C:\a\_work\1\b\Win32\Release\ComponentsLib.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fd724c097b8b5ffe116074feb8f241deef1546d5eed459f9dcf1602087b18408.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
fd724c097b8b5ffe116074feb8f241deef1546d5eed459f9dcf1602087b18408.dll
Resource
win10v2004-20240802-en
General
-
Target
fd724c097b8b5ffe116074feb8f241deef1546d5eed459f9dcf1602087b18408
-
Size
779KB
-
MD5
13775edee4dd9a95dfb43665d972c5cb
-
SHA1
cd9fc321897d366e51ffacaf5f7a8b8aca20a682
-
SHA256
fd724c097b8b5ffe116074feb8f241deef1546d5eed459f9dcf1602087b18408
-
SHA512
b75113799aba8304d43c2e734672a0944f9fecd0830fac65ca1e604eb8dcf4bc37d23690e38103dd152f8192356839f486538f4051ff88daf9ba40f6a6cf3f78
-
SSDEEP
24576:AV+l4NT3x2hJaP8ugOVUTXyiVOateJ7nkoEXFs:O+l4N1qJaE1OVUjyKOatepLEXFs
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd724c097b8b5ffe116074feb8f241deef1546d5eed459f9dcf1602087b18408
Files
-
fd724c097b8b5ffe116074feb8f241deef1546d5eed459f9dcf1602087b18408.dll windows:6 windows x86 arch:x86
6b4e53abe1db5a833af93b1a37c25b5b
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetSystemTimeAsFileTime
GetProcAddress
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
LocalFree
FormatMessageW
GetUserDefaultLangID
FreeLibrary
LoadLibraryExW
ReleaseSRWLockShared
AcquireSRWLockShared
GetNumberFormatW
QueryPerformanceFrequency
QueryPerformanceCounter
MultiByteToWideChar
ReadFile
CreateFileW
CloseHandle
GetFileAttributesW
UnhandledExceptionFilter
CreateDirectoryW
GetCommandLineW
GetCurrentProcess
FileTimeToLocalFileTime
ExpandEnvironmentStringsW
DuplicateHandle
Sleep
GetFileInformationByHandle
OutputDebugStringW
GetCurrentThread
DecodePointer
GetFileSize
RaiseException
GetConsoleMode
GetConsoleOutputCP
FileTimeToSystemTime
GetCurrentThreadId
GetCurrentProcessId
VerSetConditionMask
VerifyVersionInfoW
InitializeCriticalSectionEx
GetModuleHandleW
FlushFileBuffers
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindNextFileW
GetModuleFileNameW
GetLastError
GetModuleHandleExW
GetPrivateProfileStringW
GetEnvironmentVariableW
EnterCriticalSection
LeaveCriticalSection
GetProcessHeap
HeapAlloc
HeapFree
HeapReAlloc
HeapSize
HeapDestroy
InitializeConditionVariable
FindResourceExW
FindResourceW
LoadResource
LockResource
SizeofResource
GetTickCount
RtlCaptureStackBackTrace
DeleteCriticalSection
SleepConditionVariableCS
WakeAllConditionVariable
WriteFile
FindFirstFileExW
FindClose
IsDebuggerPresent
WakeConditionVariable
SleepConditionVariableSRW
TryAcquireSRWLockExclusive
WaitForSingleObjectEx
GetExitCodeThread
WideCharToMultiByte
GetStringTypeW
EncodePointer
LCMapStringEx
GetCPInfo
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
TerminateProcess
GetStartupInfoW
InitializeSListHead
RtlUnwind
InterlockedFlushSList
SetLastError
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
CreateThread
ExitThread
FreeLibraryAndExitThread
ExitProcess
GetStdHandle
GetFileType
LCMapStringW
GetLocaleInfoW
IsValidLocale
GetUserDefaultLCID
EnumSystemLocalesW
SetFilePointerEx
WriteConsoleW
advapi32
RegQueryValueExW
OpenThreadToken
RegOpenKeyExW
SetThreadToken
RegCloseKey
RegEnumValueW
ole32
CoUninitialize
CoInitializeSecurity
CoInitializeEx
oleaut32
GetErrorInfo
SysFreeString
SetErrorInfo
CreateErrorInfo
SysAllocString
datalayer
AcnSerializeNodes
AcnFinalizeSerialization
AcnGetParent
AcnRemoveChild
AcnGetChildByIndex
AcnGetAttribute
AcnGetAttributeNames
AcnAddChild
AcnStartSerialization
AcnCloneNode
AcnGetChildByName
AcnGetNodeName
AcnGetNodeType
AcnSetAttribute
AcnCreateNode
AcnDuplicateNodeHandle
AcnCloseNodeHandle
AcnCloseSerializationContext
StgCreateStorage
AcnDeserializeNodes
AcnCloseDeserializationContext
AcnStartDeserialization
AcnSetNodeName
AcnGetChildCount
shlwapi
PathIsRelativeW
PathCombineW
Exports
Exports
CLCreateInstance
CLCreateInstanceByAlias
CLCreateInstancesContainer
CLEnterScope
CLGetNamedInstance
CLGetScopeContainer
CLInitialize
CLLoadConfiguration
CLSetNamedInstance
CLShutdown
GetComponentsModuleObject
IComponentBase_AddRef
IComponentBase_QueryInterface
IComponentBase_Release
Sections
.text Size: 629KB - Virtual size: 628KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 118KB - Virtual size: 118KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 23KB - Virtual size: 22KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ