console.pdb
Static task
static1
Behavioral task
behavioral1
Sample
console.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
console.dll
Resource
win10v2004-20240508-en
General
-
Target
console.dll
-
Size
71KB
-
MD5
12118da04f2e4bc739ce8a6ab24338ea
-
SHA1
2cde261abbe024f96c0cdb67af3988798700f9e7
-
SHA256
e94505c7ec80f858ee97fad096cc8b4aae06b278d057236e259f59cc9ce7b2ce
-
SHA512
09decd267133510c9898770c7d4b2bb7846e283dda6d0debe56c1eaeccdad0cdb07a183589411a3e466cd2a21eecf9a54a279434f0fbacd02491b4f272a20316
-
SSDEEP
768:EeEop9/dYieFQc2G0aGlH/8ZBKJAE67EPn4bF+os++uYotCtGBQs5sH6:Ewp9lYieOtG0aGlEZBHtbvhjyGBQjH6
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource console.dll
Files
-
console.dll.dll windows:6 windows x86 arch:x86
5583ecd9cbd9d26d368c36cad810db8c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_wcsnicmp
memcpy
_vsnwprintf
memset
memmove
_XcptFilter
malloc
free
_initterm
_amsg_exit
iswdigit
_except_handler4_common
ntdll
NtOpenKey
RtlInitUnicodeString
NtDeleteValueKey
NtCreateKey
NtQueryValueKey
NtEnumerateValueKey
NtSetValueKey
RtlCompareMemory
NtClose
RtlOpenCurrentUser
kernel32
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
lstrlenW
TerminateProcess
GetSystemTimeAsFileTime
LoadLibraryA
GetModuleHandleA
LoadLibraryW
GetModuleHandleW
HeapAlloc
GetProcessHeap
GetProcAddress
GetFileAttributesW
GetVersion
GetLastError
SetLastError
GetModuleFileNameW
OutputDebugStringA
HeapFree
GetStartupInfoW
ExpandEnvironmentStringsW
lstrcmpW
FormatMessageW
DisableThreadLibraryCalls
GetOEMCP
HeapReAlloc
IsValidCodePage
GetCPInfoExW
RegQueryValueExW
GetLocaleInfoEx
EnumSystemLocalesEx
InterlockedExchange
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
user32
SendDlgItemMessageW
SetDlgItemInt
GetDlgItemTextW
SendMessageW
GetParent
SetWindowLongW
ReleaseDC
DrawFocusRect
ScreenToClient
GetWindowRect
GetDC
EndPaint
FillRect
FrameRect
InflateRect
GetClientRect
BeginPaint
SetFocus
GetNextDlgTabItem
GetKeyState
DefWindowProcW
GetDlgItem
GetWindowLongW
GetFocus
CheckDlgButton
GetSystemMetrics
EnableWindow
IsDlgButtonChecked
GetDlgCtrlID
IsWindow
ShowWindow
CheckRadioButton
GetDlgItemInt
InvalidateRect
RegisterClassW
UnregisterClassW
LoadCursorW
MessageBoxW
LoadStringW
TabbedTextOutW
GetSysColor
DrawTextW
MessageBoxExW
SetWindowTextW
SetDlgItemTextW
GetWindowTextW
IsWindowVisible
IsChild
LoadBitmapW
LoadIconW
GetMonitorInfoW
MonitorFromRect
MoveWindow
AdjustWindowRect
SetRect
SetWindowPos
gdi32
GetObjectW
GetStockObject
CreateSolidBrush
GetNearestColor
DeleteDC
TranslateCharsetInfo
CreateCompatibleBitmap
GetTextFaceW
CreateDCW
EnumFontFamiliesExW
GetTextExtentPoint32W
CreateFontIndirectW
DeleteObject
GetTextMetricsW
SetFontEnumeration
PatBlt
SetTextColor
SetBkColor
CreateCompatibleDC
SelectObject
BitBlt
shell32
ord102
shlwapi
SHGetValueW
SHSetValueW
Exports
Exports
CPlApplet
Sections
.text Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 33KB - Virtual size: 33KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ