C:\assemblage_aaai_code\Builds\343996780883862398osbkcksxdi\D2UberMod\assemblage_outdir_bin\D2UberMod.pdb
Static task
static1
Behavioral task
behavioral1
Sample
18d6b9d2978fb26a36ed65d267c909e5ef467cace624306c167806a5e4a1e2eb.dll
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
18d6b9d2978fb26a36ed65d267c909e5ef467cace624306c167806a5e4a1e2eb.dll
Resource
win10v2004-20240802-en
General
-
Target
18d6b9d2978fb26a36ed65d267c909e5ef467cace624306c167806a5e4a1e2eb
-
Size
99KB
-
MD5
feaeccd5576a0decd32f2ea623eee06a
-
SHA1
57cf16b43c040cae9d5745b72685fca3dfb5fe85
-
SHA256
18d6b9d2978fb26a36ed65d267c909e5ef467cace624306c167806a5e4a1e2eb
-
SHA512
96cdd1bd03c7f21029850a4bd89df71fa8705ac77e7c2cc53ed9ed16483194c48bb99078e549cf63bae64797ae4989cbfb8b5a952f1076087b4394a67c9131b6
-
SSDEEP
1536:/pfjX2LgnX6WTcJx9my26Y3YLeQHYzNSGsJxvP5he:l4gXLce3YLeQHYzNSGsJxvP
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 18d6b9d2978fb26a36ed65d267c909e5ef467cace624306c167806a5e4a1e2eb
Files
-
18d6b9d2978fb26a36ed65d267c909e5ef467cace624306c167806a5e4a1e2eb.dll windows:6 windows x86 arch:x86
f0b88b3b5fcac0683db24e761247e415
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
version
GetFileVersionInfoA
VerQueryValueA
GetFileVersionInfoSizeA
msvcp140d
?_Random_device@std@@YAIXZ
?_Xbad_function_call@std@@YAXXZ
?_Xlength_error@std@@YAXPBD@Z
??1_Lockit@std@@QAE@XZ
??0_Lockit@std@@QAE@H@Z
kernel32
SetUnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
TerminateProcess
GetModuleHandleW
GetStartupInfoW
UnhandledExceptionFilter
IsDebuggerPresent
GetCurrentProcess
VirtualProtect
ReadProcessMemory
GetModuleHandleA
GetProcAddress
LoadLibraryA
GetCurrentThreadId
IsProcessorFeaturePresent
vcruntime140d
__current_exception_context
_except_handler4_common
__current_exception
__std_exception_destroy
_purecall
__CxxFrameHandler3
memcpy
memset
__std_exception_copy
memmove
_CxxThrowException
__std_type_info_destroy_list
ucrtbased
_invalid_parameter
_invalid_parameter_noinfo
_CrtDbgReport
_errno
_wassert
_libm_sse2_cos_precise
_libm_sse2_sin_precise
_libm_sse2_sqrt_precise
log2
ceil
_seh_filter_dll
_configure_narrow_argv
_initialize_narrow_environment
_initialize_onexit_table
_register_onexit_function
_execute_onexit_table
_crt_atexit
_crt_at_quick_exit
_cexit
_callnewh
malloc
_initterm
_initterm_e
_free_dbg
terminate
Sections
.textbss Size: - Virtual size: 64KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.text Size: 75KB - Virtual size: 75KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 12KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 1KB - Virtual size: 8KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.msvcjmc Size: 1024B - Virtual size: 880B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.00cfg Size: 512B - Virtual size: 265B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 1024B - Virtual size: 806B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ