DbgModel[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

DbgModel.dll
Size

507KB
MD5

307609be93834effd44f8aebeae40847
SHA1

8c7a9a5525436831e39739e264940bfa7a4ad693
SHA256

45206db2b70513724861bd6548dcde2c5258032a99a47ee5d2620a837db5fadc
SHA512

9b863892f523f86cdfd4784d8e218346236a2db60d4f4575852fb434acc505afe66b17d98da010cf8dd5aa690987ecd79d3ed1fb056bd7594882583cb78afa6f
SSDEEP

12288:MWdkal1g0Cy1EZW0chLJioWul0UD2zfS3iRhO5:M2k4Ge2ZWL1islgbS3iR0

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
DbgModel.dll

Files

DbgModel.dll
.dll windows:10 windows x86 arch:x86

298c372a68d55d65b568cf3c5c4f15ea

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

dbgmodel.pdb

Imports

api-ms-win-crt-string-l1-1-0

strncmp
wmemcpy_s
strcpy_s
wcscat_s
isalpha
iswalnum
_wcsicmp
towlower
wmemmove_s
iswspace
isdigit
wcsncpy_s
wcsncmp
tolower
toupper
wcsnlen
_memicmp
iswprint
isprint
_strnicmp
_stricmp
strnlen
_wcsnicmp
wcscpy_s

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_crt_atexit
_seh_filter_dll
terminate
_initterm_e
_initterm
_cexit
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn
abort

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vsnwprintf_s
__stdio_common_vswprintf_s
__stdio_common_vswprintf

ntdll

RtlRunOnceExecuteOnce
RtlUTF8ToUnicodeN
RtlUnwind

api-ms-win-core-string-l1-1-0

MultiByteToWideChar
WideCharToMultiByte

api-ms-win-core-errorhandling-l1-1-0

SetLastError
GetLastError
UnhandledExceptionFilter
SetUnhandledExceptionFilter
RaiseException

api-ms-win-core-libraryloader-l1-1-0

FreeLibrary
LoadLibraryExW
LoadStringW
GetProcAddress
GetModuleHandleExW
LoadLibraryExA
GetModuleHandleW

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetTickCount64

api-ms-win-core-debug-l1-1-0

IsDebuggerPresent

api-ms-win-core-processthreads-l1-1-0

GetCurrentProcess
TerminateProcess
GetCurrentProcessId
GetCurrentThreadId

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

api-ms-win-core-interlocked-l1-1-0

InterlockedFlushSList
InitializeSListHead

api-ms-win-core-fibers-l1-1-0

FlsGetValue
FlsSetValue
FlsFree
FlsAlloc

api-ms-win-core-util-l1-1-0

EncodePointer

api-ms-win-core-synch-l1-1-0

CreateEventW
ReleaseSRWLockExclusive
ResetEvent
DeleteCriticalSection
InitializeCriticalSectionEx
LeaveCriticalSection
EnterCriticalSection
AcquireSRWLockExclusive
WaitForSingleObjectEx
SetEvent
InitializeCriticalSectionAndSpinCount

oleaut32

SysAllocString
SysFreeString
VariantInit
VariantCopy
VariantChangeType
VariantClear

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
_calloc_base
free
_free_base

api-ms-win-core-misc-l1-1-0

FormatMessageW

api-ms-win-core-handle-l1-1-0

CloseHandle

api-ms-win-core-memory-l1-1-0

VirtualProtect

api-ms-win-crt-math-l1-1-0

_CIpow
ceil

Exports

Exports

CreateDataModelManager

Sections

.text
Size: 454KB - Virtual size: 454KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.mrdata
Size: 6KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 21KB - Virtual size: 21KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

298c372a68d55d65b568cf3c5c4f15ea

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

ntdll

api-ms-win-core-string-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-libraryloader-l1-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-debug-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-profile-l1-1-0

api-ms-win-core-interlocked-l1-1-0

api-ms-win-core-fibers-l1-1-0

api-ms-win-core-util-l1-1-0

api-ms-win-core-synch-l1-1-0

oleaut32

api-ms-win-crt-heap-l1-1-0

api-ms-win-core-misc-l1-1-0

api-ms-win-core-handle-l1-1-0

api-ms-win-core-memory-l1-1-0

api-ms-win-crt-math-l1-1-0

Exports

Exports

Sections

.text Size: 454KB - Virtual size: 454KB

.data Size: 512B - Virtual size: 5KB

.idata Size: 4KB - Virtual size: 3KB

.mrdata Size: 6KB - Virtual size: 5KB

.rsrc Size: 20KB - Virtual size: 19KB

.reloc Size: 21KB - Virtual size: 21KB

.text
Size: 454KB - Virtual size: 454KB

.data
Size: 512B - Virtual size: 5KB

.idata
Size: 4KB - Virtual size: 3KB

.mrdata
Size: 6KB - Virtual size: 5KB

.rsrc
Size: 20KB - Virtual size: 19KB

.reloc
Size: 21KB - Virtual size: 21KB