audiodev.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d72a50d41eeca65d26646fb728604756598cf8ed36ea9dcf5148c37446418499.dll
Resource
win10v2004-20240704-en
General
-
Target
d72a50d41eeca65d26646fb728604756598cf8ed36ea9dcf5148c37446418499
-
Size
377KB
-
MD5
63e646f1d299cd1574324708487c5e7f
-
SHA1
08eb16902ab673cdd70a88629c2b02a41aaed3bb
-
SHA256
d72a50d41eeca65d26646fb728604756598cf8ed36ea9dcf5148c37446418499
-
SHA512
9ab5c71227fcf8ca53a978b831e983591d597bdcddeaa6a9bb05b1585aaedd9894d49dd54140a4dbdbd6a0e2c5e47623fff7b2f624b9ccae0eec8350edb29682
-
SSDEEP
6144:5cAhBo1cH5KLv8XImu7l/0ebBXNICnMj++1hFeihp7j2ifAoi:qvcH5KLvEImsnXeWUhDyif5
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d72a50d41eeca65d26646fb728604756598cf8ed36ea9dcf5148c37446418499
Files
-
d72a50d41eeca65d26646fb728604756598cf8ed36ea9dcf5148c37446418499.dll regsvr32 windows:10 windows x86 arch:x86
673f05cdb64d67595c750107e3e2f90d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
memcpy
_vsnwprintf
_initterm
malloc
free
_amsg_exit
wcsnlen
strnlen
_XcptFilter
_wtoi
_except_handler4_common
memset
kernel32
RegSetValueExW
FreeEnvironmentStringsA
GetEnvironmentStringsW
GlobalMemoryStatusEx
GetLocalTime
FreeEnvironmentStringsW
GetVersionExW
DeviceIoControl
GetDiskFreeSpaceW
GlobalFree
GlobalAlloc
GlobalReAlloc
LocalFree
GetLastError
LocalAlloc
EnterCriticalSection
LeaveCriticalSection
Sleep
CreateMutexW
WaitForSingleObject
ReleaseMutex
CloseHandle
CreateThread
GetExitCodeThread
GetSystemTime
SystemTimeToFileTime
UnmapViewOfFile
DeleteFileW
GetTempPathW
CreateFileW
CreateFileMappingW
MapViewOfFile
ReadFile
SetFilePointer
lstrcmpW
RegCreateKeyExW
GlobalSize
GlobalLock
GlobalUnlock
GetCurrentProcessId
GetModuleFileNameW
CreateActCtxW
ActivateActCtx
DeactivateActCtx
ReleaseActCtx
GetModuleHandleW
GetLocaleInfoEx
GetUserPreferredUILanguages
HeapAlloc
GetProcessHeap
HeapFree
InitializeCriticalSection
DeleteCriticalSection
GetSystemDirectoryW
LoadLibraryW
GetProcAddress
FreeLibrary
SetEvent
CreateEventW
WaitForMultipleObjects
FormatMessageW
GetLocaleInfoW
GetNumberFormatW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentThreadId
GetSystemTimeAsFileTime
GetTickCount
DelayLoadFailureHook
lstrcmpiW
ResolveDelayLoadedAPI
advapi32
RegCloseKey
RegQueryValueExW
RegOpenKeyExW
user32
GetShellWindow
GetSubMenu
LoadMenuW
DialogBoxParamW
GetDlgItem
GetMenuItemCount
GetMenuItemInfoW
RegisterClipboardFormatW
DestroyWindow
GetLastActivePopup
SwitchToThisWindow
SendMessageTimeoutW
GetWindowThreadProcessId
GetClassNameW
GetWindow
FindWindowW
CreateWindowExW
RegisterClassW
LoadCursorW
GetClassInfoW
SetWindowTextW
KillTimer
SetTimer
WinHelpW
SendDlgItemMessageW
DestroyMenu
TrackPopupMenu
SetMenuDefaultItem
CopyImage
DestroyIcon
PostMessageW
SetFocus
ShowWindow
SetDlgItemTextW
LoadStringW
LoadIconW
SetWindowLongW
EndDialog
SendMessageW
RemoveMenu
GetWindowLongW
DefWindowProcW
shlwapi
StrToIntW
ord174
SHGetThreadRef
SHStrDupW
StrRetToBufW
ord10
ord7
ord9
ord8
StrFormatKBSizeW
PathRemoveBlanksW
StrCmpW
ord172
ord354
PathFindExtensionW
PathFindFileNameW
ord388
StrCmpIW
ord168
ord176
AssocCreate
ord199
StrFormatByteSizeW
ord16
StrCmpLogicalW
StrRChrW
ord158
ord219
PathRemoveFileSpecW
PathAppendW
PathCombineW
wmvcore
WMCreateEditor
ntdll
RtlGetPersistedStateLocation
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_CDefFolderMenu_MergeMenu@16
_CIDLData_CreateFromIDArray@16
Sections
.text Size: 144KB - Virtual size: 143KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.didat Size: 512B - Virtual size: 296B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 76KB - Virtual size: 76KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 147KB - Virtual size: 146KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ