dmstyle.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4e89bdd4c5131077fd1ba2cda27cd686891c83d0d665caad066fade7af0980d4.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
4e89bdd4c5131077fd1ba2cda27cd686891c83d0d665caad066fade7af0980d4.dll
Resource
win10v2004-20240709-en
General
-
Target
4e89bdd4c5131077fd1ba2cda27cd686891c83d0d665caad066fade7af0980d4
-
Size
243KB
-
MD5
b8721081904bfdc0ec78f45cbddcd03d
-
SHA1
ae446a421a06df83cb39e809e9c4a41d7c2243a0
-
SHA256
4e89bdd4c5131077fd1ba2cda27cd686891c83d0d665caad066fade7af0980d4
-
SHA512
86451a2d300d1776f1ffe3c86413f5079cf796a9aad1b0c042d44984a0e43d32075d86748f65423dcc98255b6398b5dfcc6400dd5979d448e14aaf29d19836dd
-
SSDEEP
3072:LNig3llr8RlVJ0lHQ+LdbXYdBUMKApRbS9emc74oYCmoDYihpOXTIEXBJnVc5d1:8g3ljV5eUn+0pihpODne
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4e89bdd4c5131077fd1ba2cda27cd686891c83d0d665caad066fade7af0980d4
Files
-
4e89bdd4c5131077fd1ba2cda27cd686891c83d0d665caad066fade7af0980d4.dll regsvr32 windows:6 windows x86 arch:x86
4d0ccd61d78e7f0ea36687498745e9eb
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
ntdll
_allmul
_allrem
wcstombs
_alldiv
memset
_wcsicmp
ord1
msvcrt
_except_handler4_common
_amsg_exit
_initterm
_XcptFilter
free
malloc
time
srand
rand
_purecall
__CxxFrameHandler3
kernel32
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
QueryPerformanceCounter
InterlockedCompareExchange
Sleep
InterlockedExchange
MultiByteToWideChar
GetModuleFileNameA
lstrlenA
InterlockedIncrement
LeaveCriticalSection
EnterCriticalSection
InitializeCriticalSection
InterlockedDecrement
DeleteCriticalSection
DisableThreadLibraryCalls
advapi32
RegCreateKeyExA
RegSetValueExA
RegOpenKeyExA
RegEnumKeyA
RegCloseKey
RegDeleteKeyA
ole32
CoCreateInstance
CoTaskMemFree
StringFromCLSID
CreateStreamOnHGlobal
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 96KB - Virtual size: 96KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 143KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ