dbgwizard.pdb
Static task
static1
Behavioral task
behavioral1
Sample
fd10d6e68d1406c10e89cb65b5e43b503be9e196b2a792202820c81b5646bdccN.dll
Resource
win7-20240903-en
Behavioral task
behavioral2
Sample
fd10d6e68d1406c10e89cb65b5e43b503be9e196b2a792202820c81b5646bdccN.dll
Resource
win10v2004-20241007-en
General
-
Target
fd10d6e68d1406c10e89cb65b5e43b503be9e196b2a792202820c81b5646bdccN
-
Size
156KB
-
MD5
31850a33fb4403050298b6a522810240
-
SHA1
f7e3c489be451e12a86fc327627f1b73da243c8b
-
SHA256
fd10d6e68d1406c10e89cb65b5e43b503be9e196b2a792202820c81b5646bdcc
-
SHA512
c9e32b23dc946b26d8b04d676ffd266a860c329960f78b6f2801005d1dd0f0084a5d4ea53f2d697f983db54ae4aa4b6a513dd70d8e5b1afee7fae4e5e289922d
-
SSDEEP
3072:yim/02lJHxvujEcpdsUVsdq8pnjMo2akB/FZf9k5nnorOYPneLC:y/0ExvSEKsESnYTXtZlk5norOYvkC
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource fd10d6e68d1406c10e89cb65b5e43b503be9e196b2a792202820c81b5646bdccN
Files
-
fd10d6e68d1406c10e89cb65b5e43b503be9e196b2a792202820c81b5646bdccN.dll windows:4 windows x86 arch:x86
645a602bf4fea90316b3c078fc62f8ab
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
InterlockedCompareExchange
GlobalFindAtomW
GlobalHandle
VerLanguageNameA
CreateSemaphoreW
GetTimeFormatW
CreateFiberEx
OpenMutexW
EnumResourceNamesW
FindNextVolumeW
FreeEnvironmentStringsA
GetVolumePathNameA
GlobalGetAtomNameA
SetConsoleCP
GetProfileStringW
GetCPInfoExW
GetPrivateProfileStringA
GetTimeZoneInformation
LocalFree
FileTimeToSystemTime
FindFirstVolumeMountPointW
GetConsoleTitleW
CreateMutexW
GetNumberFormatA
WideCharToMultiByte
SetHandleCount
GetProcessHeap
CreateWaitableTimerA
GetBinaryTypeA
GetPrivateProfileIntA
msvcrt
printf
Exports
Exports
TerHibernate
TerWakeup
Sections
.text Size: 20KB - Virtual size: 16KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.data Size: 72KB - Virtual size: 69KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
hdata Size: 56KB - Virtual size: 52KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 416B - Virtual size: 16KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ