C:\u\arc\scintilla\bin\SciLexer.pdb
Static task
static1
General
-
Target
SciLexer.dll
-
Size
988KB
-
MD5
66a03d991de4ff53deef5ee623e109a5
-
SHA1
956131edebd64d5f5a209f338e6ee2d498b92115
-
SHA256
de68811a33d29346d302c5b430f55fc7b65d63c30f18df23553f50e1b82aec55
-
SHA512
6761d027b020c721f294ab476a4c2786edecc59373df940e08ab755cb536e2b12d5758a8177c1887fe6914641c3c59112869d27cbc8b018f5000bb9265e7c177
-
SSDEEP
24576:7tdy0r6l95db3kH+PVa5ScfjhU/zT1oGOwea9:pd/r6tdhNvTLJobweK
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource SciLexer.dll
Files
-
SciLexer.dll.dll windows:5 windows x86 arch:x86
110912507f9938745bddf4ef3f94651a
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
FindClose
GetProcessHeap
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetFileType
GetStdHandle
GetACP
GetModuleFileNameA
GetModuleHandleExW
ExitProcess
HeapReAlloc
HeapFree
HeapAlloc
LoadLibraryExW
GetLastError
InterlockedFlushSList
RaiseException
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetModuleHandleW
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
GetLocaleInfoW
CompareStringW
GetCPInfo
DecodePointer
EncodePointer
GetStringTypeW
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetStdHandle
HeapSize
WriteFile
GetConsoleCP
GetConsoleMode
SetFilePointerEx
FlushFileBuffers
CloseHandle
EnterCriticalSection
CreateFileW
GlobalUnlock
GetTickCount
WideCharToMultiByte
LCMapStringW
GlobalLock
GlobalFree
GlobalAlloc
GlobalSize
Sleep
GetLocaleInfoA
MulDiv
QueryPerformanceCounter
FreeLibrary
DeleteCriticalSection
GetProcAddress
QueryPerformanceFrequency
LoadLibraryA
MultiByteToWideChar
GetModuleHandleA
InitializeCriticalSection
LeaveCriticalSection
LoadLibraryExA
RtlUnwind
WriteConsoleW
user32
GetCursorPos
EndPaint
InvalidateRect
ReleaseCapture
RegisterClassExA
GetUpdateRgn
GetKeyState
BeginPaint
HideCaret
SetScrollInfo
ReleaseDC
PostMessageA
ScreenToClient
NotifyWinEvent
GetScrollInfo
MsgWaitForMultipleObjects
RegisterClassExW
SetCaretPos
OpenClipboard
SetTimer
GetDlgCtrlID
CloseClipboard
EmptyClipboard
IsChild
CreateCaret
TrackMouseEvent
GetKeyboardLayout
GetMessageTime
SetFocus
GetClipboardData
DestroyCaret
SetClipboardData
AppendMenuA
IsClipboardFormatAvailable
GetCaretBlinkTime
ShowCaret
KillTimer
PtInRect
RegisterClipboardFormatA
AdjustWindowRectEx
MonitorFromPoint
GetWindowRect
LoadCursorA
DestroyWindow
InflateRect
GetDC
SetWindowPos
MonitorFromRect
FillRect
GetIconInfo
GetSystemMetrics
CreatePopupMenu
DestroyCursor
TrackPopupMenu
ShowWindow
DrawTextA
SetWindowLongA
CreateIconIndirect
ClientToScreen
CallWindowProcA
MapWindowPoints
GetWindowLongA
GetDoubleClickTime
FrameRect
GetMonitorInfoA
GetSysColor
DefWindowProcA
DestroyMenu
CreateWindowExA
SendMessageA
SetCapture
SetCursor
SystemParametersInfoA
GetClientRect
DrawTextW
UnregisterClassA
GetParent
gdi32
LineTo
GetObjectA
ExtTextOutW
RoundRect
SetTextAlign
CreateFontIndirectW
CreateRectRgn
CreateBitmap
CombineRgn
GetNearestColor
BitBlt
CreateCompatibleBitmap
ExtTextOutA
SelectObject
CreateDIBSection
GetTextExtentPoint32A
CreateCompatibleDC
GetTextExtentExPointW
StretchBlt
GetStockObject
GetTextExtentExPointA
GetDeviceCaps
CreatePatternBrush
DeleteDC
GetTextExtentPoint32W
SetTextColor
SetBkMode
CreatePen
Rectangle
GetObjectW
Polygon
MoveToEx
SetBkColor
Ellipse
DeleteObject
CreateSolidBrush
GetTextMetricsA
IntersectClipRect
imm32
ImmSetCompositionStringW
ImmEscapeW
ImmSetCandidateWindow
ImmNotifyIME
ImmSetCompositionWindow
ImmSetCompositionFontW
ImmReleaseContext
ImmGetContext
ImmGetCompositionStringW
ole32
RevokeDragDrop
RegisterDragDrop
OleInitialize
DoDragDrop
OleUninitialize
CLSIDFromProgID
CoCreateInstance
oleaut32
SysAllocString
SysFreeString
msimg32
AlphaBlend
Exports
Exports
Scintilla_DirectFunction
Sections
.text Size: 783KB - Virtual size: 782KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 155KB - Virtual size: 154KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 920B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 32KB - Virtual size: 32KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ