dot3cfg.pdb
Static task
static1
Behavioral task
behavioral1
Sample
dot3cfg.dll
Resource
win10v2004-20240508-en
General
-
Target
dot3cfg.dll
-
Size
59KB
-
MD5
1bc59edf9fa5d67a4d4b7115a597ec47
-
SHA1
1f7f4c2cefcdebad3afc10039f1c4b721240bab5
-
SHA256
0c582a176cc189402fb285109bcf576ee32062c88db9c4bb1ed43bd2fe8721b8
-
SHA512
7a1fcab848e665d61dcaf47a378e30358e0f4fc5204f61cdab0842f4bcd6fdd794293e73315a84ded74ae36df146e286f905a6ccbde63b9f27d07ce63ec1c095
-
SSDEEP
768:DV1EAgmo6ibvew8/fF+P3uYkH1Bz4y8NdxLVsa3Erq1PjChaX7h8cl:DnlbFKcvz4y8NdlVLHpjxLh8cl
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dot3cfg.dll
Files
-
dot3cfg.dll.dll windows:10 windows x86 arch:x86
d3e945ff92c20efdbaca34847c99a3aa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
memcpy
??1type_info@@UAE@XZ
_initterm
_amsg_exit
__CxxFrameHandler3
_except_handler4_common
_XcptFilter
_CxxThrowException
_callnewh
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
malloc
free
wcsstr
toupper
_vsnwprintf
wcscpy_s
_wtoi
_wcsicmp
memset
kernel32
TerminateProcess
SetLastError
lstrcmpW
GetCurrentProcess
GetSystemWindowsDirectoryW
DeviceIoControl
GetProcessHeap
SetUnhandledExceptionFilter
UnhandledExceptionFilter
FreeLibrary
DisableThreadLibraryCalls
HeapFree
GetFileAttributesW
GetTickCount
HeapAlloc
WaitForSingleObject
FormatMessageW
GetLastError
CloseHandle
LocalFree
CreateProcessW
GetExitCodeProcess
CreateDirectoryW
ExpandEnvironmentStringsW
Sleep
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
netsh.exe
MatchTagsInCmdLine
PrintMessage
MatchEnumTag
PrintMessageFromModule
PrintError
RegisterContext
RegisterHelper
user32
LoadStringW
rpcrt4
RpcStringFreeW
UuidToStringW
oleaut32
SysFreeString
SysStringLen
VariantChangeType
SysAllocString
VariantClear
advapi32
ConvertStringSecurityDescriptorToSecurityDescriptorW
iphlpapi
GetAdaptersAddresses
dot3api
Dot3EnumInterfaces
Dot3GetInterfaceState
Dot3GetCurrentProfile
Dot3DeleteProfile
Dot3FreeMemory
Dot3SetInterface
Dot3GetProfileEapUserDataInfo
Dot3OpenHandle
Dot3CloseHandle
Dot3QueryAutoConfigParameter
Dot3SetAutoConfigParameter
Dot3SetProfileEapXmlUserData
Dot3ReasonCodeToString
Dot3SetProfile
Dot3ReConnect
Dot3GetProfile
onex
OneXInitialize
OneXFreeMemory
OneXDeInitialize
OneXCreateDefaultProfile
eappcfg
EapHostPeerConfigBlob2Xml
EapHostPeerGetMethods
EapHostPeerFreeErrorMemory
EapHostPeerConfigXml2Blob
EapHostPeerFreeMemory
api-ms-win-core-com-l1-1-0
CoUninitialize
CoInitializeEx
CoCreateInstance
CLSIDFromString
ntdll
EtwTraceMessage
RtlNtStatusToDosError
NtOpenFile
Exports
Exports
GetResourceString
InitHelperDll
Sections
.text Size: 49KB - Virtual size: 49KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ