dmintf.pdb
Static task
static1
Behavioral task
behavioral1
Sample
dmintf.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
dmintf.dll
Resource
win10v2004-20240508-en
General
-
Target
dmintf.dll
-
Size
61KB
-
MD5
637fea8c329140f22fdcd9f32b326d7a
-
SHA1
fd58b4a431db2000786fce7da0462293985c221d
-
SHA256
1a0517ceb7fd495f2f14a775f9eeded210138b3c4c4e2ed138a0ecaaab5c9eb8
-
SHA512
f997cbb0d85791e2d2be78b8145c317ae2867debb0588ed6d00a62f263752eed397d71b1898bfbcf3628ceea58cc13246810b8b7b243cdafa693798daee82cc7
-
SSDEEP
384:NbbYkPyibUYNNcL0t8mbu0hv87y4loEbYLINRMjmXsVOgOTEVNrM5GEOkjkckxWq:N5PNCLn0hvENGEbYLcqysVuihsk6EeS
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource dmintf.dll
Files
-
dmintf.dll.dll windows:6 windows x64 arch:x64
c466408ca96fe2a60c4a879c32b762e9
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
__C_specific_handler
_initterm
malloc
free
_amsg_exit
_XcptFilter
memcmp
kernel32
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
Sleep
QueryPerformanceCounter
GetCurrentProcessId
rpcrt4
CStdStubBuffer_Disconnect
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_Invoke
CStdStubBuffer_Connect
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
IUnknown_AddRef_Proxy
CStdStubBuffer_QueryInterface
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_AddRef
IUnknown_QueryInterface_Proxy
NdrOleFree
NdrOleAllocate
CStdStubBuffer_CountRefs
IUnknown_Release_Proxy
CStdStubBuffer_DebugServerQueryInterface
combase
ord2
ord3
Exports
Exports
DllCanUnloadNow
DllGetClassObject
GetProxyDllInfo
Sections
.text Size: 50KB - Virtual size: 50KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.orpc Size: 512B - Virtual size: 334B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ