g:\Acro_root_at\bravo\public\libraries\windows\release\dynamic\BIBcrtstdll\BIB.pdb
Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Static task
static1
Behavioral task
behavioral1
Sample
6db87102d00ab090b552675b0a6a46d51f83d214d1a52ab27db392bb6208edf0N.dll
Resource
win7-20240903-en
General
-
Target
6db87102d00ab090b552675b0a6a46d51f83d214d1a52ab27db392bb6208edf0N.exe
-
Size
439KB
-
MD5
afca455fdde4658e22c9bbbb75c124f0
-
SHA1
3bb347d1f42ba804c920ef5e43f226eddb8796a6
-
SHA256
6db87102d00ab090b552675b0a6a46d51f83d214d1a52ab27db392bb6208edf0
-
SHA512
48c67bfaf755b4fcd36ff89ef55bbdc61e289e0da8a0f5330e825e1ef0dbb12ef5c5d03c65f62c79992b90cbf1427114cd7a72126326e6622fca00f04150acac
-
SSDEEP
6144:yOp8HpzdQOStK+XsAWxnuTNo3+wO90oi8T:yOp8Hpz7+XsBJ+SXO9g8T
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource 6db87102d00ab090b552675b0a6a46d51f83d214d1a52ab27db392bb6208edf0N.exe
Files
-
6db87102d00ab090b552675b0a6a46d51f83d214d1a52ab27db392bb6208edf0N.exe.dll windows:4 windows x86 arch:x86
4104f39762099d6928c8f8e15da57503
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL
PDB Paths
Imports
kernel32
QueryPerformanceCounter
GetSystemTimeAsFileTime
CloseHandle
CreateThread
SetCurrentDirectoryA
GetCurrentDirectoryA
GetCurrentThreadId
GetTickCount
IsDebuggerPresent
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
InterlockedCompareExchange
Sleep
InterlockedExchange
GetCurrentProcessId
msvcr80
malloc
free
fseek
ftell
feof
ferror
fread
fflush
fclose
fwrite
fopen
__RTDynamicCast
_encode_pointer
__dllonexit
_lock
_onexit
_decode_pointer
?terminate@@YAXXZ
_malloc_crt
_encoded_null
_initterm
_initterm_e
_amsg_exit
_adjust_fdiv
__CppXcptFilter
_crt_debugger_hook
?_type_info_dtor_internal_method@type_info@@QAEXXZ
_except_handler4_common
__clean_type_info_names_internal
_purecall
??3@YAXPAX@Z
memset
strlen
memcpy
qsort
log
strcmp
_CxxThrowException
__CxxFrameHandler3
_unlock
Exports
Exports
BIBGetGetProcAddress
BIBGetVersion
BIBInitialize
BIBInitialize2
BIBInitialize3
BIBInitialize4
BIBLockSmithAssertNoLocksImpl
BIBLockSmithDeleteImpl
BIBLockSmithLockImpl
BIBLockSmithUnlockImpl
BIBTerminate
Sections
.text Size: 56KB - Virtual size: 55KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 2KB - Virtual size: 3KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 1KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 7KB - Virtual size: 7KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
.text Size: 342KB - Virtual size: 344KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE