D:\Communication\output\Release\pdb\code\bin32\pdb\pdb\pdb\git\pdb\navic.pdb
Static task
static1
Behavioral task
behavioral1
Sample
244cef4b2912c1c2742a97c9e18c7aeb1c8dfa6a68f4a0939203c78f4e9cbb52.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
244cef4b2912c1c2742a97c9e18c7aeb1c8dfa6a68f4a0939203c78f4e9cbb52.dll
Resource
win10v2004-20240508-en
General
-
Target
244cef4b2912c1c2742a97c9e18c7aeb1c8dfa6a68f4a0939203c78f4e9cbb52
-
Size
142KB
-
MD5
3b866e36cdab29cf41d8cbade62df31f
-
SHA1
97ddc6180c99163d77d044e7100ef8054cfb0b18
-
SHA256
244cef4b2912c1c2742a97c9e18c7aeb1c8dfa6a68f4a0939203c78f4e9cbb52
-
SHA512
2e285d49f24f06486962fd1da814c602f3a89f5339b7b6b1264bff6c4077a3e6a2608b312110d2a1d66ec8224b02c367a52d9b5179e5baa984c0767536cbe5bb
-
SSDEEP
1536:w1mswAo+yW306KLRVASVUS6C/s/yQLrNWvsd+d:imL1rLn4q8X0vD
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 244cef4b2912c1c2742a97c9e18c7aeb1c8dfa6a68f4a0939203c78f4e9cbb52
Files
-
244cef4b2912c1c2742a97c9e18c7aeb1c8dfa6a68f4a0939203c78f4e9cbb52.dll windows:6 windows x86 arch:x86
86bbfd5ee4cb71ee013642fd920e2b72
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
ReadFile
VirtualAlloc
GetModuleFileNameW
GetModuleHandleA
Sleep
CreateFileA
DisableThreadLibraryCalls
CloseHandle
CreateThread
HeapAlloc
SetCurrentDirectoryW
GetFileSize
GetCurrentProcessId
GetProcessHeap
InitOnceBeginInitialize
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetProcAddress
GetModuleHandleW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
InitOnceComplete
user32
GetWindowThreadProcessId
GetMessageW
GetWindow
GetDesktopWindow
TranslateMessage
GetTopWindow
DispatchMessageW
ShowWindow
IsWindowVisible
sqlite3
sqlite3_open
msvcp140
?_Release_chore@details@Concurrency@@YAXPAU_Threadpool_chore@12@@Z
?ReportUnhandledError@_ExceptionHolder@details@Concurrency@@AAEXXZ
?_Capture@_ContextCallback@details@Concurrency@@AAEXXZ
?_Reset@_ContextCallback@details@Concurrency@@AAEXXZ
?_CallInContext@_ContextCallback@details@Concurrency@@QBEXV?$function@$$A6AXXZ@std@@_N@Z
??0task_continuation_context@Concurrency@@AAE@XZ
_Cnd_unregister_at_thread_exit
?__ExceptionPtrCreate@@YAXPAX@Z
_Cnd_init_in_situ
?__ExceptionPtrCopyException@@YAXPAXPBX1@Z
?__ExceptionPtrCopy@@YAXPAXPBX@Z
_Query_perf_frequency
?_Throw_future_error@std@@YAXABVerror_code@1@@Z
?_Throw_Cpp_error@std@@YAXH@Z
?uncaught_exceptions@std@@YAHXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_LogCancelTask@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_Xbad_function_call@std@@YAXXZ
?_Throw_C_error@std@@YAXH@Z
?_Rethrow_future_exception@std@@YAXVexception_ptr@1@@Z
?_Xlength_error@std@@YAXPBD@Z
?_Syserror_map@std@@YAPBDH@Z
?__ExceptionPtrToBool@@YA_NPBX@Z
_Mtx_destroy_in_situ
?__ExceptionPtrDestroy@@YAXPAX@Z
_Mtx_lock
?__ExceptionPtrCurrentException@@YAXPAX@Z
?__ExceptionPtrRethrow@@YAXPBX@Z
_Mtx_init_in_situ
_Cnd_register_at_thread_exit
_Cnd_do_broadcast_at_thread_exit
_Thrd_sleep
_Cnd_wait
_Thrd_id
_Query_perf_counter
_Thrd_detach
_Xtime_get_ticks
_Thrd_join
_Mtx_unlock
_Cnd_broadcast
_Cnd_destroy_in_situ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?_LogTaskCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogTaskExecutionCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemStarted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_LogWorkItemCompleted@_TaskEventLogger@details@Concurrency@@QAEXXZ
?_Schedule_chore@details@Concurrency@@YAHPAU_Threadpool_chore@12@@Z
?_ReportUnobservedException@details@Concurrency@@YAXXZ
?GetCurrentThreadId@platform@details@Concurrency@@YAJXZ
?__ExceptionPtrAssign@@YAXPAXPBX@Z
?_LogScheduleTask@_TaskEventLogger@details@Concurrency@@QAEX_N@Z
vcruntime140
__std_type_info_destroy_list
_except_handler4_common
memmove
_CxxThrowException
memcpy
__CxxFrameHandler3
__std_exception_destroy
__std_exception_copy
_purecall
__std_terminate
wcsrchr
memset
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_initterm_e
abort
_register_onexit_function
_initialize_onexit_table
_crt_atexit
_configure_narrow_argv
_seh_filter_dll
_cexit
_invalid_parameter_noinfo_noreturn
terminate
_beginthreadex
_initterm
_initialize_narrow_environment
api-ms-win-crt-heap-l1-1-0
malloc
free
_callnewh
Exports
Exports
GraphInit
Sections
.text Size: 29KB - Virtual size: 29KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 90KB - Virtual size: 90KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ