inhitereface.pdb
Static task
static1
Behavioral task
behavioral1
Sample
cd68691166bfeef835784f47098bef8d.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
cd68691166bfeef835784f47098bef8d.dll
Resource
win10v2004-20240226-en
General
-
Target
cd68691166bfeef835784f47098bef8d
-
Size
74KB
-
MD5
cd68691166bfeef835784f47098bef8d
-
SHA1
7be51e21206edc94bc50a372c7f6357dd82be489
-
SHA256
5a3d2433389ed901892828704c78e5741b43f279aaaffecff67cde86f6e1f1c5
-
SHA512
bd952b3a4a76b24f19e835bce65dafa4ea519378dcf1fd2a50325d0840b9eab733d29c28765eb143c198c6f1e2706a30cd1bb19f5ee9dbadaf3f9966dacf4b4e
-
SSDEEP
1536:XNMtV8Wb9kZ4G9BwRmU++kBrbPH3xDYRINNH7Rk:2e2W4GcRr++kJbPH3aINNHK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cd68691166bfeef835784f47098bef8d
Files
-
cd68691166bfeef835784f47098bef8d.dll windows:4 windows x86 arch:x86
f3264596ab7c627349ab3cd03cec1d47
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
shlwapi
UrlIsW
UrlCreateFromPathW
UrlCombineW
StrPBrkW
StrRetToBufW
kernel32
HeapAlloc
GetNumberFormatA
InterlockedIncrement
InterlockedDecrement
GetProcessHeap
HeapFree
LoadLibraryW
GetModuleFileNameW
GetModuleHandleW
GetSystemTimeAsFileTime
GetProcAddress
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
DisableThreadLibraryCalls
ole32
CoCreateInstance
CoTaskMemFree
CoUninitialize
CoAllowSetForegroundWindow
CreateBindCtx
CoInitializeEx
user32
ShowWindow
GetAncestor
IsIconic
CreatePopupMenu
GetMenuItemCount
InsertMenuItemA
GetAsyncKeyState
MonitorFromPoint
SetForegroundWindow
DestroyMenu
msvcrt
malloc
free
Exports
Exports
TiChaangeeHandle
TiChangeeDeskktop
TiSetTokennnValue
TiSetTokkenTexxt
Sections
.text Size: 39KB - Virtual size: 38KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ