D:\a\hdf5\hdf5\build114\ci-StdShar-Intel\bin\hdf5.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d2f294c757251d6359d7ffd845bf483a79e7384f3cad927bf79c967987e81e86.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
d2f294c757251d6359d7ffd845bf483a79e7384f3cad927bf79c967987e81e86.dll
Resource
win10v2004-20240508-en
General
-
Target
d2f294c757251d6359d7ffd845bf483a79e7384f3cad927bf79c967987e81e86
-
Size
5.0MB
-
MD5
0336e885e7ceb60990d6433317d07fab
-
SHA1
1d7ef683fb41f7950cd8875964ed4811b24dae36
-
SHA256
d2f294c757251d6359d7ffd845bf483a79e7384f3cad927bf79c967987e81e86
-
SHA512
d000d98e536e54a4e14b70b0a615efa06f8c8d593a069154bdadeecd4a01144eaeb87b9ad6c7ec4ac93e70553866766025ee4cc86e3149920ef74d163a97ebd0
-
SSDEEP
49152:13NyNXBKVcmddB57LPdd9N1T3mGyeg2hynMcFSnLfgM5sd69Pu4rF0ScayYH:bcUWG79X3mtQ6tEr9VrSi
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d2f294c757251d6359d7ffd845bf483a79e7384f3cad927bf79c967987e81e86
Files
-
d2f294c757251d6359d7ffd845bf483a79e7384f3cad927bf79c967987e81e86.dll windows:6 windows x64 arch:x64
ac0d9d25c2965d8bd22be13d50f8262c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
shlwapi
StrStrIA
kernel32
TerminateProcess
LocalFree
GetSystemTimeAsFileTime
GetCurrentProcess
QueryPerformanceFrequency
GetProcessTimes
QueryPerformanceCounter
LockFileEx
UnlockFileEx
GetLastError
MultiByteToWideChar
SleepEx
ExpandEnvironmentStringsA
GetFileInformationByHandle
SetFilePointer
SetEndOfFile
LoadLibraryExA
GetProcAddress
FreeLibrary
FindFirstFileA
FindNextFileA
FindClose
RtlLookupFunctionEntry
FormatMessageA
GetThreadLocale
InitializeSListHead
DisableThreadLibraryCalls
GetCurrentThreadId
GetCurrentProcessId
GetModuleHandleW
IsProcessorFeaturePresent
GetStartupInfoW
SetUnhandledExceptionFilter
UnhandledExceptionFilter
IsDebuggerPresent
RtlVirtualUnwind
RtlCaptureContext
libmmd
round
llround
llroundf
roundf
exp2f
feupdateenv
feclearexcept
feholdexcept
exp2
log2
log10
floor
ceil
ldexp
lroundf
vcruntime140
strchr
memmove
strstr
memcmp
__C_specific_handler
__current_exception
__current_exception_context
memset
__std_type_info_destroy_list
memcpy
strrchr
api-ms-win-crt-environment-l1-1-0
getenv_s
_putenv_s
getenv
api-ms-win-crt-stdio-l1-1-0
_read
_open
_lseeki64
fflush
_getcwd
setvbuf
_getdcwd
__stdio_common_vsprintf
_wopen
_get_osfhandle
fclose
fwrite
__acrt_iob_func
__stdio_common_vfprintf
_write
freopen
_fseeki64
_ftelli64
_fileno
fread
ferror
feof
rewind
fputs
fopen
setbuf
_close
puts
fputc
__stdio_common_vsscanf
api-ms-win-crt-heap-l1-1-0
calloc
malloc
free
realloc
api-ms-win-crt-string-l1-1-0
isalnum
strtok_s
strnlen
strcspn
strncat
strtok
strcpy
_strdup
strncmp
isupper
tolower
strncpy
toupper
strlen
isprint
strcmp
isalpha
isspace
api-ms-win-crt-convert-l1-1-0
strtol
strtoul
strtoull
strtoll
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_register_onexit_function
_configure_narrow_argv
_initialize_narrow_environment
_crt_atexit
abort
exit
terminate
_execute_onexit_table
strerror
_initterm_e
_errno
_initterm
_cexit
_crt_at_quick_exit
_seh_filter_dll
api-ms-win-crt-time-l1-1-0
_ctime64
_time64
_mktime64
_gmtime64
strftime
_localtime64
__daylight
__timezone
_get_timezone
_tzset
api-ms-win-crt-filesystem-l1-1-0
_access
remove
_wremove
_getdrive
_fstat64
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-math-l1-1-0
_fdopen
Exports
Exports
H5AC_BT
H5AC_BT2_HDR
H5AC_BT2_INT
H5AC_BT2_LEAF
H5AC_DRVRINFO
H5AC_EARRAY_DBLK_PAGE
H5AC_EARRAY_DBLOCK
H5AC_EARRAY_HDR
H5AC_EARRAY_IBLOCK
H5AC_EARRAY_SBLOCK
H5AC_EPOCH_MARKER
H5AC_FARRAY_DBLK_PAGE
H5AC_FARRAY_DBLOCK
H5AC_FARRAY_HDR
H5AC_FHEAP_DBLOCK
H5AC_FHEAP_HDR
H5AC_FHEAP_IBLOCK
H5AC_FSPACE_HDR
H5AC_FSPACE_SINFO
H5AC_GHEAP
H5AC_LHEAP_DBLK
H5AC_LHEAP_PRFX
H5AC_OHDR
H5AC_OHDR_CHK
H5AC_PREFETCHED_ENTRY
H5AC_PROXY_ENTRY
H5AC_SNODE
H5AC_SOHM_LIST
H5AC_SOHM_TABLE
H5AC_SUPERBLOCK
H5AC_cache_image_pending
H5AC_cork
H5AC_create
H5AC_create_flush_dependency
H5AC_dest
H5AC_destroy_flush_dependency
H5AC_evict
H5AC_evict_tagged_metadata
H5AC_expunge_entry
H5AC_expunge_tag_type_metadata
H5AC_flush
H5AC_flush_tagged_metadata
H5AC_get_cache_auto_resize_config
H5AC_get_cache_flush_in_progress
H5AC_get_cache_hit_rate
H5AC_get_cache_size
H5AC_get_entry_ring
H5AC_get_entry_status
H5AC_get_mdc_image_info
H5AC_get_tag
H5AC_ignore_tags
H5AC_init
H5AC_insert_entry
H5AC_load_cache_image_on_next_protect
H5AC_mark_entry_clean
H5AC_mark_entry_dirty
H5AC_mark_entry_serialized
H5AC_mark_entry_unserialized
H5AC_move_entry
H5AC_pin_protected_entry
H5AC_prep_for_file_close
H5AC_prep_for_file_flush
H5AC_protect
H5AC_proxy_entry_add_child
H5AC_proxy_entry_add_parent
H5AC_proxy_entry_create
H5AC_proxy_entry_dest
H5AC_proxy_entry_remove_child
H5AC_proxy_entry_remove_parent
H5AC_remove_entry
H5AC_reset_cache_hit_rate_stats
H5AC_resize_entry
H5AC_retag_copied_metadata
H5AC_secure_from_file_flush
H5AC_set_cache_auto_resize_config
H5AC_set_ring
H5AC_stats
H5AC_tag
H5AC_term_package
H5AC_unpin_entry
H5AC_unprotect
H5AC_unsettle_entry_ring
H5AC_unsettle_ring
H5AC_validate_cache_image_config
H5AC_validate_config
H5A_BT2_CORDER
H5A_BT2_NAME
H5A__attr_copy_file
H5A__attr_iterate_table
H5A__attr_post_copy_file
H5A__attr_release_table
H5A__close
H5A__compact_build_table
H5A__copy
H5A__create
H5A__create_by_name
H5A__delete_by_idx
H5A__delete_by_name
H5A__dense_build_table
H5A__dense_create
H5A__dense_delete
H5A__dense_exists
H5A__dense_insert
H5A__dense_iterate
H5A__dense_open
H5A__dense_post_copy_file_all
H5A__dense_remove
H5A__dense_remove_by_idx
H5A__dense_rename
H5A__dense_write
H5A__exists_by_name
H5A__get_ainfo
H5A__get_create_plist
H5A__get_info
H5A__get_name
H5A__get_shared_rc_test
H5A__get_type
H5A__is_shared_test
H5A__iterate
H5A__iterate_old
H5A__open
H5A__open_by_idx
H5A__open_by_name
H5A__read
H5A__rename_by_name
H5A__set_version
H5A__shared_free
H5A__write
H5A_get_space
H5A_init
H5A_nameof
H5A_oloc
H5A_term_package
H5A_top_term_package
H5A_type
H5Aclose
H5Aclose_async
H5Acreate1
H5Acreate2
H5Acreate_async
H5Acreate_by_name
H5Acreate_by_name_async
H5Adelete
H5Adelete_by_idx
H5Adelete_by_name
H5Aexists
H5Aexists_async
H5Aexists_by_name
H5Aexists_by_name_async
H5Aget_create_plist
H5Aget_info
H5Aget_info_by_idx
H5Aget_info_by_name
H5Aget_name
H5Aget_name_by_idx
H5Aget_num_attrs
H5Aget_space
H5Aget_storage_size
H5Aget_type
H5Aiterate1
H5Aiterate2
H5Aiterate_by_name
H5Aopen
H5Aopen_async
H5Aopen_by_idx
H5Aopen_by_idx_async
H5Aopen_by_name
H5Aopen_by_name_async
H5Aopen_idx
H5Aopen_name
H5Aread
H5Aread_async
H5Arename
H5Arename_async
H5Arename_by_name
H5Arename_by_name_async
H5Awrite
H5Awrite_async
H5B2_TEST
H5B2_TEST2
H5B2__create_flush_depend
H5B2__create_internal
H5B2__create_leaf
H5B2__delete_node
H5B2__destroy_flush_depend
H5B2__get_node_depth_test
H5B2__get_node_info_test
H5B2__get_root_addr_test
H5B2__hdr_alloc
H5B2__hdr_create
H5B2__hdr_debug
H5B2__hdr_decr
H5B2__hdr_delete
H5B2__hdr_dirty
H5B2__hdr_free
H5B2__hdr_fuse_decr
H5B2__hdr_fuse_incr
H5B2__hdr_incr
H5B2__hdr_init
H5B2__hdr_protect
H5B2__hdr_unprotect
H5B2__insert
H5B2__insert_internal
H5B2__insert_leaf
H5B2__int_debug
H5B2__internal_free
H5B2__iterate_node
H5B2__leaf_debug
H5B2__leaf_free
H5B2__locate_record
H5B2__merge2
H5B2__merge3
H5B2__neighbor_internal
H5B2__neighbor_leaf
H5B2__node_size
H5B2__protect_internal
H5B2__protect_leaf
H5B2__redistribute2
H5B2__redistribute3
H5B2__remove_internal
H5B2__remove_internal_by_idx
H5B2__remove_leaf
H5B2__remove_leaf_by_idx
H5B2__split1
H5B2__split_root
H5B2__swap_leaf
H5B2__update_flush_depend
H5B2__update_internal
H5B2__update_leaf
H5B2_close
H5B2_create
H5B2_delete
H5B2_depend
H5B2_find
H5B2_get_addr
H5B2_get_nrec
H5B2_index
H5B2_insert
H5B2_iterate
H5B2_modify
H5B2_neighbor
H5B2_open
H5B2_patch_file
H5B2_remove
H5B2_remove_by_idx
H5B2_size
H5B2_stat_info
H5B2_update
H5B_SNODE
H5B__node_dest
H5B__verify_structure
H5B_create
H5B_debug
H5B_delete
H5B_find
H5B_get_info
H5B_insert
H5B_iterate
H5B_remove
H5B_shared_free
H5B_shared_new
H5B_valid
H5CX_free_state
H5CX_get_actual_selection_io_mode
H5CX_get_bkgr_buf
H5CX_get_bkgr_buf_type
H5CX_get_btree_split_ratios
H5CX_get_data_transform
H5CX_get_dset_min_ohdr_flag
H5CX_get_dt_conv_cb
H5CX_get_dxpl
H5CX_get_encoding
H5CX_get_err_detect
H5CX_get_ext_file_prefix
H5CX_get_filter_cb
H5CX_get_intermediate_group
H5CX_get_lapl
H5CX_get_libver_bounds
H5CX_get_max_temp_buf
H5CX_get_modify_write_buf
H5CX_get_nlinks
H5CX_get_no_selection_io_cause
H5CX_get_ohdr_flags
H5CX_get_ring
H5CX_get_selection_io_mode
H5CX_get_tag
H5CX_get_tconv_buf
H5CX_get_vds_prefix
H5CX_get_vec_size
H5CX_get_vlen_alloc_info
H5CX_get_vol_connector_prop
H5CX_get_vol_wrap_ctx
H5CX_init
H5CX_is_def_dxpl
H5CX_pop
H5CX_push
H5CX_push_special
H5CX_pushed
H5CX_restore_state
H5CX_retrieve_state
H5CX_set_actual_selection_io_mode
H5CX_set_apl
H5CX_set_dcpl
H5CX_set_dxpl
H5CX_set_lapl
H5CX_set_lcpl
H5CX_set_libver_bounds
H5CX_set_loc
H5CX_set_nlinks
H5CX_set_no_selection_io_cause
H5CX_set_ring
H5CX_set_tag
H5CX_set_vlen_alloc_info
H5CX_set_vol_connector_prop
H5CX_set_vol_wrap_ctx
H5CX_term_package
H5C__auto_adjust_cache_size
H5C__autoadjust__ageout__remove_all_markers
H5C__autoadjust__ageout__remove_excess_markers
H5C__flash_increase_cache_size
H5C__flush_invalidate_cache
H5C__flush_ring
H5C__flush_single_entry
H5C__generate_cache_image
H5C__get_cache_image_config
H5C__image_stats
H5C__iter_tagged_entries
H5C__load_cache_image
H5C__log_json_set_up
H5C__log_trace_set_up
H5C__make_space_in_cache
H5C__prep_image_for_file_close
H5C__serialize_cache
H5C__serialize_single_entry
H5C__tag_entry
H5C__untag_entry
H5C__verify_cork_tag_test
H5C_cache_image_pending
H5C_cache_image_status
H5C_cork
H5C_create
H5C_create_flush_dependency
H5C_def_auto_resize_rpt_fcn
H5C_dest
H5C_destroy_flush_dependency
H5C_evict
H5C_evict_tagged_entries
H5C_expunge_entry
H5C_expunge_tag_type_metadata
H5C_flush_cache
H5C_flush_tagged_entries
H5C_flush_to_min_clean
H5C_get_aux_ptr
H5C_get_cache_auto_resize_config
H5C_get_cache_flush_in_progress
H5C_get_cache_hit_rate
H5C_get_cache_size
H5C_get_entry_ring
H5C_get_entry_status
H5C_get_evictions_enabled
H5C_get_ignore_tags
H5C_get_logging_status
H5C_get_mdc_image_info
H5C_get_num_objs_corked
H5C_get_tag
H5C_ignore_tags
H5C_insert_entry
H5C_load_cache_image_on_next_protect
H5C_log_set_up
H5C_log_tear_down
H5C_log_write_create_cache_msg
H5C_log_write_create_fd_msg
H5C_log_write_destroy_cache_msg
H5C_log_write_destroy_fd_msg
H5C_log_write_evict_cache_msg
H5C_log_write_expunge_entry_msg
H5C_log_write_flush_cache_msg
H5C_log_write_insert_entry_msg
H5C_log_write_mark_entry_clean_msg
H5C_log_write_mark_entry_dirty_msg
H5C_log_write_mark_serialized_entry_msg
H5C_log_write_mark_unserialized_entry_msg
H5C_log_write_move_entry_msg
H5C_log_write_pin_entry_msg
H5C_log_write_protect_entry_msg
H5C_log_write_remove_entry_msg
H5C_log_write_resize_entry_msg
H5C_log_write_set_cache_config_msg
H5C_log_write_unpin_entry_msg
H5C_log_write_unprotect_entry_msg
H5C_mark_entry_clean
H5C_mark_entry_dirty
H5C_mark_entry_serialized
H5C_mark_entry_unserialized
H5C_move_entry
H5C_pin_protected_entry
H5C_prep_for_file_close
H5C_protect
H5C_remove_entry
H5C_reset_cache_hit_rate_stats
H5C_resize_entry
H5C_retag_entries
H5C_set_cache_auto_resize_config
H5C_set_cache_image_config
H5C_set_evictions_enabled
H5C_set_prefix
H5C_set_slist_enabled
H5C_start_logging
H5C_stats
H5C_stats__reset
H5C_stop_logging
H5C_unpin_entry
H5C_unprotect
H5C_unsettle_entry_ring
H5C_unsettle_ring
H5C_validate_cache_image_config
H5C_validate_resize_config
H5D_BT2
H5D_BT2_FILT
H5D_COPS_BT2
H5D_COPS_BTREE
H5D_COPS_EARRAY
H5D_COPS_FARRAY
H5D_COPS_NONE
H5D_COPS_SINGLE
H5D_LOPS_CHUNK
H5D_LOPS_COMPACT
H5D_LOPS_CONTIG
H5D_LOPS_EFL
H5D_LOPS_VIRTUAL
H5D__alloc_storage
H5D__chunk_allocate
H5D__chunk_allocated
H5D__chunk_bh_info
H5D__chunk_cacheable
H5D__chunk_copy
H5D__chunk_create
H5D__chunk_delete
H5D__chunk_direct_read
H5D__chunk_direct_write
H5D__chunk_dump_index
H5D__chunk_file_alloc
H5D__chunk_format_convert
H5D__chunk_get_offset_copy
H5D__chunk_index_empty
H5D__chunk_is_data_cached
H5D__chunk_is_partial_edge_chunk
H5D__chunk_is_space_alloc
H5D__chunk_iter
H5D__chunk_lookup
H5D__chunk_mem_alloc
H5D__chunk_mem_free
H5D__chunk_mem_realloc
H5D__chunk_mem_xfree
H5D__chunk_prune_by_extent
H5D__chunk_set_info
H5D__chunk_set_sizes
H5D__chunk_update_cache
H5D__chunk_update_old_edge_chunks
H5D__compact_copy
H5D__compact_fill
H5D__contig_alloc
H5D__contig_check
H5D__contig_copy
H5D__contig_delete
H5D__contig_fill
H5D__contig_is_data_cached
H5D__contig_is_space_alloc
H5D__contig_read
H5D__contig_write
H5D__create
H5D__create_named
H5D__current_cache_size_test
H5D__efl_bh_info
H5D__efl_is_space_alloc
H5D__fill
H5D__fill_init
H5D__fill_refill_vl
H5D__fill_term
H5D__flush
H5D__flush_real
H5D__flush_sieve_buf
H5D__format_convert
H5D__free_piece_info
H5D__gather_mem
H5D__get_chunk_info
H5D__get_chunk_info_by_coord
H5D__get_chunk_storage_size
H5D__get_num_chunks
H5D__get_offset
H5D__get_space
H5D__get_space_status
H5D__get_storage_size
H5D__get_type
H5D__layout_compact_dirty_test
H5D__layout_contig_size_test
H5D__layout_idx_type_test
H5D__layout_meta_size
H5D__layout_oh_create
H5D__layout_oh_read
Sections
.text Size: 4.1MB - Virtual size: 4.1MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 748KB - Virtual size: 748KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 14KB - Virtual size: 37KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 63KB - Virtual size: 63KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.idata Size: 9KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.00cfg Size: 512B - Virtual size: 373B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 6KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ