E:\code\clean_master\webwrap\webwrap\Release\webwrap.pdb
Static task
static1
Behavioral task
behavioral1
Sample
03dca63adca8ae859e88757428c9e697527e84685f2313a522c4c30ebd775cd3.dll
Resource
win7-20240704-en
Behavioral task
behavioral2
Sample
03dca63adca8ae859e88757428c9e697527e84685f2313a522c4c30ebd775cd3.dll
Resource
win10v2004-20240802-en
General
-
Target
03dca63adca8ae859e88757428c9e697527e84685f2313a522c4c30ebd775cd3
-
Size
649KB
-
MD5
73c945fe3d26be791c6d970500cf029f
-
SHA1
7bcc2f7e278f60de309a27993fff20a6597b139c
-
SHA256
03dca63adca8ae859e88757428c9e697527e84685f2313a522c4c30ebd775cd3
-
SHA512
1ec8970f55c17fd25b14bd467c5c1ba796e5ad92002ad93ceb46e8e8f7e5eb2886b5fc6c263fa79b901915b9dc430e4f1cba1ef7891c4fd8e838d6d3ef335e8e
-
SSDEEP
12288:a6SvfLDZmlCQtxlME1sYYmTmGAfKHfcbAsSylk2TE5Fu2:a6UMDXvOkHfQAsSyBMc2
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 03dca63adca8ae859e88757428c9e697527e84685f2313a522c4c30ebd775cd3
Files
-
03dca63adca8ae859e88757428c9e697527e84685f2313a522c4c30ebd775cd3.dll windows:6 windows x86 arch:x86
36dc30aaba8e5d8292c5055bee22c194
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
gdiplus
GdipCreateBitmapFromStream
GdipDisposeImage
GdipCloneImage
GdipFree
GdipAlloc
GdipDrawImageRectRectI
GdipDrawImagePointRectI
GdipDeleteGraphics
GdipCreateFromHDC
GdipGetImageHeight
GdipGetImageWidth
GdiplusStartup
kernel32
GetCurrentThreadId
LoadLibraryExW
lstrcmpW
InitializeCriticalSection
SetLastError
SetEvent
CreateEventW
WaitForMultipleObjects
EnterCriticalSection
LoadLibraryW
GetProcAddress
WriteConsoleW
SetEnvironmentVariableW
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
GetACP
IsValidCodePage
FindFirstFileExW
ReadConsoleW
SetEndOfFile
SetStdHandle
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetStdHandle
ExitProcess
GetTimeZoneInformation
GetConsoleMode
GetConsoleOutputCP
SetFilePointerEx
GetFileType
GetModuleHandleExW
FreeLibraryAndExitThread
ExitThread
GetModuleHandleW
RtlUnwind
QueryPerformanceCounter
GetStartupInfoW
TerminateProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
ReadFile
GetFileSizeEx
FindNextFileW
FindClose
GlobalFree
GlobalUnlock
GlobalLock
GlobalAlloc
CopyFileW
DeleteFileW
CreateMutexW
ReleaseMutex
GetCurrentProcessId
LocalFree
GetModuleFileNameW
FreeLibrary
OpenProcess
LeaveCriticalSection
GetCurrentProcess
WaitForSingleObject
CloseHandle
WriteFile
FlushFileBuffers
CreateFileW
DeleteCriticalSection
InitializeCriticalSectionEx
GetLocaleInfoW
LCMapStringW
CompareStringW
GetCPInfo
GetSystemTimeAsFileTime
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
SwitchToThread
InitializeCriticalSectionAndSpinCount
FormatMessageW
GetStringTypeW
LoadLibraryExA
VirtualFree
VirtualAlloc
IsProcessorFeaturePresent
FlushInstructionCache
InterlockedPushEntrySList
InterlockedPopEntrySList
InitializeSListHead
EncodePointer
RaiseException
DecodePointer
GetTickCount
CreateThread
Sleep
WideCharToMultiByte
FindResourceW
SizeofResource
LockResource
LoadResource
FindResourceExW
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
GetLastError
MultiByteToWideChar
InterlockedFlushSList
IsDebuggerPresent
OutputDebugStringW
user32
IsWindow
SetWindowPos
LoadCursorW
CreateWindowExW
GetClassInfoExW
RegisterClassExW
DispatchMessageW
TranslateMessage
SystemParametersInfoW
GetClassNameW
EnumWindows
FindWindowExW
SetParent
GetParent
LoadImageW
LoadIconW
SetClassLongW
SetWindowLongW
GetWindowLongW
GetWindowRect
GetClientRect
SetWindowTextW
InvalidateRect
SetForegroundWindow
GetForegroundWindow
KillTimer
SetTimer
ReleaseCapture
SetFocus
IsZoomed
IsIconic
EndDeferWindowPos
DeferWindowPos
BeginDeferWindowPos
DestroyWindow
CallWindowProcW
PostQuitMessage
DefWindowProcW
AttachThreadInput
PostMessageW
GetWindowThreadProcessId
GetShellWindow
ReleaseDC
GetDC
GetActiveWindow
GetWindowPlacement
ShowWindow
SendMessageW
UnregisterClassW
PostThreadMessageW
PeekMessageW
GetMessageW
GetMonitorInfoW
MonitorFromWindow
MonitorFromRect
FindWindowW
OffsetRect
CopyRect
wsprintfW
UpdateLayeredWindow
BeginPaint
EndPaint
SetWindowRgn
EqualRect
IsWindowVisible
gdi32
SelectObject
DeleteObject
CreateRectRgn
SetViewportOrgEx
ExtTextOutW
SetBkColor
GetDeviceCaps
DeleteDC
BitBlt
CombineRgn
CreateCompatibleBitmap
CreateCompatibleDC
comdlg32
CommDlgExtendedError
GetSaveFileNameW
advapi32
DuplicateTokenEx
GetTokenInformation
OpenProcessToken
RegCloseKey
RegOpenKeyExW
RegGetValueW
AdjustTokenPrivileges
LookupPrivilegeValueW
shell32
SHFileOperationW
SHGetPropertyStoreForWindow
SHCreateDirectoryExW
ShellExecuteW
SHBrowseForFolderW
SHGetPathFromIDListW
SHGetSpecialFolderPathW
ole32
CoUninitialize
CoTaskMemAlloc
PropVariantClear
CoTaskMemFree
CoInitialize
CreateStreamOnHGlobal
shlwapi
PathIsRelativeW
PathIsRootW
StrStrIW
PathAppendW
PathRemoveFileSpecW
PathFileExistsW
PathIsDirectoryW
version
GetFileVersionInfoW
VerQueryValueW
GetFileVersionInfoSizeW
Sections
.text Size: 486KB - Virtual size: 485KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 121KB - Virtual size: 121KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 3KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 24KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ