msdia80.pdb
Static task
static1
Behavioral task
behavioral1
Sample
6d921c9adb6fd8b251d54cbd93956c90N.dll
Resource
win7-20240704-en
General
-
Target
6d921c9adb6fd8b251d54cbd93956c90N.exe
-
Size
667KB
-
MD5
6d921c9adb6fd8b251d54cbd93956c90
-
SHA1
b8394dbdc3fd8ad1638ae363e839773ca92cf482
-
SHA256
e688fd1f59f8b06fb227eddd04c0786d0d35c00a1b43a03ee9f1c331aa06bed4
-
SHA512
e510cb62c6c6f1698babc2769797272b87937f253012b6049ff44da9ef947c40878e884ee8ca4f0cb8678b6e1bafda8f1ff1c06a5e8422fd6154661a200d6954
-
SSDEEP
12288:rscuWja/7ff/RwkK04Vve+u5spKZQdyxMfgjhiK:oOja/7ff/RVKReOQf
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6d921c9adb6fd8b251d54cbd93956c90N.exe
Files
-
6d921c9adb6fd8b251d54cbd93956c90N.exe.dll regsvr32 windows:5 windows x86 arch:x86
e6825e46f3686f8468fc60f6f7e532ea
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
InterlockedDecrement
InterlockedIncrement
GetSystemInfo
GetVersion
HeapAlloc
GetProcessHeap
HeapFree
LocalAlloc
LocalFree
DisableThreadLibraryCalls
MultiByteToWideChar
SizeofResource
LockResource
LoadResource
FindResourceW
GetModuleFileNameW
GetModuleFileNameA
EnterCriticalSection
LeaveCriticalSection
WideCharToMultiByte
LCMapStringW
LCMapStringA
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileW
UnmapViewOfFile
SetLastError
GetLastError
GetProcAddress
FreeLibrary
InterlockedExchange
LoadLibraryA
RaiseException
GetCurrentThreadId
GetCommandLineA
GetVersionExA
GetModuleHandleA
ExitProcess
TlsGetValue
TlsAlloc
TlsSetValue
TlsFree
Sleep
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapDestroy
HeapCreate
VirtualFree
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
UnhandledExceptionFilter
SetUnhandledExceptionFilter
WriteFile
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
RtlUnwind
VirtualAlloc
HeapReAlloc
HeapSize
ReadFile
SetFilePointer
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
SetFileAttributesW
GetFileAttributesW
CopyFileW
SetFileAttributesA
GetFileAttributesA
CopyFileA
DeleteFileW
DeleteFileA
DeviceIoControl
CreateFileMappingW
InitializeCriticalSectionAndSpinCount
GetCurrentDirectoryW
ExpandEnvironmentStringsW
ExpandEnvironmentStringsA
GetDriveTypeA
MapViewOfFileEx
FlushViewOfFile
GetFullPathNameA
GetFullPathNameW
GetCurrentDirectoryA
SetEnvironmentVariableW
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VSDllRegisterServer
VSDllUnregisterServer
Sections
.text Size: 515KB - Virtual size: 515KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 9KB - Virtual size: 18KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 38KB - Virtual size: 38KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.rmnet Size: 56KB - Virtual size: 60KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE