E:\dt reader\dtocr\bin\dtImagedll.pdb
Static task
static1
Behavioral task
behavioral1
Sample
bd31faae4c5d69721549a6a75a49655669ffe4142ebc1dbd25357887750fbbc5.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
bd31faae4c5d69721549a6a75a49655669ffe4142ebc1dbd25357887750fbbc5.dll
Resource
win10v2004-20240802-en
General
-
Target
bd31faae4c5d69721549a6a75a49655669ffe4142ebc1dbd25357887750fbbc5
-
Size
2.7MB
-
MD5
6a2625266ab4327b9f00ad44a277dc63
-
SHA1
3041d6e268578dc9b3cc1ae0a851180a0fc5205f
-
SHA256
bd31faae4c5d69721549a6a75a49655669ffe4142ebc1dbd25357887750fbbc5
-
SHA512
af004c8e8002f54a031772ffa548e3ba8d0df9bdc6346974183c4e762a21a69f6f9fa6007fee1207b5e6a70012f96632f520a25724bc4e5a0d675ef296ba520f
-
SSDEEP
49152:ibKVJmRQAL8gZpvrWzKZS965d98LpFZpmaiAEEEMz4Ogtz1si+Up4n8DO0JkPDmS:2QAogXvrYKZS96d6LpzpmaiPZMMOgtzG
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource bd31faae4c5d69721549a6a75a49655669ffe4142ebc1dbd25357887750fbbc5
Files
-
bd31faae4c5d69721549a6a75a49655669ffe4142ebc1dbd25357887750fbbc5.dll windows:5 windows x86 arch:x86
384bb9973dc0cd06cb0ae61909c74213
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
mfc100u
ord11209
ord11240
ord7391
ord11228
ord5261
ord3416
ord6140
ord890
ord13568
ord13571
ord13569
ord13572
ord13567
ord13570
ord7179
ord1298
ord13267
ord10976
ord14162
ord1739
ord7126
ord11864
ord3625
ord3684
ord8530
ord13387
ord7108
ord13381
ord11477
ord11476
ord2164
ord4744
ord11469
ord13854
ord7176
ord4086
ord11784
ord11845
ord9498
ord11236
ord7548
ord1292
ord6869
ord7624
ord8346
ord9328
ord7393
ord4792
ord6922
ord6932
ord6931
ord4623
ord4794
ord4645
ord908
ord13605
ord2091
ord322
ord2055
ord2053
ord2080
ord1984
ord2045
ord3413
ord408
ord1953
ord2090
ord2088
ord1945
ord1873
ord1934
ord323
ord1301
ord5118
ord4901
ord8483
ord5115
ord4923
ord4642
ord266
ord265
ord1300
msvcr100
_CIpow
_CIsqrt
_CIexp
_CItan
_CxxThrowException
memcpy
_CIlog
memset
__clean_type_info_names_internal
_except_handler4_common
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_crt_debugger_hook
__CppXcptFilter
_amsg_exit
_initterm_e
_initterm
_encoded_null
_malloc_crt
?terminate@@YAXXZ
_onexit
_lock
__dllonexit
_unlock
free
malloc
__iob_func
printf
fprintf
?what@exception@std@@UBEPBDXZ
??1exception@std@@UAE@XZ
??0exception@std@@QAE@ABQBD@Z
??0exception@std@@QAE@ABV01@@Z
memmove
ceil
fopen
fwrite
fclose
exit
clock
__CxxFrameHandler3
kernel32
IsProcessorFeaturePresent
LocalAlloc
EncodePointer
DecodePointer
InterlockedExchange
Sleep
InterlockedCompareExchange
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
QueryPerformanceCounter
GetTickCount
GetCurrentThreadId
GetCurrentProcessId
GetSystemTimeAsFileTime
LocalFree
msvcp100
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@H@Z
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?uncaught_exception@std@@YA_NXZ
?_Xlength_error@std@@YAXPBD@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?endl@std@@YAAAV?$basic_ostream@DU?$char_traits@D@std@@@1@AAV21@@Z
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?flags@ios_base@std@@QBEHXZ
?good@ios_base@std@@QBE_NXZ
?_Swap_all@_Container_base0@std@@QAEXAAU12@@Z
?_Orphan_all@_Container_base0@std@@QAEXXZ
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
Exports
Exports
EnhanceContrast
FaceDetectioncnn
ImageFusion
ImageFusion_c
ImageFusion_c2
ImageFusion_c3
ImageSegmentM
ImageUnevenCorrect
ImageUnevenCorrect_c
ImageUnevenCorrect_part
Sections
.text Size: 90KB - Virtual size: 89KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2.6MB - Virtual size: 2.6MB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 10KB - Virtual size: 10KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ