rdvgocl32.pdb
Static task
static1
Behavioral task
behavioral1
Sample
4802df56d00c3eb83b4cfd30069b65e0N.dll
Resource
win10v2004-20240802-en
General
-
Target
4802df56d00c3eb83b4cfd30069b65e0N.exe
-
Size
319KB
-
MD5
4802df56d00c3eb83b4cfd30069b65e0
-
SHA1
26e17c7ffa68392164e30775c7a637d20c83edc2
-
SHA256
182c1bb716fb81895b8e3a77256683fbb20e88e974465c2132c3d73b46fd0ebd
-
SHA512
9b27a4ba9ce7063905ddcf2b61f607fe4fc0c5d2ba188fa66939415b1269066605e731c84da9669be3699e98b62dee1e8fda92c66f5ede8b9a7a049f1840941d
-
SSDEEP
6144:/Gzay3I5h6ICewKcXtGGXggyQYihpCjYIqiR:uzay3enCeLcXtGcybfqiR
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 4802df56d00c3eb83b4cfd30069b65e0N.exe
Files
-
4802df56d00c3eb83b4cfd30069b65e0N.exe.dll windows:10 windows x86 arch:x86
e8f555e100e77869c3b0c15e9ca7c86c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
msvcrt
?terminate@@YAXXZ
_onexit
__dllonexit
_unlock
_lock
_initterm
free
_amsg_exit
_XcptFilter
memmove
??1type_info@@UAE@XZ
_except_handler4_common
_beginthreadex
_endthreadex
memcmp
memcpy
_CxxThrowException
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@ABQBDH@Z
??0exception@@QAE@ABQBD@Z
_callnewh
malloc
memcpy_s
_purecall
??_V@YAXPAX@Z
??3@YAXPAX@Z
__CxxFrameHandler3
memchr
memset
advapi32
GetTraceEnableFlags
RegisterTraceGuidsA
GetTraceEnableLevel
GetTraceLoggerHandle
TraceMessage
UnregisterTraceGuids
kernel32
TlsGetValue
TlsSetValue
WaitForMultipleObjects
AcquireSRWLockShared
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
SleepConditionVariableSRW
WakeAllConditionVariable
CreateFileA
GetFileSizeEx
GetLastError
ResetEvent
CreateEventA
CreateThreadpool
SetThreadpoolThreadMaximum
SetThreadpoolThreadMinimum
CreateThreadpoolCleanupGroup
CloseHandle
WaitForSingleObject
CloseThreadpoolCleanupGroupMembers
CloseThreadpoolCleanupGroup
CloseThreadpool
TrySubmitThreadpoolCallback
SetEvent
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
ReadFile
ReleaseSRWLockShared
TlsFree
GetModuleHandleW
Sleep
TlsAlloc
InitializeSRWLock
GetProcAddress
user32
EnumDisplayDevicesA
gdi32
CreateDCA
DeleteDC
rfxvmt
RfxVmtReadChannel
RfxVmtWriteChannel
RfxVmtCloseChannel
RfxVmtGetDataAvailableEvent
RfxVmtCreateChannel
Exports
Exports
DllMain
clGetExtensionFunctionAddress
clIcdGetPlatformIDsKHR
Sections
.text Size: 161KB - Virtual size: 161KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 150KB - Virtual size: 150KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ