AccessibleMarshal.pdb
Static task
static1
Behavioral task
behavioral1
Sample
708111c14a217177cc6e276c39d88ffb1ae856a41d1734f8df842583ae21fb10.dll
Resource
win10v2004-20240802-en
General
-
Target
708111c14a217177cc6e276c39d88ffb1ae856a41d1734f8df842583ae21fb10
-
Size
18KB
-
MD5
7104707ad6800405b484ad09b80369dc
-
SHA1
1226730d7606da958e56a5d0c78c14ebf18ce5b3
-
SHA256
708111c14a217177cc6e276c39d88ffb1ae856a41d1734f8df842583ae21fb10
-
SHA512
fa899886d4f14399c3eb287a1c0057b99e3b43ac241a8fd6f5624d549c33c78983d2871bdc95ae0d0b60327a8b6cc1dbad15f4939c35d4e7b16ce61f20fa6ebd
-
SSDEEP
192:+kGr3C0Hfft0ShDeDWJW+jOgVuADBPgdrz8EcJGl+Rhedocy7l/t+:+9WoiYBJxj3VlmME+GeIocyB/t+
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 708111c14a217177cc6e276c39d88ffb1ae856a41d1734f8df842583ae21fb10
Files
-
708111c14a217177cc6e276c39d88ffb1ae856a41d1734f8df842583ae21fb10.dll regsvr32 windows:10 windows x86 arch:x86
fd91015b9329f78379a3a33fd0c26c48
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
DisableThreadLibraryCalls
GetCurrentProcess
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
IsProcessorFeaturePresent
QueryPerformanceCounter
SetUnhandledExceptionFilter
TerminateProcess
UnhandledExceptionFilter
rpcrt4
CStdStubBuffer_AddRef
CStdStubBuffer_Connect
CStdStubBuffer_CountRefs
CStdStubBuffer_DebugServerQueryInterface
CStdStubBuffer_DebugServerRelease
CStdStubBuffer_Disconnect
CStdStubBuffer_Invoke
CStdStubBuffer_IsIIDSupported
CStdStubBuffer_QueryInterface
IUnknown_AddRef_Proxy
IUnknown_QueryInterface_Proxy
IUnknown_Release_Proxy
NdrCStdStubBuffer_Release
NdrDllCanUnloadNow
NdrDllGetClassObject
NdrDllRegisterProxy
NdrDllUnregisterProxy
NdrOleAllocate
NdrOleFree
oleaut32
BSTR_UserFree
BSTR_UserMarshal
BSTR_UserSize
BSTR_UserUnmarshal
vcruntime140
__std_type_info_destroy_list
_except_handler4_common
memcmp
memset
api-ms-win-crt-runtime-l1-1-0
_cexit
_configure_narrow_argv
_execute_onexit_table
_initialize_narrow_environment
_initialize_onexit_table
_initterm
_initterm_e
_seh_filter_dll
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.orpc Size: 512B - Virtual size: 263B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rsrc Size: 7KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 1024B - Virtual size: 612B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ