C:\Users\19769\Desktop\文件\LD\DLL白加黑\AheadLibEx_libcurlv2\x64\Release\libcurl.pdb
Static task
static1
Behavioral task
behavioral1
Sample
c304a5852baa55afa12f7f2f508e79583b1b28db7d63b0400fc184589ed6fdd8N.dll
Resource
win7-20240708-en
Behavioral task
behavioral2
Sample
c304a5852baa55afa12f7f2f508e79583b1b28db7d63b0400fc184589ed6fdd8N.dll
Resource
win10v2004-20240802-en
General
-
Target
c304a5852baa55afa12f7f2f508e79583b1b28db7d63b0400fc184589ed6fdd8N
-
Size
991KB
-
MD5
00e6f7151e2a895893cad32135cc13b0
-
SHA1
64e0186c15e20a2485d9c86f421c4868af045cab
-
SHA256
c304a5852baa55afa12f7f2f508e79583b1b28db7d63b0400fc184589ed6fdd8
-
SHA512
e585f17601225480eab3e2292a1c50b8754623286e65230539e826ccc348d85a7bfe9f37a8e4cc51f63a0974632d57c4e4b76dfdcf4da83ee40c2bc15065086b
-
SSDEEP
24576:pygZGuNdXLnw8RwVTcX+ebpwwK5o2mmA8AoA:p
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource c304a5852baa55afa12f7f2f508e79583b1b28db7d63b0400fc184589ed6fdd8N
Files
-
c304a5852baa55afa12f7f2f508e79583b1b28db7d63b0400fc184589ed6fdd8N.dll windows:6 windows x64 arch:x64
0a196749b5a5c646ec6a764b21d7d63e
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetCurrentProcess
TerminateProcess
ResumeThread
CloseHandle
GetProcAddress
GetModuleHandleW
CreateProcessA
CreateDirectoryW
GetModuleFileNameW
SetFileAttributesW
DisableThreadLibraryCalls
CreateThread
GetCurrentProcessId
FreeLibrary
SetUnhandledExceptionFilter
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentThreadId
LocalFree
GetSystemTimeAsFileTime
InitializeSListHead
IsDebuggerPresent
user32
MessageBoxW
shell32
SHGetFolderPathW
ole32
CoCreateInstance
CoUninitialize
CoInitializeEx
oleaut32
VariantInit
SysFreeString
VariantClear
SysAllocString
msvcp140
?_Xlength_error@std@@YAXPEBD@Z
?_Xout_of_range@std@@YAXPEBD@Z
shlwapi
PathFileExistsW
PathRemoveFileSpecW
vcruntime140_1
__CxxFrameHandler4
vcruntime140
__std_exception_destroy
memset
_CxxThrowException
__C_specific_handler
memcpy
__std_exception_copy
__std_type_info_destroy_list
memmove
api-ms-win-crt-string-l1-1-0
_wcsicmp
wcscat_s
api-ms-win-crt-convert-l1-1-0
strtol
api-ms-win-crt-runtime-l1-1-0
_initialize_onexit_table
_initialize_narrow_environment
_execute_onexit_table
_seh_filter_dll
_initterm_e
_initterm
_cexit
_invalid_parameter_noinfo_noreturn
_configure_narrow_argv
api-ms-win-crt-heap-l1-1-0
malloc
free
_callnewh
Exports
Exports
curl_easy_cleanup
curl_easy_duphandle
curl_easy_escape
curl_easy_getinfo
curl_easy_init
curl_easy_option_by_id
curl_easy_option_by_name
curl_easy_option_next
curl_easy_pause
curl_easy_perform
curl_easy_recv
curl_easy_reset
curl_easy_send
curl_easy_setopt
curl_easy_strerror
curl_easy_unescape
curl_easy_upkeep
curl_escape
curl_formadd
curl_formfree
curl_formget
curl_free
curl_getdate
curl_getenv
curl_global_cleanup
curl_global_init
curl_global_init_mem
curl_global_sslset
curl_maprintf
curl_mfprintf
curl_mime_addpart
curl_mime_data
curl_mime_data_cb
curl_mime_encoder
curl_mime_filedata
curl_mime_filename
curl_mime_free
curl_mime_headers
curl_mime_init
curl_mime_name
curl_mime_subparts
curl_mime_type
curl_mprintf
curl_msnprintf
curl_msprintf
curl_multi_add_handle
curl_multi_assign
curl_multi_cleanup
curl_multi_fdset
curl_multi_info_read
curl_multi_init
curl_multi_perform
curl_multi_poll
curl_multi_remove_handle
curl_multi_setopt
curl_multi_socket
curl_multi_socket_action
curl_multi_socket_all
curl_multi_strerror
curl_multi_timeout
curl_multi_wait
curl_multi_wakeup
curl_mvaprintf
curl_mvfprintf
curl_mvprintf
curl_mvsnprintf
curl_mvsprintf
curl_pushheader_byname
curl_pushheader_bynum
curl_share_cleanup
curl_share_init
curl_share_setopt
curl_share_strerror
curl_slist_append
curl_slist_free_all
curl_strequal
curl_strnequal
curl_unescape
curl_url
curl_url_cleanup
curl_url_dup
curl_url_get
curl_url_set
curl_version
curl_version_info
Sections
.text Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 976KB - Virtual size: 976KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 512B - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 1024B - Virtual size: 996B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 512B - Virtual size: 96B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ