pdb.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c60aa2634ed27cbf99543670d5bc2510.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
c60aa2634ed27cbf99543670d5bc2510.dll
Resource
win10v2004-20240226-en
General
-
Target
c60aa2634ed27cbf99543670d5bc2510
-
Size
84KB
-
MD5
c60aa2634ed27cbf99543670d5bc2510
-
SHA1
7ee8d144912b44a88b7e9814b60cb37df1ffc488
-
SHA256
4c6c4078428580cfbe0fc204327163dfcbdd4cee20f3c0c811c0766f30aa4773
-
SHA512
70fe9c0206de9d3c6a960d30bf70d42496e3d9e51b3a299777c94e38658505fd7ed97b84e5f6c3fe65a26f12029e33e16c1cb0d22e9f4cce44f973cf78c37140
-
SSDEEP
1536:vLa+3t/O5TuNTGm8+h/DioDe5sBjdrUEp73J/GAJ051r0BKvjaNm:2c05u5ZhWoS5s7UW3JeAJY1+Kv6m
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c60aa2634ed27cbf99543670d5bc2510
Files
-
c60aa2634ed27cbf99543670d5bc2510.dll windows:4 windows x86 arch:x86
a944c1b16ac780e3fcf85c29e4fdca96
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
HeapFree
HeapAlloc
GetProcessHeap
LoadResource
LockResource
SizeofResource
CopyFileW
GetSystemWindowsDirectoryW
QueryPerformanceCounter
GetTempFileNameW
CreateFileW
InitializeCriticalSectionAndSpinCount
DebugBreak
HeapSize
HeapReAlloc
HeapDestroy
OpenEventW
FindResourceExW
FindResourceW
SetLastError
GetLastError
SetEvent
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
Sleep
UnregisterWait
GetVersion
GetCurrentThread
CreateFileMappingA
MapViewOfFile
GetSystemInfo
IsBadReadPtr
VirtualAlloc
UnmapViewOfFile
GetModuleFileNameA
lstrlenA
MultiByteToWideChar
lstrlenW
RaiseException
GetVersionExA
GetModuleFileNameW
lstrcmpW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
InterlockedIncrement
DeleteFileW
LocalFree
CreateDirectoryW
CreateThread
WaitForMultipleObjects
GetExitCodeThread
WaitForSingleObject
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
CreateFileA
DeviceIoControl
FreeLibrary
ChangeTimerQueueTimer
DeleteTimerQueueTimer
CreateTimerQueueTimer
DeleteTimerQueueEx
CreateTimerQueue
QueueUserWorkItem
InterlockedCompareExchange
InterlockedExchange
LeaveCriticalSection
EnterCriticalSection
CreateEventW
InterlockedDecrement
GetProfileStringW
Exports
Exports
_DQJYC@0
Sections
.text Size: 32KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 40KB - Virtual size: 36KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 792B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ