D:\ODAJS22.12\CadDraw\Out\X64\Release\GeoSymLib_Res.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b242940a3267caed476e6eb812a038337119549ee8bc148b2f419b1361b0dd70.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
b242940a3267caed476e6eb812a038337119549ee8bc148b2f419b1361b0dd70.dll
Resource
win10v2004-20240412-en
General
-
Target
b242940a3267caed476e6eb812a038337119549ee8bc148b2f419b1361b0dd70
-
Size
12KB
-
MD5
a4812d483974bf13c373b026ad486eba
-
SHA1
9e87e134a8d8769894d6ba2f0e96d3f80639c8cf
-
SHA256
b242940a3267caed476e6eb812a038337119549ee8bc148b2f419b1361b0dd70
-
SHA512
6c10b977b4e8dfcc8ea880498dea8392b2e449da0536f273fd48281fc7dd8b5107b421511a42b1c96d77d9d5a59e6ed1703bbd89bb76940dc14a9fac3426ebdd
-
SSDEEP
192:FN3S3ak4KQPIJUa7jmd83X+M9VJJ2pb/depqE+:FN3+f4KQAJjfe0RVJJlH
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b242940a3267caed476e6eb812a038337119549ee8bc148b2f419b1361b0dd70
Files
-
b242940a3267caed476e6eb812a038337119549ee8bc148b2f419b1361b0dd70.dll windows:5 windows x64 arch:x64
20dba612f643c8625630648d5982acda
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcr100
_onexit
_lock
__dllonexit
_unlock
__clean_type_info_names_internal
__crt_debugger_hook
__CppXcptFilter
__C_specific_handler
_amsg_exit
_encoded_null
free
_initterm_e
_initterm
_malloc_crt
kernel32
DecodePointer
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
Sleep
EncodePointer
Sections
.text Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 36B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ