TTPnpins.pdb
Static task
static1
Behavioral task
behavioral1
Sample
b5a92b20ca55f3df694fbdb63f6d5bd6d7ce96581d341d282223bd33bc0753dd.dll
Resource
win7-20241010-en
General
-
Target
b5a92b20ca55f3df694fbdb63f6d5bd6d7ce96581d341d282223bd33bc0753dd
-
Size
680KB
-
MD5
5b9fde8a7db8bc2c53fccd4187db1c8c
-
SHA1
fcac82c487ba59787aa3e3be98aedd6e2198fc1e
-
SHA256
b5a92b20ca55f3df694fbdb63f6d5bd6d7ce96581d341d282223bd33bc0753dd
-
SHA512
88ee1dc23bc6ab839334667e2f82ecfced7b5ac488c1e9f6109f6e1f0d5b245fdaaccbfabb5faa5b67ad91d8780f018daee28dad9ea389ab8defaed4d24f323b
-
SSDEEP
6144:z34xznfAp4x+NWMqW/KZ1vCDTEpc2bysCZR6iwAtUnWKT5WK8Rpv1llfFfCRAuT7:zIKp/UWCZdCDh2IZDwAFRpR6Au
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource b5a92b20ca55f3df694fbdb63f6d5bd6d7ce96581d341d282223bd33bc0753dd
Files
-
b5a92b20ca55f3df694fbdb63f6d5bd6d7ce96581d341d282223bd33bc0753dd.dll windows:5 windows x64 arch:x64
6bd45a7f6736c7032f1cc8ae9fa751af
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL
PDB Paths
Imports
comdlg32
GetSaveFileNameW
wininet
GetUrlCacheEntryInfoW
setupapi
CM_Get_Sibling_Ex
advapi32
RegEnumValueW
SaferCreateLevel
Exports
Exports
CopyPropVariant
CreatePropVariant
CreatePropertyStore
DestroyPropVariant
FormatTagFromWfx
GetAMSubtypeFromD3DFormat
GetD3DFormatFromMFSubtype
MFAddPeriodicCallback
MFAllocateSerialWorkQueue
MFAllocateWorkQueue
MFAllocateWorkQueueEx
MFAppendCollection
MFAverageTimePerFrameToFrameRate
MFBeginCreateFile
MFBeginGetHostByName
MFBeginRegisterWorkQueueWithMMCSS
MFBeginRegisterWorkQueueWithMMCSSEx
MFBeginUnregisterWorkQueueWithMMCSS
MFCalculateBitmapImageSize
MFCalculateImageSize
MFCallStackTracingClearSnapshot
MFCallStackTracingLogSessionErrors
MFCallStackTracingRestoreSnapshot
MFCallStackTracingTakeSnapshot
MFCancelCreateFile
MFCancelWorkItem
MFCheckEnabledViaAppService
MFClearLocalMFTs
MFCombineSamples
MFCompareFullToPartialMediaType
MFCompareSockaddrAddresses
MFConvertColorInfoFromDXVA
MFConvertColorInfoToDXVA
MFConvertFromFP16Array
MFConvertToFP16Array
MFCopyImage
MFCreate2DMediaBuffer
MFCreate2DMediaBufferOn1DMediaBuffer
MFCreateAMMediaTypeFromMFMediaType
MFCreateAlignedMemoryBuffer
MFCreateAlignedSharedMemoryBuffer
MFCreateAsyncResult
MFCreateAttributes
MFCreateAudioMediaType
MFCreateByteStreamHandlerAppServiceActivate
MFCreateCollection
MFCreateContentDecryptorContext
MFCreateContentProtectionDevice
MFCreateD3D12SynchronizationObject
MFCreateDXGIDeviceManager
MFCreateDXGISurfaceBuffer
MFCreateDXSurfaceBuffer
MFCreateEMEStoreObject
MFCreateEventQueue
MFCreateFile
MFCreateFileFromHandle
MFCreateLegacyMediaBufferOnMFMediaBuffer
MFCreateMFByteStreamOnIStreamWithFlags
MFCreateMFByteStreamOnStream
MFCreateMFByteStreamOnStreamEx
MFCreateMFByteStreamWrapper
MFCreateMFVideoFormatFromMFMediaType
MFCreateMediaBufferFromMediaType
MFCreateMediaBufferWrapper
MFCreateMediaEvent
MFCreateMediaEventResult
MFCreateMediaExtensionActivate
MFCreateMediaExtensionActivateNoInit
MFCreateMediaExtensionAppServiceActivate
MFCreateMediaExtensionInprocActivate
MFCreateMediaType
MFCreateMediaTypeFromProperties
MFCreateMediaTypeFromRepresentation
MFCreateMemoryBuffer
MFCreateMemoryBufferFromRawBuffer
MFCreateMemoryStream
MFCreateMuxStreamAttributes
MFCreateMuxStreamMediaType
MFCreateMuxStreamSample
MFCreateOOPMFTProxy
MFCreateOOPMFTRemote
MFCreatePathFromURL
MFCreatePresentationDescriptor
MFCreatePropertiesFromMediaType
MFCreateReusableByteStream
MFCreateReusableByteStreamWithSharedLock
MFCreateSample
MFCreateSecureBufferAllocator
MFCreateSharedMemoryMediaBufferFromMediaType
MFCreateSocket
MFCreateSocketListener
MFCreateSourceResolver
MFCreateSourceResolverInternal
MFCreateStagingSurfaceWrapper
MFCreateStreamDescriptor
MFCreateStreamOnMFByteStream
MFCreateStreamOnMFByteStreamEx
MFCreateSystemTimeSource
MFCreateTelemetrySession
MFCreateTempFile
MFCreateTrackedSample
MFCreateTransformActivate
MFCreateURLFromPath
MFCreateUdpSockets
MFCreateVideoDecryptorContext
MFCreateVideoMediaType
MFCreateVideoMediaTypeFromBitMapInfoHeader
MFCreateVideoMediaTypeFromBitMapInfoHeaderEx
MFCreateVideoMediaTypeFromSubtype
MFCreateVideoMediaTypeFromVideoInfoHeader
MFCreateVideoMediaTypeFromVideoInfoHeader2
MFCreateVideoSampleAllocatorEx
MFCreateWICBitmapBuffer
MFCreateWICDecoderProxy
MFCreateWaveFormatExFromMFMediaType
MFDeserializeAttributesFromStream
MFDeserializeEvent
MFDeserializeMediaTypeFromStream
MFDeserializePresentationDescriptor
MFEndCreateFile
MFEndGetHostByName
MFEndRegisterWorkQueueWithMMCSS
MFEndUnregisterWorkQueueWithMMCSS
MFEnumLocalMFTRegistrations
MFFrameRateToAverageTimePerFrame
MFFreeAdaptersAddresses
MFGetAdaptersAddresses
MFGetAttributesAsBlob
MFGetAttributesAsBlobSize
MFGetCallStackTracingWeakReference
MFGetConfigurationDWORD
MFGetConfigurationPolicy
MFGetConfigurationStore
MFGetConfigurationString
MFGetContentProtectionSystemCLSID
MFGetMFTMerit
MFGetNumericNameFromSockaddr
MFGetPlaneSize
MFGetPlatformFlags
MFGetPlatformVersion
MFGetPluginControl
MFGetRandomNumber
MFGetSockaddrFromNumericName
MFGetStrideForBitmapInfoHeader
MFGetSupportedMimeTypes
MFGetSupportedSchemes
MFGetSystemTime
MFGetTimerPeriodicity
MFGetUncompressedVideoFormat
MFGetWorkQueueMMCSSClass
MFGetWorkQueueMMCSSPriority
MFGetWorkQueueMMCSSTaskId
MFHasLocallyRegisteredByteStreamHandlers
MFHasLocallyRegisteredSchemeHandlers
MFHeapAlloc
MFHeapFree
MFInitAMMediaTypeFromMFMediaType
MFInitAttributesFromBlob
MFInitMediaTypeFromAMMediaType
MFInitMediaTypeFromMFVideoFormat
MFInitMediaTypeFromMPEG1VideoInfo
MFInitMediaTypeFromMPEG2VideoInfo
MFInitMediaTypeFromVideoInfoHeader
MFInitMediaTypeFromVideoInfoHeader2
MFInitMediaTypeFromWaveFormatEx
MFInitVideoFormat
MFInitVideoFormat_RGB
MFInvalidateMFTEnumCache
MFInvokeCallback
MFIsBottomUpFormat
MFIsContentProtectionDeviceSupported
MFIsFeatureEnabled
MFIsLocallyRegisteredMimeType
MFIsLocallyRegisteredSchemeHandler
MFJoinWorkQueue
MFLockDXGIDeviceManager
MFLockPlatform
MFLockSharedWorkQueue
MFLockWorkQueue
MFMapDX9FormatToDXGIFormat
MFMapDXGIFormatToDX9Format
MFPlatformBigEndian
MFPlatformLittleEndian
MFPutWaitingWorkItem
MFPutWorkItem
MFPutWorkItem2
MFPutWorkItemEx
MFPutWorkItemEx2
MFRegisterLocalByteStreamHandler
MFRegisterLocalSchemeHandler
MFRegisterPlatformWithMMCSS
MFRemovePeriodicCallback
MFScheduleWorkItem
MFScheduleWorkItemEx
MFSerializeAttributesToStream
MFSerializeEvent
MFSerializeMediaTypeToStream
MFSerializePresentationDescriptor
MFSetMinimumMemoryAlignment
MFSetSockaddrAny
MFSetWindowForContentProtection
MFShutdown
MFSplitSample
MFStartup
MFStreamDescriptorProtectMediaType
MFTEnum
MFTEnum2
MFTEnumEx
MFTGetInfo
MFTRegister
MFTRegisterLocal
MFTRegisterLocalByCLSID
MFTUnregister
MFTUnregisterLocal
MFTUnregisterLocalByCLSID
MFTraceError
MFTraceFuncEnter
MFUnjoinWorkQueue
MFUnlockDXGIDeviceManager
MFUnlockPlatform
MFUnlockWorkQueue
MFUnregisterPlatformFromMMCSS
MFUnwrapMediaType
MFValidateMediaTypeSize
MFWrapMediaType
MFWrapSocket
MFllMulDiv
PropVariantFromStream
PropVariantToStream
ValidateWaveFormat
Sections
.text Size: 20KB - Virtual size: 19KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 524KB - Virtual size: 520KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 68KB - Virtual size: 67KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.pdata Size: 4KB - Virtual size: 312B
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_READ
.rsrc Size: 28KB - Virtual size: 26KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 905B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 2KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 4KB - Virtual size: 503B
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
Size: 8KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ