kamidere[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

kamidere.dll
Size

48.0MB
MD5

8438484aa5dc095b650735cc728685d8
SHA1

0d4f97bf5d784c457f735a0ea96d67ad4211e051
SHA256

e2124d351302f33efa2978aa4fb22ffeb00bd6a1a0c2ef7c746e0805430bbbeb
SHA512

89773c4cdd2742773c8acf569ca466dbaab407e74051130f4a1ea5946a1f3a744c5e329d38cd9b3d3b75c39d98fb04862698a9625d68d7f97795fbcb9a28adcd
SSDEEP

196608:rxUFuu0/AlOrGWU1vJRWIZxfPkiKDXrKbfPLG6DQfxQkJBjFzEGy:VUFuuWGh1yK8iKTGPLG60p3GG

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
kamidere.dll

Files

kamidere.dll
.dll windows:6 windows x86 arch:x86

7778390d4ac8eebea450b851e1821dfd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\User\source\repos\memedere_dev\Release\memedere_dev.pdb

Imports

kernel32

SizeofResource
VirtualAlloc
FindResourceA
GetModuleHandleA
LoadLibraryA
LockResource
CreateThread
LoadResource
Beep
GetProcAddress
VirtualProtect
Sleep
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
UnhandledExceptionFilter
GetCurrentThreadId
GetSystemTimeAsFileTime
InitializeSListHead

user32

wsprintfA
MessageBoxA

msvcp140

?_Xlength_error@std@@YAXPBD@Z

vcruntime140

memmove
__current_exception
_CxxThrowException
__std_exception_destroy
__CxxFrameHandler3
memcpy
__std_type_info_destroy_list
__current_exception_context
memset
__std_exception_copy
_except_handler4_common

api-ms-win-crt-runtime-l1-1-0

_cexit
_crt_atexit
_initterm_e
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
_execute_onexit_table
_invalid_parameter_noinfo_noreturn
_initterm

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

Sections

.text
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 11KB - Virtual size: 10KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 1024B - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 48.0MB - Virtual size: 48.0MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

7778390d4ac8eebea450b851e1821dfd

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

user32

msvcp140

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 16KB - Virtual size: 16KB

.rdata Size: 11KB - Virtual size: 10KB

.data Size: 1024B - Virtual size: 2KB

.rsrc Size: 48.0MB - Virtual size: 48.0MB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 16KB - Virtual size: 16KB

.rdata
Size: 11KB - Virtual size: 10KB

.data
Size: 1024B - Virtual size: 2KB

.rsrc
Size: 48.0MB - Virtual size: 48.0MB

.reloc
Size: 2KB - Virtual size: 1KB