X:\toolbars\toolbars\getdislike\code\ie\Release\getdislike.pdb
Static task
static1
Behavioral task
behavioral1
Sample
14a6d94c7fe514cd435698887201d0ea97d7ac094c45ab4a11f2265b1758ad38.dll
Resource
win7-20240705-en
General
-
Target
14a6d94c7fe514cd435698887201d0ea97d7ac094c45ab4a11f2265b1758ad38
-
Size
53KB
-
MD5
81e5d313665355b295c55e94c2c9d536
-
SHA1
253667abeaba3d48a868c947eafa63a752c9496e
-
SHA256
14a6d94c7fe514cd435698887201d0ea97d7ac094c45ab4a11f2265b1758ad38
-
SHA512
202f66a46c49f271f4c4c45f7acd8ff02e8751a603b677c025bf4bbe7a4f5922619c484df1b5ac80ac4e962da3fabacd30205fb54d827e5b36f95a74ecdbe937
-
SSDEEP
768:3vDfL9wiQBAvgsAE3/hLtsWB2HpGtEDsn2K5zpmaNZl7y3:/D5wiQl6ZsWI4zzrZl7y3
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 14a6d94c7fe514cd435698887201d0ea97d7ac094c45ab4a11f2265b1758ad38
Files
-
14a6d94c7fe514cd435698887201d0ea97d7ac094c45ab4a11f2265b1758ad38.dll regsvr32 windows:5 windows x86 arch:x86
e4d8fcba52b2c287b1aadcbc1750bd3f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
WideCharToMultiByte
IsBadWritePtr
InterlockedDecrement
DisableThreadLibraryCalls
GetModuleFileNameW
InterlockedIncrement
HeapReAlloc
DecodePointer
EncodePointer
GetCurrentThreadId
GetCommandLineA
TerminateProcess
GetCurrentProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
WriteFile
GetStdHandle
GetLastError
HeapFree
HeapAlloc
RaiseException
GetCPInfo
GetACP
GetOEMCP
IsValidCodePage
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetModuleHandleW
SetLastError
GetProcAddress
Sleep
ExitProcess
SetHandleCount
InitializeCriticalSectionAndSpinCount
GetFileType
GetStartupInfoW
DeleteCriticalSection
GetModuleFileNameA
FreeEnvironmentStringsW
GetEnvironmentStringsW
HeapCreate
HeapDestroy
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
LoadLibraryW
LeaveCriticalSection
EnterCriticalSection
RtlUnwind
HeapSize
LCMapStringW
MultiByteToWideChar
GetStringTypeW
IsProcessorFeaturePresent
advapi32
RegCloseKey
RegDeleteKeyW
RegCreateKeyExW
RegSetValueExW
oleaut32
VariantInit
VariantClear
SysAllocString
SysFreeString
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 28KB - Virtual size: 28KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 14KB - Virtual size: 14KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 6KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 436B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ