C:\Users\33870\source\repos\Dll2\x64\Release\Dll2.pdb
Static task
static1
Behavioral task
behavioral1
Sample
e80995301691ce16acc84385e749bc22853181cfcda5fda263775413a0034edd.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
e80995301691ce16acc84385e749bc22853181cfcda5fda263775413a0034edd.dll
Resource
win10v2004-20240802-en
General
-
Target
e80995301691ce16acc84385e749bc22853181cfcda5fda263775413a0034edd
-
Size
10KB
-
MD5
ae0c5b1b9fdc731ed109da96276a7fc7
-
SHA1
489f4fd5075185d8e559c023bf12984f89cd12cc
-
SHA256
e80995301691ce16acc84385e749bc22853181cfcda5fda263775413a0034edd
-
SHA512
3e152d7c41818db69542494f337090f7d9e4b334012a1ca940e438bb7da463c2e25e0bd695b4515f5df6cb6b619e055dc196b07b246a25460db292d550681606
-
SSDEEP
96:EsDNFhCCAiAQfu54mhFMu5Ivv18r7bCNJ6UqCsIaXON5Jv/sg5MOA0ycXAk:ERC6QW54BCmAJnXW5w10yc
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource e80995301691ce16acc84385e749bc22853181cfcda5fda263775413a0034edd
Files
-
e80995301691ce16acc84385e749bc22853181cfcda5fda263775413a0034edd.dll windows:6 windows x64 arch:x64
928b1ce4cbb9a8f02eb9fd8235c7ad41
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
user32
MessageBoxW
vcruntime140
memset
__std_type_info_destroy_list
__C_specific_handler
memcpy
api-ms-win-crt-runtime-l1-1-0
_cexit
_execute_onexit_table
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_narrow_environment
kernel32
GetSystemTimeAsFileTime
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
InitializeSListHead
UnhandledExceptionFilter
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
Exports
Exports
rundll
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 3KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 512B - Virtual size: 432B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 44B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ