D:\BPW_RES\PROJECT\DLL\SKLCFG\Debug\SKLCFG.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6e6e7924c7dccc5a49218c18069ac2bd8ec6c8187e60229985cf762d4e7adf5e.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
6e6e7924c7dccc5a49218c18069ac2bd8ec6c8187e60229985cf762d4e7adf5e.dll
Resource
win10v2004-20240704-en
General
-
Target
6e6e7924c7dccc5a49218c18069ac2bd8ec6c8187e60229985cf762d4e7adf5e
-
Size
762KB
-
MD5
afb200d7a4b8d1533335d6e87d8e38ca
-
SHA1
da668482e8c76c8cae982bc7d5db2ca1dbf2e482
-
SHA256
6e6e7924c7dccc5a49218c18069ac2bd8ec6c8187e60229985cf762d4e7adf5e
-
SHA512
e2a4b0562c064fdcb053b5fd36d092eedf76709bbc7aa2d1e7238fe45c76b78101001b732d166d0fbbf19951a0353da0bbb86f82f492ead6424b0e1eb4ff75c3
-
SSDEEP
12288:q8gydb9a96fXQTNIR+i+7ru3sx4h71uFLpB:q8gy296fXQ5IgvCj1mB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6e6e7924c7dccc5a49218c18069ac2bd8ec6c8187e60229985cf762d4e7adf5e
Files
-
6e6e7924c7dccc5a49218c18069ac2bd8ec6c8187e60229985cf762d4e7adf5e.dll windows:6 windows x86 arch:x86
c56e5abdff97811b851f67d7cb452096
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
SetLastError
GetProcAddress
LoadLibraryA
ExitProcess
GetModuleHandleA
lstrcpyA
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
lstrlenA
OutputDebugStringA
GetCurrentProcess
TerminateProcess
FreeLibrary
GetModuleFileNameA
GetTickCount
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsProcessorFeaturePresent
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
WakeAllConditionVariable
SleepConditionVariableSRW
IsDebuggerPresent
user32
wsprintfA
MessageBoxA
ole32
CoCreateInstance
CreateStreamOnHGlobal
msvcp140
?_Xout_of_range@std@@YAXPBD@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??1?$basic_ostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_ostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
?pbase@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAK@Z
??5?$basic_istream@DU?$char_traits@D@std@@@std@@QAEAAV01@AAG@Z
??1?$basic_istream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_istream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z
??0?$basic_ios@DU?$char_traits@D@std@@@std@@IAE@XZ
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?setp@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD0@Z
?epptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?setg@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXPAD00@Z
?gbump@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEXH@Z
?egptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?pptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?gptr@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
?eback@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IBEPADXZ
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Xbad_alloc@std@@YAXXZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
??7ios_base@std@@QBE_NXZ
?_Xlength_error@std@@YAXPBD@Z
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
vcruntime140
__current_exception
memcpy
memmove
memset
strchr
__std_exception_copy
__std_exception_destroy
_CxxThrowException
__CxxFrameHandler3
memcmp
strstr
strrchr
__std_type_info_destroy_list
_except_handler4_common
__current_exception_context
api-ms-win-crt-runtime-l1-1-0
_execute_onexit_table
_initialize_onexit_table
_cexit
_configure_narrow_argv
_invalid_parameter_noinfo_noreturn
_register_onexit_function
_crt_atexit
_seh_filter_dll
terminate
_initterm_e
_initterm
_initialize_narrow_environment
api-ms-win-crt-string-l1-1-0
_stricmp
strcat
strncpy
strlen
strcpy
strcoll
_strncoll
api-ms-win-crt-heap-l1-1-0
free
realloc
_callnewh
malloc
api-ms-win-crt-math-l1-1-0
floor
api-ms-win-crt-convert-l1-1-0
atoi
_itoa
api-ms-win-crt-locale-l1-1-0
__initialize_lconv_for_unsigned_char
oleaut32
VariantInit
Exports
Exports
StartIS
Sections
.text Size: 432KB - Virtual size: 432KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 151KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 120KB - Virtual size: 209KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ