C:\DLL.pdb
Static task
static1
Behavioral task
behavioral1
Sample
cc3b29be8ae014b5d735871cd316c403.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cc3b29be8ae014b5d735871cd316c403.dll
Resource
win10v2004-20240226-en
General
-
Target
cc3b29be8ae014b5d735871cd316c403
-
Size
16KB
-
MD5
cc3b29be8ae014b5d735871cd316c403
-
SHA1
9f607cf3bacb7a842ffef2230f66e44cdbcb8c7b
-
SHA256
86359584d794f37c3f2442b3062cfc07578a0dec81323368613e03a3964392a7
-
SHA512
1ed90996e6ce86ff564492e8d8f3e5884d99bd357ff11d5ff5607a5717981dbced295ea09d3884fa69bc57d5b4ef4a6ef842b2bbb6e78a69f6cb3f7aef4a9122
-
SSDEEP
192:Dbm+GtNKYnvN6fT/AGSrQluVCc0QhapTiXShV2OSvfe:DqdKSV6fTMrQQV10AapJVvSn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cc3b29be8ae014b5d735871cd316c403
Files
-
cc3b29be8ae014b5d735871cd316c403.dll windows:5 windows x86 arch:x86
7c29b803b09725a52be1828a234e9e62
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
??3@YAXPAX@Z
strrchr
??2@YAPAXI@Z
strlen
memset
shlwapi
SHDeleteKeyA
psapi
GetModuleFileNameExA
kernel32
ExitProcess
CreateFileA
WaitForSingleObject
OpenProcess
Sleep
CreateProcessA
lstrcmpiA
GetProcAddress
CopyFileA
DeviceIoControl
GetModuleFileNameA
GetModuleHandleA
CloseHandle
ResumeThread
DeleteFileA
CreateThread
lstrcpyA
GetFileSize
lstrlenA
ReadFile
WinExec
LoadLibraryA
LoadLibraryExA
FreeLibrary
Process32First
WriteFile
MultiByteToWideChar
Process32Next
CreateToolhelp32Snapshot
user32
SetProcessWindowStation
OpenDesktopA
wsprintfA
OpenWindowStationA
SetThreadDesktop
advapi32
RegCloseKey
OpenSCManagerA
RegOpenKeyExA
StartServiceA
CreateServiceA
RegSetValueExA
CloseServiceHandle
OpenProcessToken
CreateProcessAsUserA
Sections
.text Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 666B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ