NcdProp.pdb
Static task
static1
Behavioral task
behavioral1
Sample
NcdProp.dll
Resource
win7-20240215-en
Behavioral task
behavioral2
Sample
NcdProp.dll
Resource
win10v2004-20240426-en
General
-
Target
NcdProp.dll
-
Size
21KB
-
MD5
72797504883225f6860dd0c819062437
-
SHA1
806fe31f45fdb7dc3d135a62fafe8575d98f8801
-
SHA256
4d240d0029643e8f2ac7cb434cff935beca846c540daa3af9ad86a49b43439bd
-
SHA512
694fc2a5b74a72602f373ee57561c83042064e3679f3852e4ea6bb4889f45c75ff60c7144343032c3e069ee931ccb95aab12b53200e549dae44e15db677b8a95
-
SSDEEP
384:V7DZGKzDXwOdB+z7lMQsbelZOAypRUIVTfQHBu8L2cr3EZBgazhsCRvvV8KHOpWm:Vp4KB+z7lMQAelZO1UIFCikKr0/26
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource NcdProp.dll
Files
-
NcdProp.dll.dll windows:6 windows x86 arch:x86
7967d899c21c846f9d7a72b9f791bfb7
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
_amsg_exit
_except_handler4_common
_initterm
malloc
free
_vsnwprintf
??3@YAXPAX@Z
??2@YAPAXI@Z
_purecall
_XcptFilter
memset
kernel32
GetTickCount
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
Sleep
GlobalUnlock
GlobalLock
DisableThreadLibraryCalls
GetModuleHandleW
LoadLibraryW
GetModuleFileNameW
GetLastError
SetLastError
GetProcAddress
LoadLibraryA
GetModuleHandleA
OutputDebugStringA
ole32
ReleaseStgMedium
PropVariantClear
oleaut32
VariantClear
user32
SendMessageW
RegisterClipboardFormatW
DestroyIcon
GetWindowLongW
GetDlgItem
SetWindowLongW
SendDlgItemMessageW
LoadStringW
ShowWindow
EnableWindow
shell32
ShellExecuteW
ord155
SHGetFileInfoW
ord18
ord25
SHBindToParent
Exports
Exports
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 13KB - Virtual size: 12KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ