NcdProp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
NcdProp.dll
Resource
win10v2004-20240426-en
General
-
Target
NcdProp.dll
-
Size
20KB
-
MD5
e3807fbb97df2432ab3e924f5199b54b
-
SHA1
4c3b678f40f2bd2bee7a02b54de4c69eff9ff572
-
SHA256
c947202b2138d4850c942de90ea74b636150ff8bfe000b403f63dd5a0b3d832b
-
SHA512
8e029c90c15d44391eca5e113934885b4a4ccf948f7199b9104919df2bcc9cd12b8aec6146266bb73e77c001ede81bcfd3817dccb9bde52189aa9988973d6be5
-
SSDEEP
384:CD492gzJlNBO8TTm1o3hvVyK4gSQ6uW0qYCnRT+gosD3Yg9irh19WybtWfa9:Df1lbIhuWlYRsryr1B
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NcdProp.dll
Files
-
NcdProp.dll.dll windows:10 windows x86 arch:x86
7d2381a0d96513fe93e64a459ed7e327
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_except_handler4_common
_initterm
_amsg_exit
_XcptFilter
free
_purecall
malloc
_callnewh
_vsnwprintf
memset
kernel32
UnhandledExceptionFilter
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
Sleep
GlobalUnlock
GlobalLock
DisableThreadLibraryCalls
SetLastError
OutputDebugStringA
GetModuleFileNameW
GetModuleHandleA
GetLastError
LoadLibraryA
LoadLibraryW
GetProcAddress
GetModuleHandleW
ole32
PropVariantClear
ReleaseStgMedium
oleaut32
VariantClear
user32
RegisterClipboardFormatW
DestroyIcon
GetWindowLongW
SendMessageW
LoadStringW
ShowWindow
SendDlgItemMessageW
SetWindowLongW
GetDlgItem
EnableWindow
shell32
ShellExecuteW
ord18
ord155
SHBindToParent
ord25
SHGetFileInfoW
Exports
Exports
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 13KB - Virtual size: 13KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 976B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ