dc1c3bf043cdc3007555f1c8254c0abe8bad0551e14529b30ac1803b984352eb

General

Target

dc1c3bf043cdc3007555f1c8254c0abe8bad0551e14529b30ac1803b984352eb
Size

9KB
MD5

64709643b7a93a7b313bdf5ed72a8d1e
SHA1

f2f6076e18c2142de7b6182e7268747cde3817a0
SHA256

dc1c3bf043cdc3007555f1c8254c0abe8bad0551e14529b30ac1803b984352eb
SHA512

bb68bff15735eadfbde0a13c58c4dc9b540909e3082e02236f99818705ca599f659dd10d224f9ff036ced0d4a1a8b574e05db2a87702df8ec564eb76e296ede3
SSDEEP

96:ml88XKgpuHufzyfQnStNnSSsw+zllFhJGuJ1zAU9xFyB1hkb9LSn3LGiu1oB:mpXKCGczkbl7+zvFFJhW6Lk3Ki

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
dc1c3bf043cdc3007555f1c8254c0abe8bad0551e14529b30ac1803b984352eb

Files

dc1c3bf043cdc3007555f1c8254c0abe8bad0551e14529b30ac1803b984352eb
.dll windows:6 windows x86 arch:x86

5e0b3c92436f813acf560249ca944a20

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\assemblage\Builds\5811920066118081154sbboyazceq\ClassFromRTTI-master\TestDLL\assemblage_outdir_bin\TestDLL.pdb

Imports

vcruntime140

memset
__std_type_info_destroy_list
_CxxThrowException
__std_exception_destroy
__std_exception_copy
_except_handler4_common

api-ms-win-crt-heap-l1-1-0

malloc
free
_callnewh

api-ms-win-crt-runtime-l1-1-0

_execute_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_onexit_table
_cexit

kernel32

InitializeSListHead
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
IsDebuggerPresent
UnhandledExceptionFilter
GetSystemTimeAsFileTime

Exports

Exports

?g_pTestingDLL@@3PAVTestingDLL@@A

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 496B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5e0b3c92436f813acf560249ca944a20

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 496B

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 496B