rdvgu1132.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3233c88c7f0a28c63c59be8511481150.dll
Resource
win10v2004-20240704-en
General
-
Target
3233c88c7f0a28c63c59be8511481150.exe
-
Size
282KB
-
MD5
3233c88c7f0a28c63c59be8511481150
-
SHA1
f5fd45a0c58d288ee1258e87748fa3f19d9dfc18
-
SHA256
c8416ca18f658d81944005b5ce33a805d9a217a170677ccd6657616b759e9c36
-
SHA512
e0e3b5191852970169e1fdd09b3f5de7c5060875467a34d4b32f851c890600e65b5f0887847c64313ee8acc1a35996cb826178781994e259702ce4f0e98d115d
-
SSDEEP
6144:EO8WvrLOCIiQRM0xnh+gRS2EfKxgGrrG019xYXiUwmgG8Q0Oyw4k+gSwsWkEw0+C:6jiw9+PhvJHgBqDL
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3233c88c7f0a28c63c59be8511481150.exe
Files
-
3233c88c7f0a28c63c59be8511481150.exe.dll windows:10 windows x86 arch:x86
74bf5cb187eefb67d0792d67921fec5c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
?what@exception@@UBEPBDXZ
__CxxFrameHandler3
_CxxThrowException
memcpy
?terminate@@YAXXZ
??1exception@@UAE@XZ
__dllonexit
_ftol2
??0exception@@QAE@ABQBDH@Z
??0exception@@QAE@ABQBD@Z
_initterm
free
_amsg_exit
_purecall
_unlock
_lock
_callnewh
malloc
memcpy_s
_XcptFilter
??0exception@@QAE@ABV0@@Z
_except_handler4_common
??_V@YAXPAX@Z
_onexit
??3@YAXPAX@Z
??1type_info@@UAE@XZ
memmove
memset
api-ms-win-core-registry-l1-1-0
RegQueryValueExW
RegOpenKeyExW
RegCloseKey
api-ms-win-eventing-classicprovider-l1-1-0
GetTraceLoggerHandle
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceEnableLevel
TraceMessage
GetTraceEnableFlags
api-ms-win-core-synch-l1-2-0
Sleep
api-ms-win-core-profile-l1-1-0
QueryPerformanceFrequency
QueryPerformanceCounter
api-ms-win-core-sysinfo-l1-1-0
GetTickCount
GetSystemTimeAsFileTime
GetSystemInfo
api-ms-win-core-processthreads-l1-1-0
TerminateProcess
GetCurrentProcess
GetProcessId
GetCurrentThreadId
GetCurrentProcessId
api-ms-win-core-synch-l1-1-0
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
InitializeSRWLock
api-ms-win-core-errorhandling-l1-1-0
UnhandledExceptionFilter
SetUnhandledExceptionFilter
rfxvmt
RfxVmtWriteChannel
RfxVmtReadChannel
RfxVmtGetDataAvailableEvent
RfxVmtCreateChannel
RfxVmtCloseChannel
Exports
Exports
OpenAdapter10
OpenAdapter10_2
Sections
.text Size: 127KB - Virtual size: 126KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 149KB - Virtual size: 149KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ