629601de1b4c51f25c
Files
-
c498840b97d1c1629601de1b4c51f25c.dll regsvr32 windows:5 windows x86 arch:x86
3da17812d53e4c8ea40facb22cec21c8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
CancelWaitableTimer
SetEvent
SizeofResource
CreateEventA
MulDiv
VirtualAlloc
WaitForSingleObject
CloseHandle
CreateWaitableTimerA
CreateThread
SetStdHandle
WriteConsoleW
SetWaitableTimer
LoadResource
lstrlenA
DeleteTimerQueueEx
FindResourceA
CreateTimerQueueTimer
CreateTimerQueue
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetProcAddress
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeW
GetLocaleInfoW
GetACP
GetOEMCP
IsValidCodePage
WriteFile
GetModuleFileNameW
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
LoadLibraryW
CreateFileW
user32
GetDC
gdi32
SelectObject
CreateCompatibleDC
RealizePalette
SelectPalette
GetObjectA
GetDeviceCaps
Exports
Exports
DllRegisterServer
GetGreed
NtDpi
Sections
.text Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ