C:\tool\MikuMikuDance_v932x64\plugin\MMDCloth\MMHackCloth.pdb
Static task
static1
Behavioral task
behavioral1
Sample
542f94d01bac8d52392d479f34781741b71fef708d5ddaef9a60882e028f09a6.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
542f94d01bac8d52392d479f34781741b71fef708d5ddaef9a60882e028f09a6.dll
Resource
win10v2004-20240802-en
General
-
Target
542f94d01bac8d52392d479f34781741b71fef708d5ddaef9a60882e028f09a6
-
Size
29KB
-
MD5
ce42965d2c4cdaf1d6cca37551591c77
-
SHA1
922412eb4b8d2c642d19f20b9ad7007f4cf9982c
-
SHA256
542f94d01bac8d52392d479f34781741b71fef708d5ddaef9a60882e028f09a6
-
SHA512
657ef13f551853ad8b64375515267b39a7faaedb667694768b4b7b14dc92aaf833c3e5c4db40166234dc58731ff6e20c3f4344d4e95da3c3dc06aef10b8fa8cc
-
SSDEEP
384:HoXzqcesbRKQNJCiNWXI3/X7EhmauMDSjNx+1KOueCXgKNktFF+AJAcBNqku:I/AQdt8DSqsXg5tFF+AJTaku
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 542f94d01bac8d52392d479f34781741b71fef708d5ddaef9a60882e028f09a6
Files
-
542f94d01bac8d52392d479f34781741b71fef708d5ddaef9a60882e028f09a6.dll windows:6 windows x64 arch:x64
1fd22f57189ac1af398b1bf0902c247d
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
user32
GetMenuItemInfoW
GetMenu
GetMenuItemCount
GetClassNameA
GetWindowLongPtrW
EnumWindows
GetWindowThreadProcessId
dbghelp
ImageDirectoryEntryToData
kernel32
FormatMessageA
LocalFree
GetModuleFileNameA
VirtualProtect
GetStdHandle
SetConsoleMode
K32GetModuleFileNameExW
GetDllDirectoryA
GetSystemDirectoryW
OpenProcess
GetConsoleMode
GetLastError
SetDllDirectoryA
CloseHandle
LoadLibraryW
GetProcAddress
GetCurrentProcessId
GetModuleHandleW
lstrcmpiA
K32EnumProcessModules
SetDllDirectoryW
AllocConsole
AreFileApisANSI
MultiByteToWideChar
RtlCaptureContext
RtlLookupFunctionEntry
IsDebuggerPresent
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
RtlVirtualUnwind
GetLocaleInfoEx
msvcp140
?_Syserror_map@std@@YAPEBDH@Z
?_Xlength_error@std@@YAXPEBD@Z
?_Winerror_map@std@@YAHH@Z
vcruntime140_1
__CxxFrameHandler4
vcruntime140
memset
_CxxThrowException
__C_specific_handler
wcsstr
__std_exception_copy
__std_exception_destroy
memcmp
memcpy
memmove
__std_type_info_destroy_list
api-ms-win-crt-heap-l1-1-0
free
_callnewh
malloc
api-ms-win-crt-stdio-l1-1-0
freopen_s
__stdio_common_vfprintf
__acrt_iob_func
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_execute_onexit_table
_initterm
_invalid_parameter_noinfo_noreturn
_cexit
api-ms-win-crt-locale-l1-1-0
___lc_codepage_func
Sections
.text Size: 15KB - Virtual size: 14KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 9KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 144B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ