c:\Determine-Feed\basic\750\seven-still\column\rock.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d667b1620c679459b264492bfac2703b.dll
Resource
win7-20240221-en
General
-
Target
d667b1620c679459b264492bfac2703b
-
Size
551KB
-
MD5
d667b1620c679459b264492bfac2703b
-
SHA1
2eea0c6336defa9de132815607490035e47ea734
-
SHA256
fb3009e2deadbc2d6760489395bafba79aab3a3cfb41be06181d51bfe864d09b
-
SHA512
bac6f9956237df1a1fd2554e1210365ce1521a0cd89601b0228cebcb94c3ef6e454885079fa5f0e9383a63e378fe86490c935b1e99901c9500081f89549f3d4e
-
SSDEEP
12288:4dsRFeVssCM5gMrj/LMMtBV0P6Fm92E89xE6FWkogdBtXcPZMfvG1EqYDWDt42O/:usRIfhAadeFoQqffC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Processes:
resource d667b1620c679459b264492bfac2703b
Files
-
d667b1620c679459b264492bfac2703b.dll windows:6 windows x86 arch:x86
c6d653a1bc0764a389900bb27cde41e0
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
VirtualAlloc
VirtualFree
VirtualProtect
VirtualProtectEx
OpenProcess
ResetEvent
GetSystemTime
GetModuleFileNameW
GetModuleHandleW
FindResourceW
GetWindowsDirectoryW
CreateDirectoryW
CreateFileW
DeleteFileW
QueryPerformanceCounter
GetVersionExW
GetDateFormatW
SetStdHandle
FlushFileBuffers
SetFilePointerEx
GetConsoleMode
GetConsoleCP
GetStringTypeW
HeapAlloc
HeapQueryInformation
HeapSize
HeapReAlloc
HeapFree
GetCPInfo
GetOEMCP
GetACP
IsValidCodePage
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
EncodePointer
DecodePointer
RaiseException
RtlUnwind
GetCommandLineA
GetCurrentThreadId
GetModuleHandleExW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
SetLastError
InitializeCriticalSectionAndSpinCount
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetProcAddress
GetStdHandle
WriteFile
IsProcessorFeaturePresent
GetLastError
HeapValidate
GetSystemInfo
ExitProcess
MultiByteToWideChar
WideCharToMultiByte
IsDebuggerPresent
GetProcessHeap
GetFileType
GetModuleFileNameA
GetCurrentProcessId
GetSystemTimeAsFileTime
GetEnvironmentStringsW
FreeEnvironmentStringsW
OutputDebugStringW
WaitForSingleObjectEx
CreateThread
LoadLibraryExW
OutputDebugStringA
WriteConsoleW
LCMapStringW
CloseHandle
user32
InvalidateRect
RegisterWindowMessageW
ValidateRect
MapWindowPoints
TranslateMessage
CreateMenu
DestroyMenu
PostMessageW
UnregisterHotKey
GetSystemMetrics
BeginPaint
GetPropW
DeferWindowPos
BeginDeferWindowPos
mswsock
GetAddressByNameW
GetNameByTypeW
comsvcs
SafeRef
Exports
Exports
Iryh
Agareg
Sections
.text Size: 311KB - Virtual size: 310KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 224KB - Virtual size: 223KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 5KB - Virtual size: 615KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ