lfuaqwpuz[.]dll | Triage™

General

Target
lfuaqwpuz.dll
Size 516KB
Sample220324-sa1rcafcbr
SHA256 3e1d36766dfab3b000777a6c8a7742e3f454eb9270e835181cfb3ee04e8a1e62
MD5 8f42a7fb558edae380e2a8c4f4902b52
SHA1 d31d094799cfe75b24e4d89d7131d62adc5aca74
SHA512 9ce45ad47c3eacaa1c8fab38ff198ee45e714faa16a4cfbebbac2a3a46f9120134766f2c8df87843a5184a4c2d23fc9e89e17a3120bf94a4d7facc5f6ed82c7b
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

lfuaqwpuz.dll

.dll 516KB

lfuaqwpuz.dll

IMPHASH 2624c58336cbbd5a419b179231b2e65d
SHA256 3e1d36766dfab3b000777a6c8a7742e3f454eb9270e835181cfb3ee04e8a1e62
MD5 8f42a7fb558edae380e2a8c4f4902b52
SHA1 d31d094799cfe75b24e4d89d7131d62adc5aca74
SHA512 9ce45ad47c3eacaa1c8fab38ff198ee45e714faa16a4cfbebbac2a3a46f9120134766f2c8df87843a5184a4c2d23fc9e89e17a3120bf94a4d7facc5f6ed82c7b
MD5 SHA1 SHA512

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

38968

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

AreFileApisANSI GetOEMCP GetUserDefaultUILanguage GetLargePageMinimum UnregisterApplicationRecoveryCallback GetCommandLineA GetThreadUILanguage SwitchToThread UnregisterApplicationRestart GetEnvironmentStringsW GetCommandLineW GetSystemDefaultUILanguage VirtualAlloc GetUserDefaultLangID GetCurrentThreadId IsSystemResumeAutomatic GetACP GetTickCount64 GetCurrentThread TlsAlloc GetCurrentProcessorNumber GetProcessHeap SetFileApisToOEM GetTickCount WriteConsoleW CloseHandle CreateFileW SetFilePointerEx GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers SetStdHandle HeapReAlloc HeapSize GetStringTypeW GetFileType GetStdHandle GetErrorMode QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx InterlockedFlushSList GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException RtlPcToFileHeader GetCurrentProcess ExitProcess TerminateProcess GetModuleHandleExW GetModuleFileNameW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetCPInfo MultiByteToWideChar WideCharToMultiByte FreeEnvironmentStringsW FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW

user32

IsWow64Message GetMessageTime GetFocus GetOpenClipboardWindow AnyPopup GetCapture GetMenuCheckMarkDimensions EmptyClipboard GetKBCodePage DestroyCaret SetProcessDPIAware CreateMenu GetCursor GetActiveWindow IsProcessDPIAware GetForegroundWindow GetDialogBaseUnits

gdi32

GdiFlush

ole32

OleUninitialize CoUninitialize

Name

.text

Size

98KB

Virtual Size

98KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

405KB

Virtual Size

405KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

3KB

Virtual Size

14KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

_RDATA

Size

512B

Virtual Size

252B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

248B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

lfuaqwpuz.dll

kernel32

user32

gdi32

ole32