C:\Builddll\Release\truckmaindll.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d3ce594d9d6ae82bd453a97cf1ebca14.dll
Resource
win7-20240221-en
General
-
Target
d3ce594d9d6ae82bd453a97cf1ebca14
-
Size
401KB
-
MD5
d3ce594d9d6ae82bd453a97cf1ebca14
-
SHA1
028eee7a7e295ef36b761a71aa79c164996f8949
-
SHA256
052c60966b82d9936ac24a08e39eaeca3b248eeeb71d6a20cb7496f8f4ab7ca3
-
SHA512
20a84212f68ae2ea363e7b8b115493f66e67d7de13822bffe9dc9e9f398a4a3fd4e44049ac41bb85a8e9a98511c985b4059185f3cd88a62c85e383d1b6e3351e
-
SSDEEP
6144:SYbxqY1tkUnvIRKYdZEMiXeUJqFfEGTJ210yGCZ0AlBqhmkh3brRLeeuXkHlFWk9:jxqY1tzwRKYdiMiXvqFfX2St6VmASvlx
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource d3ce594d9d6ae82bd453a97cf1ebca14
Files
-
d3ce594d9d6ae82bd453a97cf1ebca14.dll regsvr32 windows:5 windows x86 arch:x86
3da17812d53e4c8ea40facb22cec21c8
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
CancelWaitableTimer
SetEvent
SizeofResource
CreateEventA
MulDiv
VirtualAlloc
WaitForSingleObject
CloseHandle
CreateWaitableTimerA
CreateThread
SetStdHandle
WriteConsoleW
SetWaitableTimer
LoadResource
lstrlenA
DeleteTimerQueueEx
FindResourceA
CreateTimerQueueTimer
CreateTimerQueue
WideCharToMultiByte
InterlockedIncrement
InterlockedDecrement
InterlockedExchange
MultiByteToWideChar
EncodePointer
DecodePointer
Sleep
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
GetLastError
HeapFree
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCommandLineA
GetCPInfo
RaiseException
RtlUnwind
HeapAlloc
LCMapStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
TerminateProcess
GetCurrentProcess
IsProcessorFeaturePresent
HeapCreate
HeapDestroy
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetProcAddress
ExitProcess
SetHandleCount
GetStdHandle
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetStringTypeW
GetLocaleInfoW
GetACP
GetOEMCP
IsValidCodePage
WriteFile
GetModuleFileNameW
HeapSize
GetConsoleCP
GetConsoleMode
FlushFileBuffers
ReadFile
SetFilePointer
GetUserDefaultLCID
GetLocaleInfoA
EnumSystemLocalesA
IsValidLocale
HeapReAlloc
LoadLibraryW
CreateFileW
user32
GetDC
gdi32
SelectObject
CreateCompatibleDC
RealizePalette
SelectPalette
GetObjectA
GetDeviceCaps
Exports
Exports
DllRegisterServer
GetGreed
NtDpi
Sections
.text Size: 110KB - Virtual size: 110KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 252KB - Virtual size: 252KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ