dhcpcmonitor.pdb
Static task
static1
Behavioral task
behavioral1
Sample
dhcpcmonitor.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
dhcpcmonitor.dll
Resource
win10v2004-20240508-en
General
-
Target
dhcpcmonitor.dll
-
Size
11KB
-
MD5
6d9b0ba71e0e85f271a33d875ab7f939
-
SHA1
28cff7a561bff93ab166af29451babf12ce18d71
-
SHA256
f18f423991aca6d4711300485b22593a9b2bcde4266e1fb24e26c9eaecf8a06e
-
SHA512
12a96a68b73d7260a9b87e4c1c0c1255455f5348193e916e50ae9da9a500abd92fa5a48a1fe0e47f1675ed4715bb2cf44a173a98655161f7d89865fcca8ebd5e
-
SSDEEP
192:95B2T4vmtnsheZjB3CmgKBAlVMdKPTU8DU7bybu7pkXtnbWlBW+:9zpQnsh8ViyAnOKLy7bn2XlWlBW+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dhcpcmonitor.dll
Files
-
dhcpcmonitor.dll.dll windows:6 windows x86 arch:x86
4dc6a74cee543737d3641a6e096278af
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_initterm
malloc
_XcptFilter
memset
_wfopen
fclose
_amsg_exit
_except_handler4_common
free
fprintf
fflush
dhcpcsvc
DhcpEnableTracing
DhcpGetTraceArray
dhcpcsvc6
Dhcpv6EnableTracing
Dhcpv6GetTraceArray
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
InterlockedIncrement
LoadLibraryExW
GetLastError
HeapAlloc
DisableThreadLibraryCalls
FreeLibrary
GetWindowsDirectoryW
HeapFree
GetProcessHeap
netsh.exe
MatchToken
PrintError
DisplayMessageM
MatchCmdLine
RegisterContext
RegisterHelper
PrintMessageFromModule
dhcpqec
DhcpQecEnableTracing
Exports
Exports
InitHelperDll
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 614B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ