lipes[.]dll | Triage™

General

Target
lipes.dll
Size 1.5MB
Sample220601-t3ng6aebck
SHA256 a27dfea07887442cd18f7f52d3f28994e9b93631a998fe254a8bc654fad94b4e
MD5 612d454fd024cee33892c3b7e0df89e7
SHA1 bdf97115951474a45eadf2c54003ef36dd1cf123
SHA512 5bb4de79dc7aa43b2bef93d54df515b64dbd8c199fb9c06e7acddaaaff989fc383a1f231a85bd0454917c49bef68011ab3285b3dfc55eb7dbc91338030226b50
SSDEEP 24576:S9J1n7sku6tQ9FZHRRsoX7c3hs72XBL7/rIVd1hWsmXIlPo2Ut3bR:S9JB4kJtMZHRRLU82BCWF6Po223l
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

lipes.dll

.dll 1.5MB

lipes.dll

IMPHASH 15bba266c2637d472ba4f6412cc30f5b
SHA256 a27dfea07887442cd18f7f52d3f28994e9b93631a998fe254a8bc654fad94b4e
MD5 612d454fd024cee33892c3b7e0df89e7
SHA1 bdf97115951474a45eadf2c54003ef36dd1cf123
SHA512 5bb4de79dc7aa43b2bef93d54df515b64dbd8c199fb9c06e7acddaaaff989fc383a1f231a85bd0454917c49bef68011ab3285b3dfc55eb7dbc91338030226b50
SSDEEP 24576:S9J1n7sku6tQ9FZHRRsoX7c3hs72XBL7/rIVd1hWsmXIlPo2Ut3bR:S9JB4kJtMZHRRLU82BCWF6Po223l
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

39180

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

SetCurrentDirectoryA CreateFileA FindClose FindFirstFileA FindNextFileA GetFileAttributesA GetFileType LockFile UnlockFile CloseHandle PeekNamedPipe HeapAlloc GetProcessHeap ExitProcess GetCurrentThreadId GetModuleFileNameA SwitchToFiber DeleteFiber CreateFiber CreateFileMappingA CreateNamedPipeA QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx InterlockedFlushSList GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetStdHandle GetModuleHandleExW WriteConsoleW GetCurrentProcess TerminateProcess MultiByteToWideChar WideCharToMultiByte HeapFree WriteFile LCMapStringW FindFirstFileExA IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetStringTypeW FlushFileBuffers GetConsoleCP GetConsoleMode HeapSize HeapReAlloc SetStdHandle SetFilePointerEx CreateFileW RaiseException

Name

.text

Size

99KB

Virtual Size

99KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

776KB

Virtual Size

775KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

667KB

Virtual Size

671KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

lipes.dll

kernel32