information[.]dll | Triage™

General

Target
information.dll
Size 2.0MB
Sample220616-tng2tsfhfl
SHA256 fed9bc8df9141f8f8f7a9203bc26b5b22123c154702fcd625379f2f7ecd31cb2
MD5 c9216484a6371b055705ec5f4098ab01
SHA1 a13903e50408e11996159fba5f7deab1e73e8f08
SHA512 64485bb8e1845a29f9d60343a0bd6fd8de4220aa83f3cd19eed47737642b79db2753106192798d495202e74016f2e845d161c1362ad09b01104f9cfb8c939359
SSDEEP 49152:G+MhMvcxBbQLsks2EWZs09Xl3ZF9EK99sq+Zy1RDZ5ko4Ebv5g7H11zLG0ZriPkb:G+Yu/ZTjLHS3bmdeQbzWIu78ph13l3bS
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

information.dll

.dll 2.0MB

information.dll

IMPHASH 2dbfb26b6271bc1a04b3433a1c554f18
SHA256 fed9bc8df9141f8f8f7a9203bc26b5b22123c154702fcd625379f2f7ecd31cb2
MD5 c9216484a6371b055705ec5f4098ab01
SHA1 a13903e50408e11996159fba5f7deab1e73e8f08
SHA512 64485bb8e1845a29f9d60343a0bd6fd8de4220aa83f3cd19eed47737642b79db2753106192798d495202e74016f2e845d161c1362ad09b01104f9cfb8c939359
SSDEEP 49152:G+MhMvcxBbQLsks2EWZs09Xl3ZF9EK99sq+Zy1RDZ5ko4Ebv5g7H11zLG0ZriPkb:G+Yu/ZTjLHS3bmdeQbzWIu78ph13l3bS
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

12492

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetStdHandle GetCurrentDirectoryA CreateFileA GetFileInformationByHandle SetFileTime CloseHandle HeapAlloc GetProcessHeap GetCurrentProcessId ExitProcess CreateThread GetCurrentThreadId OpenThread ResumeThread MapViewOfFile GetModuleFileNameA CreateFileMappingA GetComputerNameA QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx InterlockedFlushSList GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetCurrentProcess TerminateProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte HeapFree LCMapStringW FindClose FindFirstFileExA FindNextFileA IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetFileType GetStringTypeW RaiseException HeapSize HeapReAlloc SetStdHandle WriteFile FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx WriteConsoleW CreateFileW

Name

.text

Size

89KB

Virtual Size

89KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

945KB

Virtual Size

944KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

967KB

Virtual Size

971KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

148B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

information.dll

kernel32