C:\Work\Development\Plugins\Input\AudioTest\x64\Release\in_audiotest.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fa99e943f15a5146b73ebdee9bcae1424a98548d90296e00b12770a63fb219b8.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
fa99e943f15a5146b73ebdee9bcae1424a98548d90296e00b12770a63fb219b8.dll
Resource
win10v2004-20240226-en
General
-
Target
fa99e943f15a5146b73ebdee9bcae1424a98548d90296e00b12770a63fb219b8
-
Size
396KB
-
MD5
b2d4369a4880ee5e0eb578b75b05cd5a
-
SHA1
0872cbf85055f44f1e383e5c05ccb076069523bc
-
SHA256
fa99e943f15a5146b73ebdee9bcae1424a98548d90296e00b12770a63fb219b8
-
SHA512
994b9b3b87af5a8a0e5af5ed67a7c8b79727926cd44a95eced65b02bfc639b5521f45df4214d3e6c83d83d1473418182e9468bec66bea68c489e5ddf8ec4eeb5
-
SSDEEP
12288:SiHKv/3yzQKRedbJ6Xooszc/CBKCSV1owL:SSKv/3yzQKQdRDzjKCSTp
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fa99e943f15a5146b73ebdee9bcae1424a98548d90296e00b12770a63fb219b8
Files
-
fa99e943f15a5146b73ebdee9bcae1424a98548d90296e00b12770a63fb219b8.dll windows:6 windows x64 arch:x64
8f7b720141b4ee8d9e8effdb80f25beb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetLastError
WriteFile
FlushFileBuffers
GetCurrentProcess
GetStdHandle
TerminateProcess
GetSystemInfo
FindClose
FindNextFileW
RaiseException
LoadLibraryExW
FreeLibrary
GetProcAddress
GetCurrentProcessId
GetCurrentThreadId
CreateFileMappingW
MapViewOfFile
UnmapViewOfFile
GetStringTypeW
QueryPerformanceCounter
QueryPerformanceFrequency
InitializeCriticalSectionEx
EncodePointer
DecodePointer
GetCPInfo
GetSystemTimeAsFileTime
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
InitializeSListHead
RtlUnwindEx
RtlPcToFileHeader
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetFullPathNameW
ExitProcess
GetModuleHandleExW
GetCurrentDirectoryW
HeapFree
HeapAlloc
GetFileType
IsValidCodePage
GetACP
GetOEMCP
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
HeapReAlloc
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
GetFileSizeEx
HeapSize
FindFirstFileExW
GetCommandLineA
GetEnvironmentStringsW
FreeEnvironmentStringsW
GetProcessHeap
SetStdHandle
WriteConsoleW
LoadLibraryExA
VirtualQuery
VirtualProtect
GetModuleFileNameW
CloseHandle
WideCharToMultiByte
GetFileAttributesW
GetLongPathNameW
GetDriveTypeW
MultiByteToWideChar
OutputDebugStringW
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
InitializeCriticalSection
GetModuleHandleW
GetCommandLineW
CreateFileW
user32
MessageBoxW
UnregisterClassW
advapi32
RegEnumKeyW
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
ole32
CoTaskMemFree
oleaut32
SysFreeString
SysAllocString
Exports
Exports
GetInputSource
Sections
.text Size: 268KB - Virtual size: 267KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 104KB - Virtual size: 103KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 7KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 12KB - Virtual size: 12KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 500B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ