ReInfo.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ReInfo.dll
Resource
win10v2004-20240426-en
General
-
Target
ReInfo.dll
-
Size
148KB
-
MD5
37985fd57035f0ab5461d22853a439f8
-
SHA1
d799dfe84dbdb4615b1fb2ad537440036897c3d4
-
SHA256
c07f4a0e298d7173c3427ee6e05901345d31a0f7eff967a4b64fc8e8dccb226c
-
SHA512
5e0c4ec86a9830de2735dd1ddc8b9ad81538805bcaab346a62ff5591a2dd82b0c2b41d21a25503c34acaf4b223b6bb8bd7298c0ad5f6bed4bf4325cdda35c776
-
SSDEEP
3072:eMU0wXfK0yOIbT7DWaIK8UV0j6Hyif73r6PdOCFKdrzn:eMUG0yO0WaIVUVGi72FKdPn
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ReInfo.dll
Files
-
ReInfo.dll.dll windows:10 windows x86 arch:x86
5c93bb3b7379322450924429d869ff2e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_XcptFilter
_vsnprintf
_amsg_exit
_atoi64
atol
free
_wcsicmp
malloc
_initterm
?terminate@@YAXXZ
wcschr
memcmp
??3@YAXPAX@Z
_vsnwprintf
_purecall
??1type_info@@UAE@XZ
_CxxThrowException
_callnewh
?what@exception@@UBEPBDXZ
_except_handler4_common
__CxxFrameHandler3
memcpy
memcpy_s
??0exception@@QAE@XZ
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
memset
api-ms-win-core-errorhandling-l1-1-0
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetLastError
SetLastError
api-ms-win-core-heap-l1-1-0
HeapAlloc
GetProcessHeap
HeapFree
api-ms-win-core-registry-l1-1-0
RegCloseKey
RegOpenKeyExW
RegQueryValueExW
api-ms-win-core-com-l1-1-0
CoTaskMemFree
api-ms-win-core-processthreads-l1-1-0
GetCurrentProcess
TlsSetValue
TlsGetValue
GetCurrentProcessId
TerminateProcess
TlsFree
TlsAlloc
GetCurrentThreadId
api-ms-win-core-sysinfo-l1-1-0
GetSystemTimeAsFileTime
GetTickCount
GetSystemDirectoryW
api-ms-win-core-file-l1-1-0
FindVolumeClose
FindNextVolumeW
GetDiskFreeSpaceExW
WriteFile
GetDriveTypeW
FindFirstVolumeW
CreateFileW
GetFileAttributesExW
ReadFile
GetFileSize
SetEndOfFile
api-ms-win-core-handle-l1-1-0
CloseHandle
api-ms-win-core-file-l1-2-0
GetVolumeNameForVolumeMountPointW
api-ms-win-core-io-l1-1-0
DeviceIoControl
api-ms-win-core-string-l1-1-0
MultiByteToWideChar
api-ms-win-core-synch-l1-1-0
DeleteCriticalSection
api-ms-win-core-synch-l1-2-0
Sleep
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
ntdll
RtlInitializeCriticalSection
NtClose
RtlRaiseStatus
RtlGUIDFromString
NtYieldExecution
RtlAllocateHeap
DbgPrintEx
RtlReAllocateHeap
RtlNtStatusToDosError
RtlFreeHeap
Exports
Exports
WinReGetConfig
Sections
.text Size: 137KB - Virtual size: 137KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ