AUDIOENG.pdb
Static task
static1
Behavioral task
behavioral1
Sample
AudioEng.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
AudioEng.dll
Resource
win10v2004-20240508-en
General
-
Target
AudioEng.dll
-
Size
366KB
-
MD5
78447010471493d83301bdc26a7dc178
-
SHA1
5e2cbb4b26feed151bd3961866c0a84fb569d079
-
SHA256
5d5e188b04d61343a1107340abb6b37237812d20fe61361d3f6bbe6dbfc03488
-
SHA512
894924e6e523d3ca958405115f907ad699e62de6b3c041188cea62d9da9b9c3b585850fc37b4a811e6dc4759611de5208674b64d37c8bb6048dd069fded2e19f
-
SSDEEP
6144:8zxuiJ1xBFa3D2Au7qbUxkU8d5Sful+n/D2tmSagA4Ojj5I2JuuMeW8mb:8p/azNQO15sxN5+uM5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource AudioEng.dll
Files
-
AudioEng.dll.dll regsvr32 windows:6 windows x86 arch:x86
853aa319622b88f8ef8155ef7a72d74d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_finite
ceil
_CIexp
_CIsqrt
_CIcos
??_V@YAXPAX@Z
malloc
free
memcpy_s
_CxxThrowException
_CIpow
_CIsin
floor
wcscpy_s
_ftol2_sse
wcscat_s
__CxxFrameHandler3
_purecall
_ftol2
??2@YAPAXI@Z
??_U@YAPAXI@Z
memset
memmove_s
calloc
_resetstkoflw
_XcptFilter
_initterm
_amsg_exit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
_isnan
_vsnwprintf
memcpy
wcsncpy_s
??3@YAXPAX@Z
_except_handler4_common
realloc
_errno
_unlock
__dllonexit
_lock
_onexit
ntdll
NtSetTimerResolution
EtwGetTraceEnableFlags
EtwGetTraceEnableLevel
EtwGetTraceLoggerHandle
EtwRegisterTraceGuidsW
EtwUnregisterTraceGuids
EtwLogTraceEvent
RtlNtStatusToDosError
NtQueryInformationProcess
RtlCreateMemoryBlockLookaside
RtlUnlockCurrentThread
RtlLockCurrentThread
RtlUnlockModuleSection
RtlLockModuleSection
RtlUnlockMemoryBlockLookaside
RtlLockMemoryBlockLookaside
RtlFreeMemoryBlockLookaside
RtlAllocateMemoryBlockLookaside
RtlDestroyMemoryBlockLookaside
RtlExtendMemoryBlockLookaside
kernel32
WaitForSingleObject
ResetEvent
InterlockedCompareExchange64
lstrlenW
RaiseException
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
DeleteCriticalSection
GetLastError
InterlockedIncrement
InterlockedDecrement
LoadLibraryW
GetProcAddress
GetModuleHandleW
lstrcmpiW
CloseHandle
GetModuleFileNameW
QueryPerformanceFrequency
DisableThreadLibraryCalls
FreeLibrary
MultiByteToWideChar
SizeofResource
LoadResource
CreateEventA
LoadLibraryExW
SetThreadLocale
GetThreadLocale
GetVersionExA
InterlockedExchange
SetWaitableTimer
Sleep
InterlockedCompareExchange
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
OutputDebugStringA
SetEvent
SetProcessWorkingSetSize
CancelWaitableTimer
GetCurrentThread
WaitForMultipleObjects
SetThreadPriority
CreateThread
CreateWaitableTimerA
FindResourceW
ole32
CoDisconnectObject
CoCreateInstance
StringFromGUID2
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
oleaut32
VarUI4FromStr
SysFreeString
SysStringLen
SysAllocString
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
advapi32
RegCloseKey
RegSetValueExW
RegOpenKeyExW
RegCreateKeyExW
RegDeleteValueW
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceLoggerHandle
GetTraceEnableLevel
GetTraceEnableFlags
TraceMessage
RegGetValueA
RegQueryValueExW
RegDeleteKeyExW
TraceEvent
RegEnumKeyExW
RegQueryInfoKeyW
user32
UnregisterClassA
CharNextW
avrt
AvQuerySystemResponsiveness
AvSetMmThreadPriority
AvRevertMmThreadCharacteristics
AvSetMmThreadCharacteristicsA
Exports
Exports
AERT_Allocate
AERT_Free
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 276KB - Virtual size: 276KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
RT_CODE Size: 21KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
RT_BSS Size: - Virtual size: 40B
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.data Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RT_DATA Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
RT_CONST Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 8KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ