4c41aef07e4a408004960cfea23e91127931de906164cb2bd1997bc511939d0e[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

4c41aef07e4a408004960cfea23e91127931de906164cb2bd1997bc511939d0e.dll
Size

32KB
MD5

619b1a2b8f9df8d5c806d8549db19d91
SHA1

2d54569082f3c2703b138cc64099ab164d301630
SHA256

4c41aef07e4a408004960cfea23e91127931de906164cb2bd1997bc511939d0e
SHA512

986f379c99818687f9387463788bd04d36f5d6e81ab25c0a00909622842f56bd3455230d7719b9da2cef65147327517342056a37cf04002cc618058a66aa89ef
SSDEEP

768:puvm3Xxo+aaq5zKPlvyRpSo1MdS4o8BWPKbKqBbdUBM:LXS+zuzK5wSPS4oqiadUB

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
4c41aef07e4a408004960cfea23e91127931de906164cb2bd1997bc511939d0e.dll

Files

4c41aef07e4a408004960cfea23e91127931de906164cb2bd1997bc511939d0e.dll
.dll windows:6 windows x86 arch:x86

acda142286ab12bdaf09ce19494677cd

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

C:\Users\ubuntu\source\repos\FTechnique\hookdll\Release\hookdll.pdb

Imports

kernel32

VirtualFree
VirtualAlloc
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
GetSystemTimeAsFileTime
DisableThreadLibraryCalls
InitializeSListHead
UnhandledExceptionFilter

msvcp140

??6?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV01@P6AAAV01@AAV01@@Z@Z
?_Xlength_error@std@@YAXPBD@Z
?uncaught_exception@std@@YA_NXZ
?flush@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@XZ
?put@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEAAV12@D@Z
?cerr@std@@3V?$basic_ostream@DU?$char_traits@D@std@@@1@A
?_Osfx@?$basic_ostream@DU?$char_traits@D@std@@@std@@QAEXXZ
?sputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAE_JPBD_J@Z
?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QAEXH_N@Z
?sputc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QAEHD@Z
?widen@?$basic_ios@DU?$char_traits@D@std@@@std@@QBEDD@Z

wininet

InternetOpenUrlW
InternetOpenA
InternetReadFile

vcruntime140

_except_handler4_common
memmove
memset
_CxxThrowException
__std_exception_copy
__std_exception_destroy
__std_terminate
__CxxFrameHandler3
memchr
memcpy
__std_type_info_destroy_list

api-ms-win-crt-string-l1-1-0

isalnum
strcat_s

api-ms-win-crt-runtime-l1-1-0

_crt_atexit
_initterm
_initterm_e
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
_register_onexit_function
_cexit
_invalid_parameter_noinfo_noreturn
_execute_onexit_table

api-ms-win-crt-heap-l1-1-0

_callnewh
free
malloc

Exports

Exports

Py_Main

Sections

.text
Size: 11KB - Virtual size: 11KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 512B - Virtual size: 248B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 876B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

acda142286ab12bdaf09ce19494677cd

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

kernel32

msvcp140

wininet

vcruntime140

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Exports

Exports

Sections

.text Size: 11KB - Virtual size: 11KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 512B - Virtual size: 248B

.reloc Size: 1024B - Virtual size: 876B

.text
Size: 11KB - Virtual size: 11KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 512B - Virtual size: 248B

.reloc
Size: 1024B - Virtual size: 876B