dmcompos.pdb
Static task
static1
Behavioral task
behavioral1
Sample
8255684b491d8f80568eb60cff51d620N.dll
Resource
win10v2004-20240802-en
General
-
Target
8255684b491d8f80568eb60cff51d620N.exe
-
Size
213KB
-
MD5
8255684b491d8f80568eb60cff51d620
-
SHA1
87b97e1819c5fe9c888ba02b5298ba72b1f793c6
-
SHA256
d3d197e953eacd36dafcb4853f7ea97d3b59c0d39c63670655871edc8797b1f5
-
SHA512
2a10b468cd1d77bca26c6195651ad1dab31d10913e20d407e44ddc3f49fa625365414dca422f70a58ccc586d4dd21a06ff06036bceede3baa9dca9cc9739b784
-
SSDEEP
3072:O+s0jl0u/lfntkoMRbSgZQgsS4iYCmoBnihpbcKIMXBJGTcjuGc/S:OGtfnCXWVSihpbJGLf/
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 8255684b491d8f80568eb60cff51d620N.exe
Files
-
8255684b491d8f80568eb60cff51d620N.exe.dll regsvr32 windows:10 windows x86 arch:x86
1dae2ff87fcf69edda40cb6029f0e34c
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
ntdll
memset
wcstombs
msvcrt
free
malloc
_amsg_exit
time
_initterm
_purecall
rand
srand
__CxxFrameHandler3
_except_handler4_common
_XcptFilter
api-ms-win-core-libraryloader-l1-2-0
DisableThreadLibraryCalls
GetModuleFileNameA
api-ms-win-core-synch-l1-1-0
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DeleteCriticalSection
api-ms-win-core-com-l1-1-0
StringFromCLSID
CoTaskMemFree
CoCreateInstance
CreateStreamOnHGlobal
api-ms-win-core-registry-l1-1-0
RegCloseKey
RegSetValueExA
RegCreateKeyExA
RegOpenKeyExA
api-ms-win-core-string-obsolete-l1-1-0
lstrlenA
api-ms-win-core-registry-l2-1-0
RegEnumKeyA
RegDeleteKeyA
api-ms-win-core-string-l1-1-0
MultiByteToWideChar
api-ms-win-core-synch-l1-2-0
Sleep
api-ms-win-core-errorhandling-l1-1-0
UnhandledExceptionFilter
SetUnhandledExceptionFilter
api-ms-win-core-processthreads-l1-1-0
GetCurrentProcess
GetCurrentThreadId
GetCurrentProcessId
TerminateProcess
api-ms-win-core-profile-l1-1-0
QueryPerformanceCounter
api-ms-win-core-sysinfo-l1-1-0
GetTickCount
GetSystemTimeAsFileTime
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 64KB - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 1024B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 143KB - Virtual size: 143KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ