D:\a\DevourClient\DevourClient\x64\Release\DevourClient.pdb
Static task
static1
1 signatures
General
-
Target
DevourClient.dll
-
Size
4.3MB
-
MD5
574de689284bda2679f7a943e2232f5f
-
SHA1
5f97f39ac94ae99e743c084c8f7042c8381df999
-
SHA256
7babe383b4e4ca942a086483824839235eb280964cd05ab29943297da0ef9499
-
SHA512
b2518507875686bfc64e5a5836debce35bb208f721b766ab0b1a83757c0802631c9c75c085972e87b85e32c845b5d81388b6f36b7bb7d9197bbbc56c265950b0
-
SSDEEP
24576:/OEUtzxBaAy70ogb4IutOIFCo8c8cXeDWRFKNm1tZBpxuAumP95m/AtmTpZaS81l:pSfa71IuMarbNoNmtlxuM5m+qph81l
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource DevourClient.dll
Files
-
DevourClient.dll.dll windows:6 windows x64 arch:x64
0db68f2ebc4162456c07d6df13be7ffa
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GlobalAlloc
GlobalFree
GetLocaleInfoA
QueryPerformanceFrequency
QueryPerformanceCounter
LoadLibraryA
GetProcAddress
FreeLibrary
VirtualFree
VirtualQuery
GetSystemInfo
VirtualAlloc
HeapAlloc
HeapReAlloc
GetThreadContext
SetThreadContext
CreateToolhelp32Snapshot
Thread32First
GetCurrentProcessId
GetCurrentThreadId
Thread32Next
OpenThread
SuspendThread
ResumeThread
HeapFree
GetModuleHandleW
FlushInstructionCache
WideCharToMultiByte
Sleep
HeapCreate
HeapDestroy
GetStdHandle
SetConsoleTextAttribute
FreeLibraryAndExitThread
FreeConsole
InitializeSListHead
GetSystemTimeAsFileTime
IsDebuggerPresent
IsProcessorFeaturePresent
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
CloseHandle
CreateFileW
GlobalUnlock
GlobalLock
MultiByteToWideChar
GetCurrentProcess
AllocConsole
WriteFile
VirtualProtect
CreateThread
user32
GetAsyncKeyState
CallWindowProcW
SetWindowLongPtrW
ClientToScreen
IsWindowUnicode
ReleaseCapture
SetCapture
GetKeyState
LoadCursorW
GetCapture
TrackMouseEvent
GetMessageExtraInfo
SetCursorPos
SetCursor
GetKeyboardLayout
SetClipboardData
EmptyClipboard
CloseClipboard
GetClipboardData
OpenClipboard
MessageBoxW
GetCursorPos
ScreenToClient
GetClientRect
GetForegroundWindow
msvcp140
?_New_Locimp@_Locimp@locale@std@@CAPEAV123@AEBV123@@Z
?_Init@locale@std@@CAPEAV_Locimp@12@_N@Z
?_Xout_of_range@std@@YAXPEBD@Z
?_Xlength_error@std@@YAXPEBD@Z
??4?$_Yarn@D@std@@QEAAAEAV01@PEBD@Z
??1?$codecvt@_SDU_Mbstatet@@@std@@MEAA@XZ
??0?$codecvt@_SDU_Mbstatet@@@std@@QEAA@_K@Z
?out@?$codecvt@_SDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEB_S1AEAPEB_SPEAD3AEAPEAD@Z
?_Addfac@_Locimp@locale@std@@AEAAXPEAVfacet@23@_K@Z
?_Decref@facet@locale@std@@UEAAPEAV_Facet_base@3@XZ
?_Incref@facet@locale@std@@UEAAXXZ
??Bid@locale@std@@QEAA_KXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?uncaught_exception@std@@YA_NXZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAXXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@XZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAA_JPEBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEAAHD@Z
?good@ios_base@std@@QEBA_NXZ
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QEBADD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@D@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@P6AAEAV01@AEAV01@@Z@Z
_Query_perf_frequency
_Query_perf_counter
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QEAAAEAV01@_K@Z
?_Xbad_function_call@std@@YAXXZ
msvcp140_codecvt_ids
?id@?$codecvt@_SDU_Mbstatet@@@std@@2V0locale@2@A
imm32
ImmGetContext
ImmSetCandidateWindow
ImmReleaseContext
ImmSetCompositionWindow
d3dcompiler_47
D3DCompile
d3d11
D3D11CreateDeviceAndSwapChain
wininet
InternetOpenW
InternetCloseHandle
InternetReadFile
InternetOpenUrlW
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__C_specific_handler
memset
__std_type_info_destroy_list
__current_exception_context
__current_exception
__std_exception_destroy
__std_exception_copy
memchr
memcmp
memcpy
strstr
__std_terminate
memmove
_CxxThrowException
api-ms-win-crt-heap-l1-1-0
malloc
_callnewh
free
api-ms-win-crt-stdio-l1-1-0
__acrt_iob_func
freopen_s
fclose
__stdio_common_vfprintf
fflush
fwrite
fread
fseek
ftell
_wfopen
__stdio_common_vsprintf
__stdio_common_vsscanf
api-ms-win-crt-runtime-l1-1-0
_cexit
terminate
_initterm
_initterm_e
_crt_atexit
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_errno
api-ms-win-crt-utility-l1-1-0
qsort
api-ms-win-crt-string-l1-1-0
_strdup
strncmp
strcmp
strncpy
api-ms-win-crt-convert-l1-1-0
strtoll
atof
strtoull
strtod
api-ms-win-crt-locale-l1-1-0
localeconv
api-ms-win-crt-math-l1-1-0
acosf
atan2f
cosf
fmodf
ceilf
powf
sinf
sqrtf
Sections
.text Size: 4.2MB - Virtual size: 4.2MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 84KB - Virtual size: 84KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 1.7MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 736B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ