DbgModel[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

DbgModel.dll
Size

488KB
MD5

b83465650fd7f4ae4fb2c6a9228178b0
SHA1

6f32365544c9ddf6d9acc1825e17db925b8a532e
SHA256

3bdbd743056319e490cf8c0de30802fd4d8228d852aab87c4492a7c50b0ea1ef
SHA512

0a9ad7c3933e79f00bbceef063bef8534151f1c52d3bfa930a424befd38babb706afb4f4fc8fc680675ca9d5bd2aed00a416d0dee96ad6301576696b4c9b983f
SSDEEP

6144:SNjk+gMvVLU7lLqSsJu6zWfg/9EwMwwT8c3IlkUYUA7pkbtMw/cWeQEcYiFkUIgi:j+vVLWxqSwuZfgoCo9MJMw3w7H

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DbgModel.dll

Files

DbgModel.dll
.dll windows:10 windows x86 arch:x86

0f2dad6b1ab89a570161e87a808ee675

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dbgmodel.pdb

Imports

api-ms-win-crt-string-l1-1-0

towlower
_wcsicmp
isprint
iswprint
toupper
tolower
wcsncmp
wcsncpy_s
isalpha
iswspace
isspace
strnlen
_stricmp
_strnicmp
_memicmp
wcsnlen
isdigit
strcpy_s
iswalnum
wcscpy_s
wmemmove_s
wmemcpy_s
_wcsnicmp
wcscat_s
strncmp

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_seh_filter_dll
_execute_onexit_table
_crt_atexit
_cexit
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn
_initterm_e
_initterm
terminate
abort

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vswprintf
__stdio_common_vswprintf_s
__stdio_common_vsnwprintf_s

ntdll

RtlUnwind
RtlRunOnceExecuteOnce

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
MultiByteToWideChar

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
UnhandledExceptionFilter
RaiseException
SetLastError
GetLastError

api-ms-win-core-libraryloader-l1-1-0

GetModuleHandleExW
GetModuleHandleW
LoadStringW
GetProcAddress
LoadLibraryExW
FreeLibrary
LoadLibraryExA

api-ms-win-core-sysinfo-l1-1-0

GetTickCount64
GetSystemTimeAsFileTime

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

api-ms-win-core-processthreads-l1-1-0

TerminateProcess
GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessId

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-interlocked-l1-1-0

InitializeSListHead
InterlockedFlushSList

api-ms-win-core-fibers-l1-1-0

FlsSetValue
FlsGetValue
FlsAlloc
FlsFree

api-ms-win-core-util-l1-1-0

EncodePointer

api-ms-win-core-synch-l1-1-0

SetEvent
CreateEventW
WaitForSingleObjectEx
InitializeCriticalSectionEx
EnterCriticalSection
DeleteCriticalSection
ResetEvent
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeCriticalSectionAndSpinCount
LeaveCriticalSection

oleaut32

VariantInit
VariantCopy
VariantChangeType
VariantClear
SysFreeString
SysAllocString

api-ms-win-crt-heap-l1-1-0

_calloc_base
_free_base
free
malloc
_callnewh

api-ms-win-core-misc-l1-1-0

FormatMessageW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-memory-l1-1-0

VirtualProtect

api-ms-win-crt-math-l1-1-0

_CIpow

Exports

Exports

CreateDataModelManager

Sections

.text
Size: 436KB - Virtual size: 436KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mrdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

0f2dad6b1ab89a570161e87a808ee675

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

ntdll

api-ms-win-core-string-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-libraryloader-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-fibers-l1-1-0

api-ms-win-core-util-l1-1-0

api-ms-win-core-synch-l1-1-0

oleaut32

api-ms-win-crt-heap-l1-1-0

api-ms-win-core-misc-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-memory-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 436KB - Virtual size: 436KB

.data Size: 512B - Virtual size: 5KB

.idata Size: 4KB - Virtual size: 3KB

.mrdata Size: 6KB - Virtual size: 5KB

.rsrc Size: 19KB - Virtual size: 19KB

.reloc Size: 21KB - Virtual size: 20KB

.text
Size: 436KB - Virtual size: 436KB

.data
Size: 512B - Virtual size: 5KB

.idata
Size: 4KB - Virtual size: 3KB

.mrdata
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 19KB - Virtual size: 19KB

.reloc
Size: 21KB - Virtual size: 20KB