F:\Apex\VS\New folder\Dll1\x64\Release\Optimizer GK.pdb
Static task
static1
Behavioral task
behavioral1
Sample
OpenGl.dll
Resource
win10v2004-20240419-en
General
-
Target
OpenGl.dll
-
Size
19KB
-
MD5
249400fbedce468f5fd53a5a693c4206
-
SHA1
c9fcb4c335226df2a0d0654be36aa4d5e08a120a
-
SHA256
11aff82043f16c06652fbf87f5be92ef275d8b4774cb31b0eeec6008249d7adb
-
SHA512
f2c16d7655f4453c2db3c4337ed9f3fbdcfb473a6215ff0bf0b2d6c43fddac3943ccf85d404d42e422eceb28ad454d0428a0a47e2c8144877b2d1c9a997ee890
-
SSDEEP
384:s1XejJvuv8R7WXLEA1ZuCp2xLd0ocrX2SF:a8YdoCUxLdQKS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource OpenGl.dll
Files
-
OpenGl.dll.dll windows:6 windows x64 arch:x64
9a48275097e9b51190bcd7ced0239d24
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetLastError
InitializeCriticalSectionEx
DeleteCriticalSection
CreateThread
CreateToolhelp32Snapshot
Process32First
Process32Next
OpenProcess
VirtualQueryEx
ReadProcessMemory
WriteProcessMemory
GetSystemInfo
Beep
Sleep
OutputDebugStringW
RtlCaptureContext
RtlLookupFunctionEntry
InitializeSListHead
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
user32
GetAsyncKeyState
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memcpy
__std_exception_copy
_CxxThrowException
memset
__C_specific_handler
__std_exception_destroy
__std_type_info_destroy_list
memmove
api-ms-win-crt-heap-l1-1-0
_msize
_callnewh
malloc
free
api-ms-win-crt-runtime-l1-1-0
_initterm_e
_register_onexit_function
_seh_filter_dll
_cexit
_crt_atexit
_initialize_onexit_table
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
_initialize_narrow_environment
_initterm
api-ms-win-crt-multibyte-l1-1-0
_mbsicmp
Sections
.text Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 948B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 84B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ