kbd101b.pdb
Static task
static1
Behavioral task
behavioral1
Sample
kbd101b.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
kbd101b.dll
Resource
win10v2004-20240426-en
General
-
Target
kbd101b.dll
-
Size
7KB
-
MD5
26fac010d6461ee234da842865157d83
-
SHA1
124fc71e82a9e929c38a96aca47530f87f61ef9f
-
SHA256
4bf85b2740a58630cd66a81bea7bb919e427a1e04c6cbf188d4ac925a79276d9
-
SHA512
10019573b629c466bdbae114b5c94921e0e735b3210856328c0a00556db2f5fb4ddcf0e252562df049d20830153b9653000b22b75d21a0898208a2d752b81912
-
SSDEEP
96:EtluXRmw+MmZ1gakenzkDmnWrDPu9iBQWw5Uqe2WwAP+vv:EtluGgHenzkDlXP+jWsUj2WpO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource kbd101b.dll
Files
-
kbd101b.dll.dll windows:6 windows x64 arch:x64
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Exports
Exports
KbdLayerDescriptor
KbdNlsLayerDescriptor
Sections
.data Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 192B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ