D:\BambooBuild\BDNP-MIMEPACKER5-WPACK\Static Release\x64\mimepack.pdb
Static task
static1
Behavioral task
behavioral1
Sample
mimepack.dll
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
mimepack.dll
Resource
win10v2004-20240426-en
General
-
Target
mimepack.dll
-
Size
2.0MB
-
MD5
d0045fb0b138b791bab2809a36f12429
-
SHA1
2cd27f254b6499d42ff7116cfdf0dd49de922118
-
SHA256
7bff54dcaed42fbf825d0464b39106be6412822251cc7e68f12d1e8cccfc524e
-
SHA512
190dc8702cf0ea46723ebb9e57686b8cbdb6fb3f59ae932d0008267b701995a1e54eb7bf82eb368b1e862fa79ead540f8f5c75126a411c1d32c20dd455f7ebfc
-
SSDEEP
49152:UwL8cL/F3Kr2O7HIEpQKv5X8pbJncgf79Ah6Uh/Z:LL8G/F6rr8EWy5spbugpAhPh/Z
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource mimepack.dll
Files
-
mimepack.dll.dll windows:6 windows x64 arch:x64
09a7f5d3f5d391748a4340820d97b88e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
File Characteristics
IMAGE_FILE_RELOCS_STRIPPED
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetCurrentThreadId
DeleteCriticalSection
GetLastError
LoadLibraryA
GetProcAddress
FreeLibrary
IsValidCodePage
MultiByteToWideChar
WideCharToMultiByte
GetTempPathA
GetLocalTime
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
InterlockedFlushSList
RtlPcToFileHeader
RaiseException
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ReadFile
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
CloseHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
WriteFile
GetConsoleOutputCP
GetConsoleMode
HeapAlloc
HeapFree
GetStdHandle
SetFilePointerEx
ReadConsoleW
HeapReAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
MoveFileExW
GetCurrentDirectoryW
GetFullPathNameW
SetStdHandle
GetFileSizeEx
FindClose
FindFirstFileExW
FindNextFileW
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
DeleteFileW
SetEndOfFile
GetStringTypeW
FlushFileBuffers
GetTimeZoneInformation
HeapSize
WriteConsoleW
Exports
Exports
ReleaseInterface
ReleaseInterfaceA
ReleaseInterfaceW
RequestInterface
RequestInterfaceA
RequestInterfaceW
xRegister
xRegisterA
Test
aomq
aomq
aomq
Sections
.text Size: 213KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rdata Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
D>W Size: 1.7MB - Virtual size: 1.7MB
IMAGE_SCN_MEM_READ