D:\6\appframe\project\window\asynframe\lib\asynfile.pdb
Static task
static1
Behavioral task
behavioral1
Sample
d7bdfde40b72e2a67eb63a3cd4f37741802a2343f43c205968032cfbf51da362.dll
Resource
win7-20240729-en
Behavioral task
behavioral2
Sample
d7bdfde40b72e2a67eb63a3cd4f37741802a2343f43c205968032cfbf51da362.dll
Resource
win10v2004-20240802-en
General
-
Target
d7bdfde40b72e2a67eb63a3cd4f37741802a2343f43c205968032cfbf51da362
-
Size
170KB
-
MD5
b5830786d1f9c56986783571700dc4c1
-
SHA1
2e124f1bbbf3163edbeba5eea8062e6bf0010746
-
SHA256
d7bdfde40b72e2a67eb63a3cd4f37741802a2343f43c205968032cfbf51da362
-
SHA512
ebd7ee5b89b0856360f414228b70d0e7e1422139ac55c931f527c0a5af01bc6c638c207a192bc29a8e9c7bb8c4a4d08c0279f4f4fbe30084d2077e1a4bff7d1b
-
SSDEEP
3072:e/ez45hIt62vx4CJbF1F8nFufrRcOli7hZn480HMvCxP:lz45hIt62nJbFqqdCh0HMv
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource d7bdfde40b72e2a67eb63a3cd4f37741802a2343f43c205968032cfbf51da362
Files
-
d7bdfde40b72e2a67eb63a3cd4f37741802a2343f43c205968032cfbf51da362.dll windows:6 windows x86 arch:x86
eb88cc98252ff788a34c21fd51d7c727
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
DecodePointer
CloseHandle
RaiseException
GetLastError
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionAndSpinCount
DeleteCriticalSection
GetCurrentProcess
GetVolumeInformationA
InitializeCriticalSection
SetFilePointer
CreateFileA
ReadFile
ReadFileEx
WriteFile
WriteFileEx
GetOverlappedResult
GetSystemInfo
DisableThreadLibraryCalls
OutputDebugStringW
EncodePointer
SetEndOfFile
GetFileSize
ReadDirectoryChangesW
FlushFileBuffers
IsProcessorFeaturePresent
QueryPerformanceCounter
MoveFileA
RemoveDirectoryA
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeCriticalSectionEx
GetCurrentThread
MultiByteToWideChar
WideCharToMultiByte
TryEnterCriticalSection
ExpandEnvironmentStringsA
GetCurrentDirectoryA
CreateDirectoryA
GetFileAttributesA
GetWindowsDirectoryA
GetVersionExA
VirtualQuery
GetModuleFileNameA
IsDebuggerPresent
GetTempPathA
IsBadCodePtr
FindClose
FindFirstFileA
FindNextFileA
FreeLibrary
GetModuleHandleA
GetProcAddress
LoadLibraryA
DeleteFileA
user32
UnregisterClassA
advapi32
AdjustTokenPrivileges
OpenProcessToken
LookupPrivilegeValueA
oleaut32
SysFreeString
shlwapi
PathIsRelativeA
msvcp120
?uflow@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPAD_J@Z
?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JPBD_J@Z
?_BADOFF@std@@3_JB
??_7ios_base@std@@6B@
??_7?$basic_ios@DU?$char_traits@D@std@@@std@@6B@
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_J@Z
?sync@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEHXZ
?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAE_JXZ
?setbuf@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEPAV12@PAD_J@Z
?imbue@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MAEXABVlocale@2@@Z
_Xtime_diff_to_millis2
?_Unlock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
?_Lock@?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAEXXZ
??1?$basic_iostream@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_iostream@DU?$char_traits@D@std@@@std@@QAE@PAV?$basic_streambuf@DU?$char_traits@D@std@@@1@@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@I@Z
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
??1?$basic_ios@DU?$char_traits@D@std@@@std@@UAE@XZ
?_Pninc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAEPADXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UAE@XZ
??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IAE@XZ
?_Ios_base_dtor@ios_base@std@@CAXPAV12@@Z
?_Winerror_map@std@@YAPBDH@Z
?_Syserror_map@std@@YAPBDH@Z
?_Xout_of_range@std@@YAXPBD@Z
?_Xlength_error@std@@YAXPBD@Z
?_Xbad_alloc@std@@YAXXZ
?uncaught_exception@std@@YA_NXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@G@Z
_Thrd_sleep
_Xtime_get_ticks
xtime_get
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@_K@Z
msvcr120
__crtTerminateProcess
__clean_type_info_names_internal
strrchr
strcat_s
strcpy_s
getenv
__crtUnhandledException
_crt_debugger_hook
_except_handler4_common
_initterm_e
_initterm
_malloc_crt
_amsg_exit
__CppXcptFilter
??1type_info@@UAE@XZ
_onexit
__dllonexit
_calloc_crt
_unlock
_lock
?terminate@@YAXXZ
memmove_s
_recalloc
__CxxFrameHandler3
_CxxThrowException
_hypot
??_V@YAXPAX@Z
free
memmove
strlen
memset
memcpy
memchr
??2@YAPAXI@Z
_purecall
??3@YAXPAX@Z
sscanf_s
strstr
sprintf_s
wcslen
?_Id@_CurrentScheduler@details@Concurrency@@SAIXZ
?wait@Concurrency@@YAXI@Z
_stricmp
atol
_atoi64
_vsnprintf
memcmp
strcmp
version
GetFileVersionInfoSizeA
GetFileVersionInfoA
VerQueryValueA
shell32
SHGetSpecialFolderPathA
ole32
IIDFromString
CoCreateGuid
CoTaskMemFree
StringFromIID
Exports
Exports
CreateAsynFramePlugin
Sections
.text Size: 95KB - Virtual size: 95KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 54KB - Virtual size: 53KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 6KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ