D:\builds\build-sourcemod-msvc12\windows-1.11\OUTPUT\core\sourcemod.2.sdk2013\windows-x86\sourcemod.2.sdk2013.pdb
Static task
static1
Behavioral task
behavioral1
Sample
ce902d8692acae6475895e995b49028e909847fd041e1281f8c2520238d20b78.dll
Resource
win7-20240419-en
Behavioral task
behavioral2
Sample
ce902d8692acae6475895e995b49028e909847fd041e1281f8c2520238d20b78.dll
Resource
win10v2004-20240508-en
General
-
Target
ce902d8692acae6475895e995b49028e909847fd041e1281f8c2520238d20b78
-
Size
489KB
-
MD5
4eff813b300bc803dfcc8133b613bc36
-
SHA1
fe68932c48afd25640d4e94476679ed4dcc63dc3
-
SHA256
ce902d8692acae6475895e995b49028e909847fd041e1281f8c2520238d20b78
-
SHA512
6dc83f729e69705b93e0b5e11190fa8892e94c4aacbe77f1eee71a1098a195fcd5539a0e89a52dcd0a890a6566f11a1822a4e96ae85d1838ba11c12998f285ee
-
SSDEEP
6144:XUD/x3mYEQ5O+GUok5bKPwdUzc0FCMFp466ZiaYiRVYpvtxg/AO0xSx:Sx3mYp5OP3k5bKPcUQ0FCMFp4F8zNjU
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource ce902d8692acae6475895e995b49028e909847fd041e1281f8c2520238d20b78
Files
-
ce902d8692acae6475895e995b49028e909847fd041e1281f8c2520238d20b78.dll windows:5 windows x86 arch:x86
86c2e2a040812b04b7ea8a7bec9a2848
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetFileAttributesA
GetLastError
FreeLibrary
GetProcAddress
FormatMessageA
LoadLibraryA
ReadConsoleW
ReadFile
SetEndOfFile
SetFilePointerEx
HeapReAlloc
HeapSize
CreateFileW
GetConsoleMode
GetConsoleCP
FlushFileBuffers
SetStdHandle
CreateDirectoryW
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetCPInfo
GetOEMCP
IsValidCodePage
GetCurrentThreadId
MultiByteToWideChar
WideCharToMultiByte
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
CloseHandle
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
SetEvent
ResetEvent
WaitForSingleObjectEx
CreateEventW
GetModuleHandleW
IsDebuggerPresent
GetStartupInfoW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RaiseException
RtlUnwind
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
InterlockedFlushSList
SetLastError
GetStdHandle
GetFileType
GetModuleFileNameA
GetModuleHandleExW
WriteConsoleW
ExitProcess
HeapFree
HeapAlloc
GetACP
LCMapStringW
GetStringTypeW
DecodePointer
WriteFile
FindClose
FindFirstFileExA
FindNextFileA
tier0
MemFreeScratch
g_VProfCurrentProfile
?OutputReport@CVProfile@@QAEXHPBDH@Z
?Pause@CVProfile@@QAEXXZ
?ExitScope@CVProfile@@QAEXXZ
?EnterScope@CVProfile@@QAEXPBDH0_NH@Z
?ExitScope@CVProfNode@@QAE_NXZ
?EnterScope@CVProfNode@@QAEXXZ
?Resume@CVProfNode@@QAEXXZ
g_pMemAlloc
Warning
GetSpewOutputFunc
SpewOutputFunc
MemAllocScratch
DevMsg
?DevMsg@@YAXPBDZZ
COM_TimestampedLog
vstdlib
RandomFloat
RandomInt
KeyValuesSystem
RandomSeed
Exports
Exports
CreateInterface
cvar
Sections
.text Size: 355KB - Virtual size: 354KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 97KB - Virtual size: 97KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 81KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.gfids Size: 512B - Virtual size: 284B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.tls Size: 512B - Virtual size: 9B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1024B - Virtual size: 864B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 22KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ