dpnsvr.pdb
Static task
static1
Behavioral task
behavioral1
Sample
dpnsvr.exe
Resource
win10v2004-20240226-en
General
-
Target
dpnsvr.exe
-
Size
22KB
-
MD5
2234813062d988c77cf535c4af531232
-
SHA1
4e580381b00567e84171d067830390c43f459633
-
SHA256
b88d315ac12d02b86bed3c483a959000db987e7e6276eea0c4e3ae4a1e1e6cf7
-
SHA512
532f4ef6043bb414ef6f7984094abcf8d0d8eb3ede0948ef61043d01ea05f96ca6d0ce209b66cdf5fd7013435d9ce2635927866666fee1d0dd422a63b219e349
-
SSDEEP
384:NlXOMl6ra2ijSOXwa+COuuY7C834xPrqkZkWvyUPRlwJgN8WrVQWxQL:ya7jSywNCO4793irhZkW7R2qNbrQL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dpnsvr.exe
Files
-
dpnsvr.exe.exe windows:10 windows x86 arch:x86
6382a01869228dcca888ec9346f92e83
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
CreateEventW
GetLastError
SetEvent
CloseHandle
DeleteCriticalSection
CreateFileMappingW
MapViewOfFile
GetTickCount
CreateSemaphoreW
ReleaseSemaphore
OpenEventW
UnmapViewOfFile
InitializeCriticalSectionAndSpinCount
FreeLibrary
GetProcAddress
LoadLibraryW
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
GetModuleHandleW
SetUnhandledExceptionFilter
GetStartupInfoW
Sleep
OpenProcess
CompareStringW
ReleaseMutex
WaitForSingleObject
CreateMutexW
LeaveCriticalSection
EnterCriticalSection
RegisterApplicationRestart
GetProcessHeap
HeapAlloc
HeapSetInformation
lstrlenW
HeapFree
GetVersionExW
msvcrt
memcpy
srand
_except_handler4_common
_controlfp
?terminate@@YAXXZ
_wcmdln
_initterm
__setusermatherr
__p__fmode
_cexit
memset
exit
__set_app_type
__wgetmainargs
_amsg_exit
__p__commode
_XcptFilter
_exit
ole32
CoCreateInstance
CoInitializeEx
StringFromGUID2
CoCreateGuid
CoUninitialize
ntdll
_vsnwprintf
advapi32
CryptReleaseContext
RegOpenKeyExW
RegQueryValueExW
CryptAcquireContextW
RegCloseKey
winmm
timeGetTime
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 940B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ