F:\桌面源码\VS2008_HxTD_华夏免费版辅助\HxTDmm\Release\TDHoBll.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bbc6a6b2f888c6484bf0c344c48db8e655a616560ad13f5c8ec485d49aa02a0a.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
bbc6a6b2f888c6484bf0c344c48db8e655a616560ad13f5c8ec485d49aa02a0a.dll
Resource
win10v2004-20240426-en
General
-
Target
bbc6a6b2f888c6484bf0c344c48db8e655a616560ad13f5c8ec485d49aa02a0a
-
Size
1.3MB
-
MD5
e198f9b10fa7666c3cf1ece8b89e9fa9
-
SHA1
2248faf947587d0bec9230b045bd784d9173d0c8
-
SHA256
bbc6a6b2f888c6484bf0c344c48db8e655a616560ad13f5c8ec485d49aa02a0a
-
SHA512
54394c3f52d968f774d47b67109aeab3b05e85aed8f11ad702ebaa7fadaa3ebe4471a89131b0ecb5de22119be179b44886179c142d0ec52ecd7473527367219a
-
SSDEEP
24576:DIyRF1vz+x2V/Ez46G9lp1K0tVb4zA29Zi8hacjpV8ORkxyPd4Ub:Uy1vzWU/EIvKwBpfMbrRLPf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bbc6a6b2f888c6484bf0c344c48db8e655a616560ad13f5c8ec485d49aa02a0a
Files
-
bbc6a6b2f888c6484bf0c344c48db8e655a616560ad13f5c8ec485d49aa02a0a.dll windows:5 windows x86 arch:x86
7e4c26c46d836b9c2dd0468f32b1372f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GlobalFlags
user32
DestroyMenu
gdi32
DeleteDC
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
advapi32
RegSetValueExA
shlwapi
PathIsUNCA
oleaut32
VariantClear
winmm
PlaySoundA
psapi
EmptyWorkingSet
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
shell32
SHGetFolderPathW
Exports
Exports
TDMWT
TDSST
TDWWT
___TDCPPdebugHook
Sections
.text Size: 309KB - Virtual size: 3.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1020KB - Virtual size: 1024KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ