E:\code\clean_master\core_lib\LdsEncode\ReleaseT\webrap.pdb
Static task
static1
Behavioral task
behavioral1
Sample
192ea848eef439a47bb67b4f0234eef7b1d16febf0a31e0605f7a73dfdc15afd.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
192ea848eef439a47bb67b4f0234eef7b1d16febf0a31e0605f7a73dfdc15afd.dll
Resource
win10v2004-20240802-en
General
-
Target
192ea848eef439a47bb67b4f0234eef7b1d16febf0a31e0605f7a73dfdc15afd
-
Size
120KB
-
MD5
9a612219b2141a3139eec0bb806b5d40
-
SHA1
5c79e6bfbc2f283b9071e7fb922a7c6e93dcff18
-
SHA256
192ea848eef439a47bb67b4f0234eef7b1d16febf0a31e0605f7a73dfdc15afd
-
SHA512
b76e9e51ef8507f8629b4db462b6b09a02da8b1c02019ac9940b178fe573eedf73cf61711bcdeddba4f6c6f7cb8b1c7a37dfaed89b3a5a46ebfc259d176b1ea8
-
SSDEEP
3072:4EVBFCvUcap7MDIrv50uAg0FubbmVR+K:42/eZKAOW+K
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 192ea848eef439a47bb67b4f0234eef7b1d16febf0a31e0605f7a73dfdc15afd
Files
-
192ea848eef439a47bb67b4f0234eef7b1d16febf0a31e0605f7a73dfdc15afd.dll windows:6 windows x86 arch:x86
894bc931ebf8d98476b779672c9abe89
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
WriteFile
CloseHandle
GetModuleHandleW
GetProcAddress
SetLastError
FlushFileBuffers
WriteConsoleW
SetFilePointerEx
CreateFileW
WideCharToMultiByte
MultiByteToWideChar
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
GetProcessHeap
HeapSize
HeapFree
HeapReAlloc
HeapAlloc
GetConsoleMode
GetConsoleCP
SetStdHandle
GetLastError
RaiseException
DecodePointer
EnterCriticalSection
LeaveCriticalSection
EncodePointer
CreateEventW
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
LCMapStringW
GetStringTypeW
GetCPInfo
IsDebuggerPresent
OutputDebugStringW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
GetCurrentProcess
TerminateProcess
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
InitializeSListHead
RtlUnwind
InterlockedFlushSList
FreeLibrary
LoadLibraryExW
ExitProcess
GetModuleHandleExW
GetModuleFileNameA
GetACP
GetStdHandle
GetFileType
FindClose
FindFirstFileExA
FindNextFileA
IsValidCodePage
GetOEMCP
GetCommandLineA
GetCommandLineW
GetEnvironmentStringsW
FreeEnvironmentStringsW
Sections
.text Size: 51KB - Virtual size: 51KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 55KB - Virtual size: 54KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 6KB - Virtual size: 9KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 480B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 5KB - Virtual size: 5KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ