e:\Total Toolbar Project\Codes\Phase-4\Output\TotalToolbarPluginAPI\bin\release\TotalToolbarPluginAPI.pdb
Static task
static1
Behavioral task
behavioral1
Sample
076331b0a11d56720eeb04b9a37f93fb02f7cc506c273ec907dc9b18894f25e4N.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
076331b0a11d56720eeb04b9a37f93fb02f7cc506c273ec907dc9b18894f25e4N.dll
Resource
win10v2004-20240802-en
General
-
Target
076331b0a11d56720eeb04b9a37f93fb02f7cc506c273ec907dc9b18894f25e4N
-
Size
328KB
-
MD5
38f6aa2e15b8b518d77af69da34c37c0
-
SHA1
a6ce1309199676c441b70eed8c945eca80a580ac
-
SHA256
076331b0a11d56720eeb04b9a37f93fb02f7cc506c273ec907dc9b18894f25e4
-
SHA512
c6c2f68079d638b6f30cedcf65178983a5aedb424fd52598a4f07ba4efb2742301ff1aa499b37a90bf4f2f71a6b2f17524d1aa761063a8d7697217b610f72a54
-
SSDEEP
6144:v95DznCJdittnBpEAjCNbb1VMYoj3E02yQ0wr7wQT:vnnCJdittBpEAA0j3E02yQPT
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 076331b0a11d56720eeb04b9a37f93fb02f7cc506c273ec907dc9b18894f25e4N
Files
-
076331b0a11d56720eeb04b9a37f93fb02f7cc506c273ec907dc9b18894f25e4N.dll regsvr32 windows:4 windows x86 arch:x86
68146a348e89dfaca505e7c077ca5e93
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
GetFullPathNameW
WritePrivateProfileStringW
GlobalFlags
CompareStringW
GetVersionExA
LoadLibraryA
GlobalFindAtomW
RtlUnwind
HeapAlloc
HeapFree
HeapReAlloc
GetCommandLineA
GetProcessHeap
ExitProcess
HeapSize
SetStdHandle
GetFileType
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
IsDebuggerPresent
VirtualFree
VirtualAlloc
HeapDestroy
HeapCreate
GetStdHandle
GetModuleFileNameA
GetCPInfo
GetCurrentProcess
GetOEMCP
Sleep
SetHandleCount
GetStartupInfoA
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
QueryPerformanceCounter
GetTickCount
GetSystemTimeAsFileTime
GetTimeZoneInformation
GetConsoleCP
GetConsoleMode
LCMapStringA
LCMapStringW
GetStringTypeA
GetStringTypeW
GetLocaleInfoA
GetCurrentDirectoryA
GetDriveTypeA
WriteConsoleA
GetConsoleOutputCP
WriteConsoleW
CreateFileA
SetEnvironmentVariableA
FlushFileBuffers
SetFilePointer
WriteFile
ReadFile
GetModuleHandleA
SetErrorMode
TlsFree
LocalReAlloc
TlsSetValue
TlsAlloc
GlobalHandle
GlobalReAlloc
TlsGetValue
GlobalAddAtomW
WaitForSingleObject
CloseHandle
GetCurrentThread
GetCurrentThreadId
ConvertDefaultLocale
GetVersion
EnumResourceLanguagesW
GetLocaleInfoW
CompareStringA
InterlockedExchange
lstrcmpW
GlobalDeleteAtom
GetCurrentProcessId
FindFirstFileW
FindNextFileW
FindClose
LocalAlloc
FileTimeToLocalFileTime
FileTimeToSystemTime
WideCharToMultiByte
SetLastError
GlobalFree
GlobalAlloc
GlobalLock
GlobalUnlock
FormatMessageW
ReleaseMutex
CreateMutexW
GetThreadLocale
SetThreadLocale
LeaveCriticalSection
EnterCriticalSection
GetWindowsDirectoryW
GetPrivateProfileStringW
GetVersionExW
LoadLibraryW
GetProcAddress
GetModuleFileNameW
GetModuleHandleW
LoadLibraryExW
FreeLibrary
GetLocalTime
InterlockedDecrement
InterlockedIncrement
LocalFree
lstrcmpiW
MultiByteToWideChar
GetLastError
FindResourceW
LoadResource
LockResource
SizeofResource
DeleteCriticalSection
InitializeCriticalSection
RaiseException
GetACP
lstrlenW
user32
ShowWindow
RegisterWindowMessageW
LoadIconW
WinHelpW
GetCapture
GetClassLongW
SetPropW
GetPropW
RemovePropW
IsWindow
GetForegroundWindow
GetDlgItem
GetTopWindow
DestroyWindow
GetMessageTime
GetMessagePos
MapWindowPoints
SetForegroundWindow
GetClientRect
CreateWindowExW
GetClassInfoExW
GetClassInfoW
RegisterClassW
AdjustWindowRectEx
CopyRect
DefWindowProcW
CallWindowProcW
SetWindowLongW
SetWindowPos
SystemParametersInfoA
IsIconic
GetWindowPlacement
GetWindow
GetDlgCtrlID
GetWindowRect
GetClassNameW
PtInRect
SetWindowTextW
CharNextW
MessageBoxW
UnregisterClassA
GetWindowTextW
LoadCursorW
GetSystemMetrics
GetSysColorBrush
GetSysColor
ReleaseDC
GetDC
ClientToScreen
DestroyMenu
GetMenu
GetSubMenu
GetMenuItemCount
GetMenuItemID
GetMenuState
UnhookWindowsHookEx
EnableWindow
IsWindowEnabled
GetLastActivePopup
GetWindowLongW
GetParent
SendMessageW
GetWindowThreadProcessId
PostQuitMessage
PostMessageW
CheckMenuItem
EnableMenuItem
GrayStringW
DrawTextExW
DrawTextW
TabbedTextOutW
UnregisterClassW
SetCursor
SetWindowsHookExW
CallNextHookEx
GetMessageW
TranslateMessage
DispatchMessageW
GetActiveWindow
IsWindowVisible
GetKeyState
PeekMessageW
GetCursorPos
ValidateRect
SetMenuItemBitmaps
GetMenuCheckMarkDimensions
LoadBitmapW
GetFocus
ModifyMenuW
gdi32
GetStockObject
DeleteDC
ScaleWindowExtEx
SetWindowExtEx
SaveDC
ScaleViewportExtEx
SetViewportExtEx
OffsetViewportOrgEx
SetViewportOrgEx
SelectObject
Escape
ExtTextOutW
TextOutW
RectVisible
PtVisible
DeleteObject
GetClipBox
SetMapMode
SetTextColor
SetBkColor
RestoreDC
GetDeviceCaps
CreateBitmap
winspool.drv
OpenPrinterW
DocumentPropertiesW
ClosePrinter
advapi32
RegQueryValueW
RegEnumKeyW
RegOpenKeyW
RegEnumKeyExW
RegQueryInfoKeyW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW
RegCreateKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
shlwapi
PathFindExtensionW
PathFindFileNameW
ole32
CoTaskMemAlloc
CoTaskMemFree
OleRun
CoCreateInstance
CoUninitialize
CoInitialize
StringFromGUID2
CoTaskMemRealloc
oleaut32
SysStringLen
SysFreeString
VarBstrCat
SysAllocStringLen
VarBstrCmp
VariantInit
VariantClear
SysAllocString
SysAllocStringByteLen
SysStringByteLen
VarUI4FromStr
LoadRegTypeLi
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
VariantChangeType
wininet
InternetGetConnectedState
Exports
Exports
DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Sections
.text Size: 232KB - Virtual size: 230KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 44KB - Virtual size: 42KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 12KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 28KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ