C:\Users\Руслан\Desktop\NorAdrenaline-master\Release\NorAdrenaline.pdb
Static task
static1
Behavioral task
behavioral1
Sample
1.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
1.dll
Resource
win10v2004-20240419-en
General
-
Target
1.dll
-
Size
427KB
-
MD5
4ba323070cb2b7a33711ab454048ff13
-
SHA1
e16dc18f7e90fff24bc49d02cb974e2c382149bc
-
SHA256
7a3874a22c65582d40532584c0d66044faf0185e2fcbc8da7fdf670acf4e5a20
-
SHA512
5436ad61e7285b7254af72611f3aaa86cda1cc8fa22675065f098ff803c740c08c8135a52fba65a5db3ba72ce60c3d775ea7c2e6bb061d8345bb96e4a80bba7b
-
SSDEEP
3072:J0EYejUm1dfF9drHgQfKvP96x5TOAftiS/d3SibRYRW12FUYzx6YfQLDzd:yEvUmfF/rHFzvnZYgYYLDz
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 1.dll
Files
-
1.dll.dll windows:6 windows x86 arch:x86
a9ab4f87347b217278e42ee083bebbcd
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
lstrcmpA
GetTickCount
MultiByteToWideChar
Sleep
VirtualProtect
WritePrivateProfileStringA
GetPrivateProfileStringA
GetLastError
IsBadCodePtr
HeapAlloc
GetProcessHeap
GetModuleFileNameA
DisableThreadLibraryCalls
lstrcpyA
CreateThread
IsBadReadPtr
GetCurrentProcess
TerminateProcess
GetModuleHandleA
FlushInstructionCache
GetProcAddress
CloseHandle
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
SetLastError
user32
SendInput
mouse_event
GetAsyncKeyState
MapVirtualKeyA
GetKeyNameTextA
FindWindowA
CallWindowProcA
SetWindowLongA
MessageBoxA
shell32
SHGetFolderPathA
msvcp140
?sbumpc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
?sgetc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QBE?AVlocale@2@XZ
?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXXZ
?unshift@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PAD1AAPAD@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Fiopen@std@@YAPAU_iobuf@@PBDHH@Z
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?in@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
?out@?$codecvt@DDU_Mbstatet@@@std@@QBEHAAU_Mbstatet@@PBD1AAPBDPAD3AAPAD@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
?always_noconv@codecvt_base@std@@QBE_NXZ
??Bid@locale@std@@QAEIXZ
?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SAIPAPBVfacet@locale@2@PBV42@@Z
?_Xlength_error@std@@YAXPBD@Z
?_Execute_once@std@@YAHAAUonce_flag@1@P6GHPAX1PAPAX@Z1@Z
?_Winerror_message@std@@YAKKPADK@Z
?_Winerror_map@std@@YAHH@Z
?_Syserror_map@std@@YAPBDH@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
?_Getgloballocale@locale@std@@CAPAV_Locimp@12@XZ
?_Xout_of_range@std@@YAXPBD@Z
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A
opengl32
glTexEnvi
glGetFloatv
glOrtho
glDepthFunc
glClearColor
glMatrixMode
glBindTexture
glEnable
glDisable
glPopMatrix
glEnd
glBlendFunc
glLoadIdentity
glBegin
glVertex2i
glPushMatrix
glColor4ub
vcruntime140
memchr
__CxxFrameHandler3
_CxxThrowException
__std_terminate
strstr
__std_exception_destroy
__std_exception_copy
memset
memcpy
memmove
__std_type_info_destroy_list
_except_handler4_common
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_register_onexit_function
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
_initterm_e
_initterm
_execute_onexit_table
_cexit
_crt_atexit
terminate
_seh_filter_dll
_initialize_narrow_environment
api-ms-win-crt-math-l1-1-0
_CIfmod
_libm_sse2_sqrt_precise
_libm_sse2_acos_precise
_dtest
_libm_sse2_tan_precise
floor
roundf
_libm_sse2_cos_precise
_except1
_libm_sse2_log10_precise
_CIatan2
_libm_sse2_pow_precise
_fdtest
_libm_sse2_sin_precise
api-ms-win-crt-convert-l1-1-0
atoi
atof
api-ms-win-crt-stdio-l1-1-0
_get_stream_buffer_pointers
fputc
fflush
fclose
fgetc
fwrite
fgetpos
fsetpos
ungetc
__stdio_common_vsprintf
setvbuf
_fseeki64
fread
api-ms-win-crt-utility-l1-1-0
rand
api-ms-win-crt-string-l1-1-0
strcpy_s
toupper
isalpha
strcat_s
_strnicmp
_stricmp
isspace
api-ms-win-crt-filesystem-l1-1-0
_access
_lock_file
_unlock_file
api-ms-win-crt-heap-l1-1-0
free
malloc
_callnewh
Exports
Exports
_ReflectiveLoader@4
Sections
.text Size: 151KB - Virtual size: 151KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 251KB - Virtual size: 251KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 139KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 18KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ