cngcredui.pdb
Static task
static1
Behavioral task
behavioral1
Sample
cngcredui.dll
Resource
win10v2004-20240426-en
General
-
Target
cngcredui.dll
-
Size
102KB
-
MD5
abcb368cf1365f76746200a7ceaf75e6
-
SHA1
3d2679ed3ababfaecf10b7e8ae5723d09013e2c4
-
SHA256
aa12c068b53dd81e552453500aa9e4dfbed8c1be7f87934b3fbd49373fbabeba
-
SHA512
799ddc1839bc35e88cddc5adc8fb545525b45dc082ef4ddb456cfe56b82a8aeb131120d37d160d48c7602907f59534873fd9773bb00a6285b440c330d5948032
-
SSDEEP
3072:6d+vJtW7MFLmPl3PRMFn2AjCuOIaqh3A2e3/w7mG02VTF1pyA:6Udtw2e3/w7g2VTF1py
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cngcredui.dll
Files
-
cngcredui.dll.dll windows:10 windows x86 arch:x86
41d00822ddadd64f2d7977f4a14bf05e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
malloc
memcpy
_except_handler4_common
_initterm
_amsg_exit
_XcptFilter
free
_callnewh
memset
api-ms-win-security-base-l1-1-0
CopySid
GetLengthSid
GetTokenInformation
api-ms-win-core-errorhandling-l1-1-0
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetLastError
api-ms-win-core-libraryloader-l1-2-0
GetModuleHandleW
FreeLibrary
LoadStringW
GetProcAddress
LoadLibraryExW
DisableThreadLibraryCalls
api-ms-win-core-com-l1-1-0
CoTaskMemAlloc
CoTaskMemFree
api-ms-win-core-processthreads-l1-1-0
GetCurrentThread
GetCurrentProcessId
GetCurrentThreadId
OpenProcessToken
GetCurrentProcess
TerminateProcess
OpenThreadToken
api-ms-win-core-localization-l1-2-0
FormatMessageW
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-heap-l2-1-0
LocalFree
api-ms-win-core-synch-l1-2-0
Sleep
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-sysinfo-l1-1-0
GetSystemTimeAsFileTime
GetTickCount
api-ms-win-core-registry-l1-1-0
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
api-ms-win-core-processenvironment-l1-1-0
ExpandEnvironmentStringsW
api-ms-win-core-shlwapi-obsolete-l1-1-0
QISearch
ntdll
RtlAllocateHeap
EtwTraceMessage
RtlFreeHeap
api-ms-win-core-delayload-l1-1-1
ResolveDelayLoadedAPI
api-ms-win-core-delayload-l1-1-0
DelayLoadFailureHook
api-ms-win-core-apiquery-l1-1-0
ApiSetQueryApiSetPresence
Exports
Exports
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 16KB - Virtual size: 15KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.didat Size: 512B - Virtual size: 8B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 80KB - Virtual size: 79KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ