C:\Users\salutary\Downloads\asdadasd\cs2\build\Debug\test.pdb
Static task
static1
General
-
Target
test.dll
-
Size
3.5MB
-
MD5
d7c03e19000d0899380521fbabf5ad67
-
SHA1
a67961992ca7fc427e7a4090d12069184752bda1
-
SHA256
9382a3b311651665859567df1e07654026ec02bb48f46000628e6ef94f1566a9
-
SHA512
09c0a5ad9e6e0a97547c8ad6666fba908e63481508f7cb841754ad1f3e276c28967ac2a4311a8a099665f0fdf079283dbdd7a9635bc21dfb69e1040ac724b071
-
SSDEEP
49152:1yDBIBeYRl3Glhb25WJgsCRMVZn4OLttYzP:1y1Y4DJ1ttYzP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource test.dll
Files
-
test.dll.dll windows:6 windows x64 arch:x64
ece53be04334478be7e0fc0ace5e8400
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetProcAddress
LoadLibraryA
GetSystemInfo
VirtualAlloc
VirtualFree
VirtualQuery
CloseHandle
HeapCreate
HeapDestroy
HeapAlloc
HeapReAlloc
HeapFree
Sleep
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
OpenThread
SuspendThread
ResumeThread
GetThreadContext
SetThreadContext
FlushInstructionCache
VirtualProtect
CreateToolhelp32Snapshot
Thread32First
Thread32Next
CreateDirectoryW
GetLastError
CreateThread
FreeLibraryAndExitThread
CreateFileW
DeleteFileW
FindClose
WideCharToMultiByte
FreeLibrary
GetFileSize
ReadFile
SetEndOfFile
SetFilePointer
WriteFile
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
GetConsoleWindow
SetStdHandle
AllocConsole
FreeConsole
WriteConsoleA
SetConsoleTextAttribute
SetConsoleTitleW
GetProcessHeap
EnterCriticalSection
LeaveCriticalSection
RaiseException
IsDebuggerPresent
SleepConditionVariableSRW
WakeAllConditionVariable
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
MultiByteToWideChar
GlobalFree
InitializeSListHead
QueryPerformanceFrequency
QueryPerformanceCounter
FindNextFileW
GetTickCount
GlobalLock
GlobalUnlock
FindFirstFileW
GlobalAlloc
user32
GetClientRect
CloseClipboard
OpenClipboard
SetCursor
ClientToScreen
SetCursorPos
ScreenToClient
LoadCursorA
CallWindowProcW
GetForegroundWindow
PostMessageW
GetWindow
EnumWindows
SetWindowLongPtrW
IsWindowUnicode
ReleaseCapture
SetClipboardData
GetClipboardData
EmptyClipboard
GetAsyncKeyState
GetDC
GetCursorPos
TrackMouseEvent
GetMessageExtraInfo
GetKeyState
GetCapture
SetCapture
IsWindowVisible
gdi32
GetPixel
shell32
SHGetKnownFolderPath
ole32
CoTaskMemFree
imm32
ImmReleaseContext
ImmSetCompositionWindow
ImmSetCandidateWindow
ImmGetContext
msvcp140d
_Mtx_unlock
_Mtx_lock
?_Throw_Cpp_error@std@@YAXH@Z
?_Xout_of_range@std@@YAXPEBD@Z
??0_Lockit@std@@QEAA@H@Z
??1_Lockit@std@@QEAA@XZ
?_Xlength_error@std@@YAXPEBD@Z
?_Raise_handler@std@@3P6AXAEBVexception@stdext@@@ZEA
_Mtx_init_in_situ
_Mtx_destroy_in_situ
d3dcompiler_47
D3DCompile
vcruntime140d
_purecall
strrchr
longjmp
__C_specific_handler
__C_specific_handler_noexcept
__current_exception
__current_exception_context
__intrinsic_setjmp
__vcrt_GetModuleFileNameW
__vcrt_GetModuleHandleW
__vcrt_LoadLibraryExW
__std_type_info_destroy_list
strstr
memset
memmove
memcpy
memchr
memcmp
vcruntime140_1d
__CxxFrameHandler4
ucrtbased
cosf
fmodf
sinf
_invalid_parameter
_invoke_watson
strcpy_s
__stdio_common_vsprintf
__stdio_common_vsprintf_s
powf
_CrtDbgReport
acosf
ceilf
sqrtf
strncmp
atof
log
pow
atan2f
logf
malloc
_localtime64_s
_time64
remainderf
sin
wcstombs
_fdtest
qsort
floorf
sqrt
fmaf
roundf
strtol
free
realloc
abs
_lrotl
ldexp
fopen_s
feof
ferror
fgetc
ungetc
clock
strcat
getenv
fopen
strcpy
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_cexit
strcat_s
_initterm
_initterm_e
terminate
_wmakepath_s
_wsplitpath_s
wcscpy_s
fwrite
ftell
fseek
fread
fflush
fclose
_wfopen
__acrt_iob_func
_wassert
strncpy
strlen
strcmp
fabs
_hypotf
__stdio_common_vsscanf
Sections
.text Size: 2.2MB - Virtual size: 2.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 577KB - Virtual size: 576KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 704KB - Virtual size: 736KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ