C:\projects\hello-world-dll\Release\x64\hello-world.pdb
Static task
static1
Behavioral task
behavioral1
Sample
hello-world-x64.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
hello-world-x64.dll
Resource
win10v2004-20240226-en
General
-
Target
hello-world-x64.dll
-
Size
10KB
-
MD5
7f8a2b842948eb70133fa34f0cfe772b
-
SHA1
7ce46211a5a8d7fe4a767e12bd80769673fdaee5
-
SHA256
078ca38607f24fd21a563fa5189843734677b98d5017d5ebb03b2960053b25b5
-
SHA512
628315e7a7a16671875af45732c511186c0637ed168f8aa40dcaece5bd33062d2b7039d03fb217f056568335fc976197c9fe54d1f8387309d1a1f446d998ba58
-
SSDEEP
96:xmvJ3euAjy/MNoqh43aqYv9O4JKUtcwrYKGAlhbojajJcY+NeRQxa:x0JuuF/MyaqAIWcwrgBmjJcY+Ir
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource hello-world-x64.dll
Files
-
hello-world-x64.dll.dll windows:6 windows x64 arch:x64
14e2b78ee82ad03fac47525feddca7e6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
CreateThread
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
user32
MessageBoxA
vcruntime140
__C_specific_handler
memset
__std_type_info_destroy_list
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_initialize_narrow_environment
_register_onexit_function
_seh_filter_dll
_initterm_e
_initterm
_execute_onexit_table
_crt_atexit
_configure_narrow_argv
_cexit
Exports
Exports
DllMain
MessageBoxThread
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 456B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.gfids Size: 512B - Virtual size: 16B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 24B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ