DDOIProxy.pdb
Static task
static1
Behavioral task
behavioral1
Sample
DDOIProxy.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
DDOIProxy.dll
Resource
win10v2004-20240426-en
General
-
Target
DDOIProxy.dll
-
Size
14KB
-
MD5
bee1c62161dec09f72a865f2af50e1db
-
SHA1
6e5de14c83568949114b7a6e482e4c9fcec7da1b
-
SHA256
7b20e5a31072ac1a4ebd8cf73a4df6c76798bbab348486d5609fd32dcac066ab
-
SHA512
242b0d833ab1c3e33800381b18b96cf9e478ffc67ce9290a622ce3fa6deac0d615e64515e6cfe13be51eb33f755149e867f0dc874462c1a856345d97884adcd3
-
SSDEEP
384:fZxhhTe5fsnKjMTxgc1GDGP5m2WST7W/44N:BxhhTeuKgLmWBO
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DDOIProxy.dll
Files
-
DDOIProxy.dll.dll windows:6 windows x86 arch:x86
c5fbfb289d81d671f93b17798a6f1fd2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_NO_SEH
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
ntdll
memcmp
kernel32
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
combase
ord6
ord2
ord3
ord7
ord8
ord5
ord9
ord4
oleaut32
BSTR_UserMarshal
BSTR_UserFree
BSTR_UserUnmarshal
LPSAFEARRAY_UserSize
LPSAFEARRAY_UserMarshal
LPSAFEARRAY_UserUnmarshal
LPSAFEARRAY_UserFree
BSTR_UserSize
rpcrt4
CStdStubBuffer_CountRefs
NdrDllGetClassObject
NdrDllCanUnloadNow
NdrCStdStubBuffer_Release
CStdStubBuffer_Connect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Disconnect
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_AddRef
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrOleAllocate
IUnknown_Release_Proxy
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_QueryInterface
IUnknown_AddRef_Proxy
Exports
Exports
DllCanUnloadNow
DllGetClassObject
Sections
.text Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.orpc Size: 1024B - Virtual size: 570B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 844B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ