C:\Users\solty\source\repos\Menu\$build\Menu.pdb
Static task
static1
General
-
Target
Menu.dll
-
Size
248KB
-
MD5
7bed855aa83b3bc2e61fb557eeeb19e2
-
SHA1
5eb6568b02b3ae1712fd585eb53e0e325542cef7
-
SHA256
aaa293bf4486847524ddbee7783d25b308d7beb202d33fdeaedfaab959eb80d4
-
SHA512
263a3dfb112b6a728d7db4e08dd11595ca2099ad712ea4fb69e6a813c822c57aefb8a89200fcc5fc6962cf7ad0748a088c11180b0b2359546824462c9f3486fe
-
SSDEEP
6144:wb+ovAXlrfe6DhvT20pMhWsA+fHIylA4EQT0wSyL3PE:9rE0p9Kg4EQT0wDL3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Menu.dll
Files
-
Menu.dll.dll windows:6 windows x86 arch:x86
b224d37a3100f9a10e0fa451e3b97aec
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
QueryPerformanceFrequency
GetProcAddress
FreeLibrary
QueryPerformanceCounter
VirtualFree
VirtualAlloc
VirtualQuery
HeapCreate
VirtualProtect
HeapFree
GetCurrentProcess
Thread32Next
Thread32First
GetCurrentThreadId
SuspendThread
ResumeThread
CreateToolhelp32Snapshot
Sleep
GetLastError
HeapReAlloc
CloseHandle
GetLocaleInfoA
HeapDestroy
GetThreadContext
GetCurrentProcessId
FlushInstructionCache
SetThreadContext
OpenThread
FreeLibraryAndExitThread
DisableThreadLibraryCalls
CreateThread
InitializeSListHead
GetSystemTimeAsFileTime
IsDebuggerPresent
SleepConditionVariableSRW
WakeAllConditionVariable
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
LoadLibraryA
GetModuleHandleA
GlobalUnlock
MultiByteToWideChar
WideCharToMultiByte
GlobalLock
GlobalFree
GlobalAlloc
HeapAlloc
user32
GetAsyncKeyState
MessageBeep
RegisterClassExA
UnregisterClassA
CreateWindowExA
DefWindowProcA
CallWindowProcA
SetWindowLongA
DestroyWindow
SetClipboardData
ScreenToClient
MessageBoxA
ClientToScreen
TrackMouseEvent
GetKeyboardLayout
GetForegroundWindow
SetCapture
SetCursor
GetClientRect
IsWindowUnicode
ReleaseCapture
SetCursorPos
GetKeyState
GetMessageExtraInfo
LoadCursorA
GetCapture
EmptyClipboard
CloseClipboard
OpenClipboard
GetCursorPos
GetClipboardData
imm32
ImmSetCandidateWindow
ImmReleaseContext
ImmGetContext
ImmSetCompositionWindow
msvcp140
_Query_perf_counter
_Thrd_sleep
_Query_perf_frequency
_Xtime_get_ticks
vcruntime140
memset
_except_handler4_common
__std_type_info_destroy_list
__std_exception_copy
__std_exception_destroy
memmove
memcpy
memchr
_CxxThrowException
__std_terminate
__CxxFrameHandler3
strstr
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
ftell
fseek
__stdio_common_vfprintf
fflush
__stdio_common_vsscanf
fread
__stdio_common_vsprintf
_wfopen
fwrite
fclose
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-heap-l1-1-0
malloc
free
api-ms-win-crt-runtime-l1-1-0
_cexit
_initterm
_initterm_e
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_execute_onexit_table
_initialize_onexit_table
api-ms-win-crt-math-l1-1-0
_libm_sse2_acos_precise
_CIfmod
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
ceil
_libm_sse2_cos_precise
Sections
.text Size: 209KB - Virtual size: 208KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 30KB - Virtual size: 30KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ