D:\work\x\NsServer\Cons\Debug\dll\CommonModule.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c5651f99960c77a5b014b9772256cbd1a539228ae7b8fe9526250702585b4e97.dll
Resource
win7-20240220-en
Behavioral task
behavioral2
Sample
c5651f99960c77a5b014b9772256cbd1a539228ae7b8fe9526250702585b4e97.dll
Resource
win10v2004-20240508-en
General
-
Target
c5651f99960c77a5b014b9772256cbd1a539228ae7b8fe9526250702585b4e97
-
Size
2.6MB
-
MD5
781bc4cf5358e120b4a4c64b3c30d97f
-
SHA1
0de4d32a780ec67656fa84770b470b8b37044ea4
-
SHA256
c5651f99960c77a5b014b9772256cbd1a539228ae7b8fe9526250702585b4e97
-
SHA512
89d0fe2bb5efb9157571d3c28ad4c93463366c8c2e73cf21e8da099571b35df2ae6f329157db94ba68e008f7d382abca444568f55e0f872d74acd3d91f3392d7
-
SSDEEP
49152:zHwFjmCJDE2cuw3XiiCEQYJ4o78QHu3Vr:zHwF63r8
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c5651f99960c77a5b014b9772256cbd1a539228ae7b8fe9526250702585b4e97
Files
-
c5651f99960c77a5b014b9772256cbd1a539228ae7b8fe9526250702585b4e97.dll windows:6 windows x86 arch:x86
4ae5ab1565ac748cf3a1bda19cd08669
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
InitializeCriticalSection
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
MultiByteToWideChar
GetLocalTime
GetTickCount
FileTimeToSystemTime
SystemTimeToFileTime
GetTimeZoneInformation
Sleep
SetEndOfFile
CreateFileW
EncodePointer
DecodePointer
HeapValidate
GetSystemInfo
GetStdHandle
GetFileType
GetModuleFileNameW
GetModuleHandleExW
WriteConsoleW
RaiseException
RtlUnwind
IsDebuggerPresent
IsProcessorFeaturePresent
GetSystemTimeAsFileTime
GetCommandLineA
GetCurrentThreadId
ReadFile
WriteFile
GetLastError
InitializeCriticalSectionAndSpinCount
FatalAppExitA
InterlockedDecrement
ExitProcess
GetProcAddress
AreFileApisANSI
InterlockedIncrement
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
HeapFree
HeapReAlloc
HeapSize
HeapQueryInformation
GetModuleFileNameA
SetLastError
GetCurrentThread
HeapAlloc
GetProcessHeap
SetConsoleCtrlHandler
OutputDebugStringW
WaitForSingleObjectEx
CreateThread
LoadLibraryExW
LoadLibraryW
lstrlenA
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetStartupInfoW
GetModuleHandleW
CreateSemaphoreW
OutputDebugStringA
CloseHandle
FlushFileBuffers
GetConsoleCP
GetConsoleMode
SetFilePointerEx
QueryPerformanceCounter
GetCurrentProcessId
GetEnvironmentStringsW
FreeEnvironmentStringsW
ReadConsoleW
SetFilePointer
GetDateFormatW
GetTimeFormatW
CompareStringW
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
InterlockedExchange
FreeLibrary
GetStringTypeW
VirtualQuery
SetStdHandle
SetEnvironmentVariableA
user32
MessageBoxA
ole32
CoCreateGuid
Exports
Exports
NsGameLogic_GetCreator
NsGameLogic_GetModuleCreator
NsGameLogic_GetVersion
NsGameLogic_SeedRand
NsModule_GetType
Sections
.textbss Size: - Virtual size: 1.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 2.1MB - Virtual size: 2.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 357KB - Virtual size: 357KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ