D:\BambooBuild\BDNP-MIMEPACKER5-WPACK\Static Release\x64\mimepack.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f12b87a181d5c361e641b1091d1118ad48429b6a311e05abd4779d2cf83605c8.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
f12b87a181d5c361e641b1091d1118ad48429b6a311e05abd4779d2cf83605c8.dll
Resource
win10v2004-20240709-en
General
-
Target
f12b87a181d5c361e641b1091d1118ad48429b6a311e05abd4779d2cf83605c8
-
Size
316KB
-
MD5
e2ea63888489e95fb8071770fea70832
-
SHA1
a0952ff2c4d628daf2457ce9072ff48ff449d77a
-
SHA256
f12b87a181d5c361e641b1091d1118ad48429b6a311e05abd4779d2cf83605c8
-
SHA512
3de7803d7e875bec9d8411ddddbf69fa4c15c79eb3452ca6ce15d1bc0f1ff874acad091849fd340081063ea7c2c9f75912812695a6763ab860b48b0bd1b8a5ea
-
SSDEEP
6144:6bTf/Rbl4dJarb5XI9jwUzj2yTjTCBg5XRXEU0JnM:6Pf/Rbl4nWXAjwUzj2yPT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f12b87a181d5c361e641b1091d1118ad48429b6a311e05abd4779d2cf83605c8
Files
-
f12b87a181d5c361e641b1091d1118ad48429b6a311e05abd4779d2cf83605c8.dll windows:6 windows x64 arch:x64
09a7f5d3f5d391748a4340820d97b88e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetCurrentThreadId
DeleteCriticalSection
GetLastError
LoadLibraryA
GetProcAddress
FreeLibrary
IsValidCodePage
MultiByteToWideChar
WideCharToMultiByte
GetTempPathA
GetLocalTime
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
RtlUnwindEx
InterlockedFlushSList
RtlPcToFileHeader
RaiseException
SetLastError
EncodePointer
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
LoadLibraryExW
ReadFile
CreateFileW
GetDriveTypeW
GetFileInformationByHandle
GetFileType
CloseHandle
PeekNamedPipe
SystemTimeToTzSpecificLocalTime
FileTimeToSystemTime
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
WriteFile
GetConsoleOutputCP
GetConsoleMode
HeapAlloc
HeapFree
GetStdHandle
SetFilePointerEx
ReadConsoleW
HeapReAlloc
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
CompareStringW
LCMapStringW
MoveFileExW
GetCurrentDirectoryW
GetFullPathNameW
SetStdHandle
GetFileSizeEx
FindClose
FindFirstFileExW
FindNextFileW
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
SetEnvironmentVariableW
GetProcessHeap
DeleteFileW
SetEndOfFile
GetStringTypeW
FlushFileBuffers
GetTimeZoneInformation
HeapSize
WriteConsoleW
Exports
Exports
ReleaseInterface
ReleaseInterfaceA
ReleaseInterfaceW
RequestInterface
RequestInterfaceA
RequestInterfaceW
xRegister
xRegisterA
xRegisterW
xUnregister
xUnregisterA
xUnregisterW
Sections
.text Size: 213KB - Virtual size: 212KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 82KB - Virtual size: 82KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 4KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 11KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 252B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ