c:\Workspace\exernalsSrc\apr_apriconv_aprutil\apr-iconv\Win32\Release\iconv\cp737.pdb
Static task
static1
Behavioral task
behavioral1
Sample
751fb6e87116d6aaa7733e67a7bc9fa5c66399b0adb132d23216716b81c032a9.dll
Resource
win7-20240508-en
Behavioral task
behavioral2
Sample
751fb6e87116d6aaa7733e67a7bc9fa5c66399b0adb132d23216716b81c032a9.dll
Resource
win10v2004-20240508-en
General
-
Target
751fb6e87116d6aaa7733e67a7bc9fa5c66399b0adb132d23216716b81c032a9
-
Size
96KB
-
MD5
b61169c3dd63c1fe62c6ed1f375599db
-
SHA1
1858fda1342087a8b3d8a46f5345ae6b97c5b395
-
SHA256
751fb6e87116d6aaa7733e67a7bc9fa5c66399b0adb132d23216716b81c032a9
-
SHA512
742e31419790d0d309c8e5ecf40dc9c0224fa8f97e94b414697d8a89cc16a8f9b1be1d8f9c8fdacd86f3fb61659740ccfbc294f441730e0171dcf9fadd03161a
-
SSDEEP
1536:DWXmzPjI22yg8h0/+l5q/RUlTCx0gz7N6Ttk:2I86rKqlG5V6Ttk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 751fb6e87116d6aaa7733e67a7bc9fa5c66399b0adb132d23216716b81c032a9
Files
-
751fb6e87116d6aaa7733e67a7bc9fa5c66399b0adb132d23216716b81c032a9.dll windows:4 windows x86 arch:x86
30ac44ec5f94e037aea30542dc3552cb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
InterlockedIncrement
SetLastError
InterlockedDecrement
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
UnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
LCMapStringA
MultiByteToWideChar
LCMapStringW
LeaveCriticalSection
EnterCriticalSection
VirtualAlloc
HeapReAlloc
WriteFile
LoadLibraryA
InitializeCriticalSection
RtlUnwind
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
HeapSize
ExitProcess
CreateFileA
SetFilePointer
SetStdHandle
CloseHandle
GetModuleHandleA
GetProcAddress
GetLastError
GetProcessHeap
HeapAlloc
GetVersionExA
HeapFree
GetCommandLineA
GetCurrentThreadId
GetConsoleOutputCP
WriteConsoleA
RaiseException
GetConsoleMode
GetConsoleCP
FlushFileBuffers
WriteConsoleW
Exports
Exports
iconv_module
Sections
.text Size: 48KB - Virtual size: 46KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 8KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ