C:\Users\Administrator\Desktop\dll - 副本 (2)\Release\HttpModRespDLLx64.pdb
Static task
static1
Behavioral task
behavioral1
Sample
06b1ccc90d86fb20b0432306d68466b4713c9eaa85d545c04fcc580162720b60.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
06b1ccc90d86fb20b0432306d68466b4713c9eaa85d545c04fcc580162720b60.dll
Resource
win10v2004-20240802-en
General
-
Target
06b1ccc90d86fb20b0432306d68466b4713c9eaa85d545c04fcc580162720b60.exe
-
Size
135KB
-
MD5
011461d15e5d2fd9032959a68ec7e542
-
SHA1
76e35af3d56edcac15747b1ef5f9497247f788a2
-
SHA256
06b1ccc90d86fb20b0432306d68466b4713c9eaa85d545c04fcc580162720b60
-
SHA512
2724b39e6189e2ff8ff7ff6df488817f6a7de3d750c9c32af831afa19c63763e2098c52158fdd9c1974936db651745ea3c04a95001b74480ce80f051d0dfbeb7
-
SSDEEP
3072:qLPArkhbAeher/BDgYeD/HD81gXz6G14p7X:a4whbAehey5DvD8c27
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 06b1ccc90d86fb20b0432306d68466b4713c9eaa85d545c04fcc580162720b60.exe
Files
-
06b1ccc90d86fb20b0432306d68466b4713c9eaa85d545c04fcc580162720b60.exe.dll windows:6 windows x64 arch:x64
5ef3742ea6b93e257b684f22a7054929
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
lstrlenW
OutputDebugStringA
MultiByteToWideChar
GetLastError
DebugBreak
CloseHandle
CreateFileW
SetFilePointerEx
GetConsoleMode
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetStdHandle
HeapReAlloc
HeapSize
GetStringTypeW
GetFileType
GetStdHandle
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
GetStartupInfoW
GetModuleHandleW
RtlUnwindEx
RtlPcToFileHeader
RaiseException
InterlockedFlushSList
SetLastError
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
GetProcAddress
LoadLibraryExW
RtlUnwind
ExitProcess
GetModuleHandleExW
GetModuleFileNameW
HeapAlloc
HeapFree
FindClose
FindFirstFileExW
FindNextFileW
IsValidCodePage
GetACP
GetOEMCP
GetCPInfo
GetCommandLineA
GetCommandLineW
WideCharToMultiByte
GetEnvironmentStringsW
FreeEnvironmentStringsW
FlsAlloc
FlsGetValue
FlsSetValue
FlsFree
LCMapStringW
GetProcessHeap
WriteConsoleW
shlwapi
StrStrIW
winhttp
WinHttpOpen
WinHttpQueryHeaders
WinHttpReadData
WinHttpOpenRequest
WinHttpReceiveResponse
WinHttpCloseHandle
WinHttpSendRequest
WinHttpSetTimeouts
WinHttpQueryOption
WinHttpConnect
WinHttpCrackUrl
WinHttpSetOption
ws2_32
inet_ntop
Exports
Exports
RegisterModule
Sections
.text Size: 77KB - Virtual size: 77KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 44KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
_RDATA Size: 512B - Virtual size: 348B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ