D:\a\Dexterion\Dexterion\x64\Release\Dexterion.pdb
Static task
static1
Behavioral task
behavioral1
Sample
Dexterion-2.2.1.exe
Resource
win10v2004-20240802-en
General
-
Target
Dexterion-2.2.1.exe
-
Size
1.6MB
-
MD5
d9e7121670d1f4c28edfdea3f4096db4
-
SHA1
d4ba21ead7506e637b4a47706d3eb4c5489f75d7
-
SHA256
fcc4901d678f1911bac09d80759ae2ca6aeed6d67be1d4a73a6fa95256a56969
-
SHA512
f3eb8e6eb2cbf183e3033cdac99b71a7b08f3f3d1ee084ef9be7a94a6d8d7860c830ddc428d0c403d0a6b34a15c123b9389cbdb4cf069e34f6326a10cde8752f
-
SSDEEP
24576:0p8/6DvShU0ADdPUpIvG3A/0bldt0h0lhSMXlGw9znCCzNXurfs26IT4iEHI4:g8fU0AD4IvG3AcldDddn7XIfs/CEHI
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource Dexterion-2.2.1.exe
Files
-
Dexterion-2.2.1.exe.exe windows:6 windows x64 arch:x64
84cb607db4fbd9d2367ef2a24ae8c1c5
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
PDB Paths
Imports
d3d11
D3D11CreateDeviceAndSwapChain
kernel32
GetLocaleInfoA
LoadLibraryA
QueryPerformanceFrequency
GetProcAddress
FreeLibrary
QueryPerformanceCounter
Module32Next
Module32First
OpenProcess
CreateToolhelp32Snapshot
Process32NextW
Process32FirstW
CloseHandle
Module32NextW
AllocConsole
GetModuleFileNameW
WriteConsoleW
HeapSize
SetStdHandle
GetProcessHeap
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
HeapReAlloc
CreateProcessW
GetExitCodeProcess
WaitForSingleObject
GetFileSizeEx
GetConsoleOutputCP
ReadProcessMemory
GlobalUnlock
GetConsoleMode
SetFilePointerEx
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetLocaleInfoW
LCMapStringW
CompareStringW
FlsFree
FlsSetValue
FlsGetValue
FlsAlloc
GetFileType
HeapFree
HeapAlloc
WriteFile
ReadFile
GetModuleHandleExW
ExitProcess
LoadLibraryExW
WideCharToMultiByte
GlobalLock
GlobalFree
GlobalAlloc
Sleep
SetEndOfFile
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
InitializeCriticalSectionAndSpinCount
SetLastError
RaiseException
RtlPcToFileHeader
RtlUnwindEx
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
GetStartupInfoW
IsDebuggerPresent
MultiByteToWideChar
GetStdHandle
GetConsoleWindow
ReadConsoleW
SetConsoleTextAttribute
FlushFileBuffers
IsProcessorFeaturePresent
TerminateProcess
GetCurrentProcess
FormatMessageA
LocalFree
GetLocaleInfoEx
CreateDirectoryW
CreateFileW
FindClose
FindFirstFileW
FindFirstFileExW
FindNextFileW
RtlUnwind
GetFileAttributesExW
AreFileApisANSI
GetLastError
GetModuleHandleW
GetFileInformationByHandleEx
GetStringTypeW
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetSystemTimeAsFileTime
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
user32
GetAsyncKeyState
GetSystemMetrics
GetWindowTextA
SetWindowDisplayAffinity
ShowWindow
UpdateWindow
PeekMessageA
mouse_event
TranslateMessage
SetLayeredWindowAttributes
ClientToScreen
SetWindowLongA
RegisterClassExW
UnregisterClassW
CreateWindowExW
DestroyWindow
GetClientRect
SetCursor
GetWindowRect
DefWindowProcA
PostQuitMessage
GetKeyState
GetMessageExtraInfo
LoadCursorA
ScreenToClient
GetCapture
TrackMouseEvent
GetKeyboardLayout
SetCapture
DispatchMessageA
IsWindowUnicode
ReleaseCapture
SetCursorPos
GetCursorPos
OpenClipboard
CloseClipboard
EmptyClipboard
GetClipboardData
SetClipboardData
GetForegroundWindow
advapi32
GetCurrentHwProfileA
shell32
ShellExecuteA
ws2_32
WSAGetLastError
ioctlsocket
freeaddrinfo
getsockopt
recv
connect
socket
send
WSAStartup
getaddrinfo
select
closesocket
WSACleanup
imm32
ImmSetCandidateWindow
ImmSetCompositionWindow
ImmReleaseContext
ImmGetContext
d3dcompiler_47
D3DCompile
dwmapi
DwmExtendFrameIntoClientArea
Sections
.text Size: 878KB - Virtual size: 877KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 316KB - Virtual size: 315KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 23KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 39KB - Virtual size: 39KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 438KB - Virtual size: 438KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ