F:\桌面源码\[微变版]VS2008_HxTD_华夏免费版辅助\HxTDmm\Release\TDHoBll.pdb
Static task
static1
Behavioral task
behavioral1
Sample
42750c885b539e2fb7cac3c0037256919c7641e3c607fda5963d701e1fd320da.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
42750c885b539e2fb7cac3c0037256919c7641e3c607fda5963d701e1fd320da.dll
Resource
win10v2004-20240802-en
General
-
Target
42750c885b539e2fb7cac3c0037256919c7641e3c607fda5963d701e1fd320da
-
Size
1.3MB
-
MD5
6720c9640ed29a24f15451bb1e533a91
-
SHA1
126e33dd4facb8d6615322695329a6c0f88c0e45
-
SHA256
42750c885b539e2fb7cac3c0037256919c7641e3c607fda5963d701e1fd320da
-
SHA512
4a2fe90d940cd95fb6f6eec80e693c738acac554745ff2c6cf755db20d6a53585a0accbb747b609e90c5e78d0c04e1c3d4a8a2639a50eee514e28c5b5fb38ab0
-
SSDEEP
24576:X5Awv58S+Um1PVYJl361DbFiDllW/WOL7FA4vcgwGJ38hY3wThS:2wv+UeVYJ5EfFKMne4vcO82
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 42750c885b539e2fb7cac3c0037256919c7641e3c607fda5963d701e1fd320da
Files
-
42750c885b539e2fb7cac3c0037256919c7641e3c607fda5963d701e1fd320da.dll windows:5 windows x86 arch:x86
7e4c26c46d836b9c2dd0468f32b1372f
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GlobalFlags
user32
DestroyMenu
gdi32
DeleteDC
comdlg32
GetFileTitleA
winspool.drv
DocumentPropertiesA
advapi32
RegSetValueExA
shlwapi
PathIsUNCA
oleaut32
VariantClear
winmm
PlaySoundA
psapi
EmptyWorkingSet
msvcrt
strncpy
iphlpapi
GetInterfaceInfo
shell32
SHGetFolderPathW
Exports
Exports
TDMWT
TDSST
TDWWT
___TDCPPdebugHook
Sections
.text Size: 318KB - Virtual size: 3.4MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.sedata Size: 1006KB - Virtual size: 1008KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.idata Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.reloc Size: 1024B - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.sedata Size: 4KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ