E:\AAA\NEXON\dinput8_线上\Release\dinput8.pdb
Static task
static1
Behavioral task
behavioral1
Sample
3507dd9564c02f3e2a748666690a67597278244f6e7f8d5e6c42625c6e78355e.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
3507dd9564c02f3e2a748666690a67597278244f6e7f8d5e6c42625c6e78355e.dll
Resource
win10v2004-20240802-en
General
-
Target
3507dd9564c02f3e2a748666690a67597278244f6e7f8d5e6c42625c6e78355e
-
Size
2.0MB
-
MD5
401122c8e1e5f6a69c32a3122d23e509
-
SHA1
3bf2e8164a814655bcb023a9ff67c35140f756b7
-
SHA256
3507dd9564c02f3e2a748666690a67597278244f6e7f8d5e6c42625c6e78355e
-
SHA512
a20b35e72230fbfaf553355b330446401ad8a8fd9cdbca73a3eb0746855f4127fea3637075639ef4d7c1526048fb60239a8ba3e30db8b34478f45a5da322fa86
-
SSDEEP
49152:03AfEMrCAlw430OlrmKQ2Zcw3inplKdTDYLB1HnaskYzs:03UEMrJlVblrH5cwSpcdYLB4sk
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 3507dd9564c02f3e2a748666690a67597278244f6e7f8d5e6c42625c6e78355e
Files
-
3507dd9564c02f3e2a748666690a67597278244f6e7f8d5e6c42625c6e78355e.dll regsvr32 windows:6 windows x86 arch:x86
f714fd2ea74258e88082cf19ed47a7af
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
DisableThreadLibraryCalls
GetModuleFileNameW
GetModuleHandleA
LoadLibraryA
LocalAlloc
LocalFree
GetModuleFileNameA
ExitProcess
user32
wsprintfW
advapi32
AdjustTokenPrivileges
shell32
SHGetFolderPathW
version
VerQueryValueW
shlwapi
PathFindExtensionW
Exports
Exports
DirectInput8Create
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: - Virtual size: 120KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 52KB - Virtual size: 51KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.detourc Size: - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.detourd Size: - Virtual size: 12B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp0 Size: - Virtual size: 1.5MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.vmp1 Size: 2.0MB - Virtual size: 2.0MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 2KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ