C:\Users\nelfo\source\repos\New nixware PE Loader\Release\PE Loader.pdb
Static task
static1
1 signatures
General
-
Target
nixware-crack.dll
-
Size
48.0MB
-
MD5
2ecf10a633abea24ad511655179ff4e1
-
SHA1
0571b7c12ef301ceccbcc6bc4994a523c7e4cf94
-
SHA256
90d5bfceb1225c7f547521c76659cbbb7dddda34e80bc9ec0400a825d083be30
-
SHA512
99f742ab75993afbe3eebd12df55ff32534c6555c7329ae99277f07392196d0ed3be127e75e948e1f68aaef3eadb076a94f3c48f161375d9bc026c93268c85b5
-
SSDEEP
393216:B17BO1VKz8aftZF9BGP77PlQjpPF3n2wPCZ3gzqa5ParLhTUTzrc:Ds/2ftQlQVFn2wi/a8vh4TPc
Score
3/10
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource nixware-crack.dll
Files
-
nixware-crack.dll.dll windows:6 windows x86 arch:x86
Password: 123
6a76273d3706a15976659cabc7d9ebe2
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
LoadLibraryA
GetProcAddress
VirtualProtect
GetModuleHandleA
CreateDirectoryA
CreateFileA
WriteFile
CloseHandle
AllocConsole
VirtualAlloc
CreateThread
GetProcessHeap
GetLastError
TerminateProcess
IsProcessorFeaturePresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
InitializeSListHead
GetSystemTimeAsFileTime
QueryPerformanceCounter
WideCharToMultiByte
MultiByteToWideChar
RaiseException
IsDebuggerPresent
VirtualQuery
VirtualFree
Thread32Next
Thread32First
CreateToolhelp32Snapshot
GetModuleHandleW
Sleep
ResumeThread
SuspendThread
SetThreadContext
GetThreadContext
OpenThread
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess
HeapFree
HeapReAlloc
HeapAlloc
HeapDestroy
HeapCreate
FlushInstructionCache
InterlockedCompareExchange
InterlockedExchange
FreeLibrary
msvcp140
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?cout@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?rdbuf@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_streambuf@DU?$char_traits@D@std@@@2@XZ
?fill@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDXZ
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAVios_base@1@AAV21@@Z@Z
??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@PBX@Z
?width@ios_base@std@@QAE_J_J@Z
?width@ios_base@std@@QBE_JXZ
?setf@ios_base@std@@QAEHHH@Z
?flags@ios_base@std@@QBEHXZ
?uncaught_exception@std@@YA_NXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?tie@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEPAV?$basic_ostream@DU?$char_traits@D@std@@@2@XZ
?good@ios_base@std@@QBE_NXZ
vcruntime140
_except_handler4_common
__std_type_info_destroy_list
__vcrt_GetModuleFileNameW
__vcrt_LoadLibraryExW
memcmp
memcpy
__CxxFrameHandler3
memset
api-ms-win-crt-stdio-l1-1-0
freopen
__acrt_iob_func
api-ms-win-crt-string-l1-1-0
strcat_s
strcpy_s
strlen
api-ms-win-crt-runtime-l1-1-0
_cexit
_execute_onexit_table
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_initterm
_initterm_e
Sections
.text Size: 22KB - Virtual size: 21KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 11KB - Virtual size: 11KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 3KB - Virtual size: 4KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 512B - Virtual size: 248B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 2KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.NIX Size: 48.0MB - Virtual size: 48.0MB
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE