msdia80.pdb
Static task
static1
Behavioral task
behavioral1
Sample
msdia80.dll
Resource
ubuntu1804-amd64-20240611-en
Behavioral task
behavioral2
Sample
msdia80.dll
Resource
debian9-armhf-20240611-en
Behavioral task
behavioral3
Sample
msdia80.dll
Resource
debian9-mipsbe-20240418-en
Behavioral task
behavioral4
Sample
msdia80.dll
Resource
debian9-mipsel-20240729-en
General
-
Target
msdia80.dll
-
Size
874KB
-
MD5
fe5a0b29a5ea757e6891dc7b70e7b112
-
SHA1
770c681af352eec5c1ce0c26a5c81b49afdbfaec
-
SHA256
2c63d7808eaa0ca257a3bf3dc64fb078accfcf8a2930f4ba7a6a269f3f5e7ebd
-
SHA512
a5ed9983ad2ba5e4ae960ced59fb8a89167b2e74a3d3640683b23cff55ecaf1a6715e44c9d434c7b1a256439626b79d1ad602a222ba295a3705118613c54950f
-
SSDEEP
12288:BHcPiDWAYQN1GB1m7ZSoRVh01mdC636ErqXTLPmL:BHuWY01GB1m7ZSmVh01mdC636Erqj
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource msdia80.dll
Files
-
msdia80.dll.dll regsvr32 windows:5 windows x64 arch:x64
57b54acebc8d3084e91f3bf9e7723fcb
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetSystemInfo
GetVersion
HeapAlloc
GetProcessHeap
HeapFree
LocalAlloc
LocalFree
DisableThreadLibraryCalls
MultiByteToWideChar
SizeofResource
LockResource
LoadResource
FindResourceW
GetModuleFileNameW
EnterCriticalSection
LeaveCriticalSection
LCMapStringW
InitializeCriticalSection
DeleteCriticalSection
CloseHandle
MapViewOfFile
CreateFileMappingA
GetFileSize
CreateFileW
UnmapViewOfFile
WideCharToMultiByte
SetLastError
GetLastError
GetProcAddress
FreeLibrary
LoadLibraryA
RaiseException
GetCurrentThreadId
FlsSetValue
GetCommandLineA
GetVersionExA
RtlUnwindEx
RtlPcToFileHeader
GetModuleHandleA
ExitProcess
FlsGetValue
TlsFree
FlsFree
TlsSetValue
FlsAlloc
Sleep
HeapSetInformation
HeapCreate
HeapDestroy
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
GetModuleFileNameA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
SetUnhandledExceptionFilter
RtlCaptureContext
WriteFile
TerminateProcess
GetCurrentProcess
IsDebuggerPresent
RtlVirtualUnwind
RtlLookupFunctionEntry
GetCPInfo
GetACP
GetOEMCP
HeapSize
LCMapStringA
ReadFile
SetFilePointer
HeapReAlloc
GetLocaleInfoA
GetStringTypeA
GetStringTypeW
GetConsoleCP
GetConsoleMode
SetStdHandle
FlushFileBuffers
CreateFileA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
SetEndOfFile
CompareStringA
CompareStringW
SetEnvironmentVariableA
VirtualAlloc
VirtualFree
SetFileAttributesW
GetFileAttributesW
CopyFileW
DeleteFileW
DeviceIoControl
CreateFileMappingW
InitializeCriticalSectionAndSpinCount
GetCurrentDirectoryW
ExpandEnvironmentStringsW
MapViewOfFileEx
FlushViewOfFile
GetFullPathNameW
GetDriveTypeA
GetCurrentDirectoryA
SetEnvironmentVariableW
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
VSDllRegisterServer
VSDllUnregisterServer
Sections
.text Size: 760KB - Virtual size: 759KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 15KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 31KB - Virtual size: 31KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 46KB - Virtual size: 45KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 20KB - Virtual size: 20KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ