i:\专题\相片压缩\2014新整理\相片解码\windows\2014windows授权\源程序\2015big-windows-兴唐通信\dll_file\release\DLL_File.pdb
Static task
static1
Behavioral task
behavioral1
Sample
DLL_File.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
DLL_File.dll
Resource
win10v2004-20240426-en
General
-
Target
DLL_File.dll
-
Size
48KB
-
MD5
1434cddfd15d3d1b271b817e7813b997
-
SHA1
7b02d8b24c6a4b5094ea8a31fdf2823309c24b55
-
SHA256
0d9a158fdbf5323bca59d047f7d6fa2268de8765eadd45fa2ebe3b88c0a9e3e4
-
SHA512
49ccc2f83bd02469dd43473b3c0a947d22d9ca2aa992e6a965c26e83128aa3ec9d9710b7b5d532128156a53d712b90223985824c7cf3ea6ee0bf1716b1ea5dc1
-
SSDEEP
768:8465BR+w+or1L688CfRZLLRTQYIDEsKfn65:8t5BYw0xCfLVQYiEbS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DLL_File.dll
Files
-
DLL_File.dll.dll windows:4 windows x86 arch:x86
35896bffee0199c865b94eafd212e2e3
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcr80
_malloc_crt
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
_encode_pointer
_crt_debugger_hook
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
realloc
fwrite
fclose
_getcwd
fopen
sprintf
fscanf
exit
memmove
??2@YAPAXI@Z
??3@YAXPAX@Z
malloc
__CppXcptFilter
free
memcpy
memset
__CxxFrameHandler3
kernel32
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
DisableThreadLibraryCalls
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
Exports
Exports
unpack
Sections
.text Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 68KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 428B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ