msclmd.pdb
Static task
static1
Behavioral task
behavioral1
Sample
cf4bb719f0b7ce644a4605900d8c11d0N.dll
Resource
win10v2004-20240709-en
General
-
Target
cf4bb719f0b7ce644a4605900d8c11d0N.exe
-
Size
343KB
-
MD5
cf4bb719f0b7ce644a4605900d8c11d0
-
SHA1
bba56d337e2c7c1caf376bd76d6a16b269aa68c3
-
SHA256
e8c6aaea57a309045609cd1c5089f7c252f5335f8035a765de2d65a00ff69f0f
-
SHA512
1c68a9c894488d59f7d7cb459b2acdfb0cd954c8b55e98be5f80ae7a7bbaa16cb5763c838c3546ed69b3b29fe560adf93ee033c09a117487041e96a667e3ebae
-
SSDEEP
6144:9u5MR5ioq4vzNMkfu4OrmFF4ZzexvBQ/jz9Rihp4nNCgPE:9u6R5ij4vzNMkfuFmFeBexvy/jzXNnM
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource cf4bb719f0b7ce644a4605900d8c11d0N.exe
Files
-
cf4bb719f0b7ce644a4605900d8c11d0N.exe.dll windows:10 windows x86 arch:x86
1f9d9c382dcad1e7cab0f38def9fd398
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
swscanf_s
memcpy
_vsnwprintf
sscanf_s
_XcptFilter
_except_handler4_common
free
malloc
_initterm
_stricmp
_vsnprintf
_amsg_exit
memset
winscard
SCardWriteCacheW
SCardStatusW
g_rgSCardT1Pci
SCardControl
SCardReadCacheW
SCardFreeMemory
SCardTransmit
g_rgSCardT0Pci
SCardGetStatusChangeW
kernel32
HeapAlloc
QueryPerformanceCounter
HeapFree
GetTickCount
GetSystemTimeAsFileTime
GetCurrentProcessId
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
Sleep
LocalFree
GetLastError
GetCurrentThreadId
RaiseException
GetProcessHeap
advapi32
RegGetValueW
SystemFunction036
UnregisterTraceGuids
RegisterTraceGuidsW
GetTraceEnableLevel
GetTraceEnableFlags
GetTraceLoggerHandle
TraceMessage
crypt32
CryptDecodeObject
CertFreeCertificateContext
CryptEncodeObjectEx
CertCreateCertificateContext
rpcrt4
RpcStringFreeW
UuidToStringW
UuidCreate
user32
IsWindow
bcrypt
BCryptCloseAlgorithmProvider
BCryptOpenAlgorithmProvider
BCryptGetProperty
BCryptDestroyKey
BCryptEncrypt
BCryptGenerateSymmetricKey
Exports
Exports
CardAcquireContext
CardAcquireContextInternal
Sections
.text Size: 186KB - Virtual size: 186KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 151KB - Virtual size: 151KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ