DDOIProxy.pdb
Static task
static1
Behavioral task
behavioral1
Sample
DDOIProxy.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
DDOIProxy.dll
Resource
win10v2004-20240226-en
General
-
Target
DDOIProxy.dll
-
Size
14KB
-
MD5
96f444524ad3ab5bbee76acd2eb5be94
-
SHA1
2ee5fa6eacbe17e39398eacdbe593b3d21a7431b
-
SHA256
50796dc59c9c9579980ac7bd5f1abec02ec3bf62b2c5423c3b979ff45fac1590
-
SHA512
35a4849c59d88fc0d501ec47866ab6074a2e92194e2a8a1227f83c1c90abffe40877e484af2e6edb5ce67cb9cd3fd9814a8f4b8cea84f6c6cf10af6ed4cb0bcb
-
SSDEEP
384:cnieTxVI5t+DMEQoy6TNKYsTe5fXvs73Z5maWN7WsanT8:MTMXaQoXTNETepemhj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DDOIProxy.dll
Files
-
DDOIProxy.dll.dll windows:6 windows x86 arch:x86
c5fbfb289d81d671f93b17798a6f1fd2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
ntdll
memcmp
kernel32
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
combase
ord6
ord2
ord3
ord7
ord8
ord5
ord9
ord4
oleaut32
BSTR_UserMarshal
BSTR_UserFree
BSTR_UserUnmarshal
LPSAFEARRAY_UserSize
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserFree
BSTR_UserSize
rpcrt4
CStdStubBuffer_CountRefs
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
CStdStubBuffer_Connect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_AddRef
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrOleAllocate
IUnknown_Release_Proxy
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_QueryInterface
IUnknown_AddRef_Proxy
Exports
Exports
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.orpc Size: 1024B - Virtual size: 606B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 764B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ