9679d6b5e9790c182f8391f3c686fd99d4be93332f16804d8b24f9bb968329e8

General

Target

9679d6b5e9790c182f8391f3c686fd99d4be93332f16804d8b24f9bb968329e8
Size

10KB
MD5

c0511475a516d39da668c2ed16ae7bfa
SHA1

12bd76fc6546ff67f921ca9249c6ecc9d6032ac4
SHA256

9679d6b5e9790c182f8391f3c686fd99d4be93332f16804d8b24f9bb968329e8
SHA512

64999251918efb705db4bfe69942d766ffbfe2f24ad1d78c8d615fc9888cf8d3a9e0ca52fa942dac790c19d0ab0f141bf401aa704e4d6de84ab121d8de988839
SSDEEP

96:kdp9G5VbC4GbQM1FBZLvCcd01GlRlRTnJ8S/uvsPTTIlzNSWB2g0bkLCDNC:ApgBCHj1FXLCcd0W/uukh1ZWZDN

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
9679d6b5e9790c182f8391f3c686fd99d4be93332f16804d8b24f9bb968329e8

Files

9679d6b5e9790c182f8391f3c686fd99d4be93332f16804d8b24f9bb968329e8
.dll windows:6 windows x64 arch:x64

8cb32fcfb7068fc225db27ccfbed2a1a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

PDB Paths

C:\assemblage_aaai_code\Builds\6732228450600749891wmqxlqbkcu\DLL_C\assemblage_outdir_bin\DLL_Cpp.pdb

Imports

vcruntime140

__C_specific_handler
__std_type_info_destroy_list
memset

api-ms-win-crt-runtime-l1-1-0

_cexit
_execute_onexit_table
_initialize_onexit_table
_configure_narrow_argv
_seh_filter_dll
_initterm_e
_initterm
_initialize_narrow_environment

kernel32

IsDebuggerPresent
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
QueryPerformanceCounter
RtlVirtualUnwind
RtlLookupFunctionEntry
RtlCaptureContext

Exports

Exports

Filtration

Sections

.text
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 216B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 408B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8cb32fcfb7068fc225db27ccfbed2a1a

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

Exports

Exports

Sections

.text Size: 4KB - Virtual size: 3KB

.rdata Size: 3KB - Virtual size: 2KB

.data Size: 512B - Virtual size: 216B

.pdata Size: 512B - Virtual size: 408B

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 512B - Virtual size: 36B

.text
Size: 4KB - Virtual size: 3KB

.rdata
Size: 3KB - Virtual size: 2KB

.data
Size: 512B - Virtual size: 216B

.pdata
Size: 512B - Virtual size: 408B

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 512B - Virtual size: 36B