e:\Projects\requirements_sources\opencflite\Release\objc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
objc.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
objc.dll
Resource
win10v2004-20240426-en
General
-
Target
objc.dll
-
Size
118KB
-
MD5
6b6b5bf9c972c9accef4dcd3b20fa5ab
-
SHA1
92ef8af7c6fb2a6deb2cb588668eaa0e96d989db
-
SHA256
a4771b77c3b8622c4d9998d245c7db0c2351597e667868589c4729c28d8f7ff4
-
SHA512
35648cc704a5c6cdba9e021517f1b46135058e06abb4afcde668fc9c2b97b3c05a2b69290bd2eb46813041af08b516de755b987d85966c8406259adaa3b48cb7
-
SSDEEP
1536:aQV+jRG5k0jfKek5xbJoO2vNTLDnL58iGSMc0QtP2yVdbt/OtjfRwVJkZ:a9RG5DVlFTLt1ROtjfqVJkZ
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource objc.dll
Files
-
objc.dll.dll windows:5 windows x86 arch:x86
8975ac684bdb4828f8aebdd35fb05101
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
LeaveCriticalSection
EnterCriticalSection
InterlockedCompareExchange
GetCurrentThreadId
WaitForSingleObject
SignalObjectAndWait
ReleaseSemaphore
ReleaseMutex
CreateMutexW
InitializeCriticalSection
CreateSemaphoreW
CreateEventW
DeleteCriticalSection
CloseHandle
TryEnterCriticalSection
TlsGetValue
FreeLibrary
GetModuleHandleExW
TlsSetValue
GetModuleFileNameW
TlsAlloc
InterlockedIncrement
InterlockedDecrement
GetCurrentProcessId
GetTickCount
QueryPerformanceCounter
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
Sleep
InterlockedExchange
GetSystemTimeAsFileTime
msvcr90
_vcprintf
_cprintf
longjmp
strtoul
?what@exception@std@@UBEPBDXZ
strcpy
??0exception@std@@QAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
_invalid_parameter_noinfo
??3@YAXPAX@Z
ldiv
??2@YAPAXI@Z
memset
getenv
strncpy
_encode_pointer
abort
_encoded_null
_decode_pointer
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?terminate@@YAXXZ
?_type_info_dtor_internal_method@type_info@@QAEXXZ
__clean_type_info_names_internal
_unlock
__dllonexit
_lock
_onexit
_except_handler4_common
strcat
realloc
_strdup
_malloc_crt
strchr
_msize
strncmp
memmove
printf
strcmp
strlen
malloc
calloc
free
memcpy
??1exception@std@@UAE@XZ
__CxxFrameHandler3
_CxxThrowException
msvcp90
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
Exports
Exports
NXCompareHashTables
NXCompareMapTables
NXCopyHashTable
NXCountHashTable
NXCountMapTable
NXCreateHashTable
NXCreateHashTableFromZone
NXCreateMapTable
NXCreateMapTableFromZone
NXEmptyHashTable
NXFreeHashTable
NXFreeMapTable
NXHashGet
NXHashInsert
NXHashInsertIfAbsent
NXHashMember
NXHashRemove
NXInitHashState
NXInitMapState
NXMapGet
NXMapInsert
NXMapMember
NXMapRemove
NXNextHashState
NXNextMapState
NXNoEffectFree
NXPtrHash
NXPtrIsEqual
NXPtrPrototype
NXPtrStructKeyPrototype
NXPtrValueMapPrototype
NXReallyFree
NXResetHashTable
NXResetMapTable
NXStrHash
NXStrIsEqual
NXStrPrototype
NXStrStructKeyPrototype
NXStrValueMapPrototype
_alloc
_copy
_dealloc
_error
_objc_init_image
_objc_load_image
_objc_msgForward
_objc_msgForward_stret
_objc_unload_image
_realloc
_zoneAlloc
_zoneCopy
_zoneRealloc
class_addIvar
class_addMethod
class_addMethods
class_addProtocol
class_conformsToProtocol
class_copyIvarList
class_copyMethodList
class_copyPropertyList
class_copyProtocolList
class_createInstance
class_createInstanceFromZone
class_getClassMethod
class_getClassVariable
class_getImageName
class_getInstanceMethod
class_getInstanceSize
class_getInstanceVariable
class_getIvarLayout
class_getMethodImplementation
class_getMethodImplementation_stret
class_getName
class_getProperty
class_getSuperclass
class_getVersion
class_getWeakIvarLayout
class_isMetaClass
class_lookupMethod
class_nextMethodList
class_poseAs
class_removeMethods
class_replaceMethod
class_respondsToMethod
class_respondsToSelector
class_setIvarLayout
class_setSuperclass
class_setVersion
class_setWeakIvarLayout
gdb_objc_isRuntimeLocked
ivar_getName
ivar_getOffset
ivar_getTypeEncoding
method_copyArgumentType
method_copyReturnType
method_exchangeImplementations
method_getArgumentInfo
method_getArgumentType
method_getDescription
method_getImplementation
method_getName
method_getNumberOfArguments
method_getReturnType
method_getSizeOfArguments
method_getTypeEncoding
method_invoke
method_invoke_stret
method_setImplementation
objc_addClass
objc_allocateClassPair
objc_constructInstance
objc_copyClassNamesForImage
objc_copyImageNames
objc_copyProtocolList
objc_destructInstance
objc_disposeClassPair
objc_duplicateClass
objc_enumerationMutation
objc_exception_extract
objc_exception_get_functions
objc_exception_match
objc_exception_set_functions
objc_exception_throw
objc_exception_try_enter
objc_exception_try_exit
objc_getClass
objc_getClassList
objc_getClasses
objc_getFutureClass
objc_getMetaClass
objc_getOrigClass
objc_getProtocol
objc_getRequiredClass
objc_lookUpClass
objc_msgSend
objc_msgSendSuper
objc_msgSendSuper_stret
objc_msgSend_fpret
objc_msgSend_stret
objc_registerClassPair
objc_setClassHandler
objc_setEnumerationMutationHandler
objc_setForwardHandler
objc_setFutureClass
objc_setMultithreaded
objc_sync_enter
objc_sync_exit
object_copy
object_copyFromZone
object_dispose
object_getClass
object_getClassName
object_getIndexedIvars
object_getInstanceVariable
object_getIvar
object_realloc
object_reallocFromZone
object_setClass
object_setInstanceVariable
object_setIvar
property_getAttributes
property_getName
protocol_conformsToProtocol
protocol_copyMethodDescriptionList
protocol_copyPropertyList
protocol_copyProtocolList
protocol_getMethodDescription
protocol_getName
protocol_getProperty
protocol_isEqual
sel_getName
sel_getUid
sel_isEqual
sel_isMapped
sel_registerName
Sections
.text Size: 89KB - Virtual size: 88KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 692B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ