15[.]dll | Triage™

Resubmissions

12/05/2022, 21:08

220512-zzbl3sabg310

10/05/2022, 12:31

220510-pp1hcabehk10

04/05/2022, 21:07

220504-zynv1shdfj10

Sharing

Copy URL Twitter E-mail

General

Target
15.dll
Size 3.7MB
Sample220512-zzbl3sabg3
SHA256 897bf7aaeee44df44e04fb6b0a276d0be76298569252fe157a39d6071a17631c
MD5 8c85cc84e654fa7d4222e8c68dff334f
SHA1 9d8a1d0e1854d2f39e012b39df4651cb11663ca4
SHA512 d0e57b9617c9decab2542b4eec79da7191c4e381d4915b2ce5aa6ab71f1e7b7b8597869563a9219ca1b6fe177e50e392e2d44cf835f9f012d5b129b736f18d7e
SSDEEP 98304:XC1U4MA2mHB6FjNYhLPS5yS2/DMo4NH3WMq5oG63K485VDvpCuOlIMq+VjpEzAP8:XC1/Nej08J2/DfAwxd+lOECAPeYfdc
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

15.dll

.dll 3.7MB

15.dll

IMPHASH 2760fc33733df78a3e226e8649423402
SHA256 897bf7aaeee44df44e04fb6b0a276d0be76298569252fe157a39d6071a17631c
MD5 8c85cc84e654fa7d4222e8c68dff334f
SHA1 9d8a1d0e1854d2f39e012b39df4651cb11663ca4
SHA512 d0e57b9617c9decab2542b4eec79da7191c4e381d4915b2ce5aa6ab71f1e7b7b8597869563a9219ca1b6fe177e50e392e2d44cf835f9f012d5b129b736f18d7e
SSDEEP 98304:XC1U4MA2mHB6FjNYhLPS5yS2/DMo4NH3WMq5oG63K485VDvpCuOlIMq+VjpEzAP8:XC1/Nej08J2/DfAwxd+lOECAPeYfdc
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

10092

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

CreateFileA GetFileInformationByHandle CloseHandle GetLastError ConnectNamedPipe DisconnectNamedPipe HeapAlloc HeapFree GetProcessHeap InitializeCriticalSection EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection ExitProcess GetCurrentThreadId GetModuleFileNameA WaitForMultipleObjects CreateNamedPipeA WaitNamedPipeA CreateActCtxA ActivateActCtx QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx InterlockedFlushSList SetLastError DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetCurrentProcess TerminateProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte LCMapStringW FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetStdHandle GetFileType GetStringTypeW HeapSize HeapReAlloc SetStdHandle WriteFile FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx WriteConsoleW CreateFileW RaiseException