C:\Users\luq\source\repos\libdlc\_output\libdlc.pdb
Static task
static1
Behavioral task
behavioral1
Sample
f6ce2397faf8422662ef027e8f92b267cffc69eecc05139d57787632765e0578.exe
Resource
win7-20250207-en
General
-
Target
f6ce2397faf8422662ef027e8f92b267cffc69eecc05139d57787632765e0578
-
Size
1.6MB
-
MD5
0376e8bd1101e93d6cffe6506a66afeb
-
SHA1
3cb9fe7869515095c7ab4559fa7bacd3b822be94
-
SHA256
f6ce2397faf8422662ef027e8f92b267cffc69eecc05139d57787632765e0578
-
SHA512
2390eecfc32cd4eba221f8c690219284e73ce8154ac55bf5d872d6621e47f4da2043a4fb68db657fba7ee79193a4a2312352c60fec3a5675f2db75dcf721d786
-
SSDEEP
49152:EIMmB2/xzPfii1IvQb2DRX2gSw3ykLhAh14QBG7aqbjHq1:E/m2/x7fi1Ib2DH5ykmh1NB
Malware Config
Signatures
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
resource f6ce2397faf8422662ef027e8f92b267cffc69eecc05139d57787632765e0578
Files
-
f6ce2397faf8422662ef027e8f92b267cffc69eecc05139d57787632765e0578.exe windows:6 windows x86 arch:x86
64777a902076e9403d9dfdf29e88e1c6
Headers
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
PDB Paths
Imports
kernel32
GetThreadPriority
OutputDebugStringA
HeapSize
CreateFileW
SetStdHandle
GetProcessHeap
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetOEMCP
GetACP
IsValidCodePage
HeapReAlloc
ReadConsoleW
GetConsoleMode
GetCurrentThread
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
EnumSystemLocalesW
IsValidLocale
GetLocaleInfoW
LCMapStringW
OutputDebugStringW
WriteFile
SetThreadPriority
SetThreadAffinityMask
CloseHandle
ReadFile
FindClose
MultiByteToWideChar
QueryPerformanceCounter
QueryPerformanceFrequency
GetConsoleOutputCP
Sleep
GetCommandLineW
HeapAlloc
HeapFree
GetCommandLineA
ExitProcess
FindNextFileW
FindFirstFileExW
WriteConsoleW
GetModuleHandleExW
GetUserDefaultLCID
WaitForSingleObjectEx
GetCurrentThreadId
InitializeSRWLock
ReleaseSRWLockExclusive
AcquireSRWLockExclusive
TryAcquireSRWLockExclusive
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSectionEx
DeleteCriticalSection
EncodePointer
DecodePointer
LCMapStringEx
GetSystemTimeAsFileTime
GetModuleHandleW
GetProcAddress
GetStringTypeW
GetCPInfo
InitializeCriticalSectionAndSpinCount
SetEvent
ResetEvent
CreateEventW
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
GetStartupInfoW
GetCurrentProcessId
InitializeSListHead
RtlUnwind
RaiseException
GetLastError
SetLastError
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
FreeLibrary
LoadLibraryExW
GetStdHandle
GetFileType
GetModuleFileNameW
SetEndOfFile
user32
GetKeyState
UpdateWindow
SetWindowTextA
GetSystemMetrics
RegisterClassA
ShowCursor
ClientToScreen
DrawTextA
GetMessageA
PostQuitMessage
TranslateMessage
PeekMessageA
ScreenToClient
GetCursorPos
DispatchMessageA
GetAsyncKeyState
GetWindowRect
SetWindowPos
ShowWindow
SetWindowLongA
ChangeDisplaySettingsA
GetWindowLongA
MoveWindow
DefWindowProcA
CreateWindowExA
LoadIconA
GetClientRect
gdi32
SelectObject
CreateDIBSection
CreateCompatibleDC
GetGlyphOutlineA
DeleteDC
SetTextColor
GetTextExtentPointA
SetBkColor
DeleteObject
GetTextMetricsA
CreateFontA
ole32
CoInitialize
dinput8
DirectInput8Create
ddraw
DirectDrawCreate
Sections
.text Size: 1.3MB - Virtual size: 1.3MB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 251KB - Virtual size: 251KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 13KB - Virtual size: 24KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 17KB - Virtual size: 17KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 40KB - Virtual size: 40KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ
y����u7 Size: 16KB - Virtual size: 20KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE