stats[.]dll | Triage™

General

Target
stats.dll
Size 1.4MB
Sample220629-t3m7dsbbbl
SHA256 0a1f783975c84eb09e79a4c0c984ec8a9aa4de8deeb3b03bec3877bf4629bae5
MD5 fedf94189d8864feba90916b94376a80
SHA1 7f42b71a953192dda0a4a98fceff62a7a2ae4409
SHA512 df3082f4fed85d906406955b1f66cdb32cea99f1d959df2a983499321dd055456a19a1f9006ca5f6bf1421a2f296fab79cb2e46949674af655b55d981cc942f5
SSDEEP 24576:c2LkP3ADZXLAGUqyDZwNDJEZR3fgikAsB3fB0m:c2LwSJsGLvJmk5fB0
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

stats.dll

.dll 1.4MB

stats.dll

IMPHASH 33ffcdcf9962db8a714b2f6fb2e9b8f5
SHA256 0a1f783975c84eb09e79a4c0c984ec8a9aa4de8deeb3b03bec3877bf4629bae5
MD5 fedf94189d8864feba90916b94376a80
SHA1 7f42b71a953192dda0a4a98fceff62a7a2ae4409
SHA512 df3082f4fed85d906406955b1f66cdb32cea99f1d959df2a983499321dd055456a19a1f9006ca5f6bf1421a2f296fab79cb2e46949674af655b55d981cc942f5
SSDEEP 24576:c2LkP3ADZXLAGUqyDZwNDJEZR3fgikAsB3fB0m:c2LwSJsGLvJmk5fB0
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

10940

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

FindClose FindFirstFileA FindNextFileA SetFileAttributesA CloseHandle GetLastError HeapAlloc GetProcessHeap HeapWalk WaitForSingleObject GetCurrentProcessId ExitProcess CreateThread GetCurrentThreadId GetWindowsDirectoryA MapViewOfFile UnmapViewOfFile GetModuleFileNameA CreateFileMappingA OpenFileMappingA CreateNamedPipeA GetComputerNameA CreateActCtxA ReleaseActCtx ActivateActCtx DeactivateActCtx GetCurrentActCtx QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW RtlUnwindEx InterlockedFlushSList SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW GetCurrentProcess TerminateProcess GetModuleHandleExW MultiByteToWideChar WideCharToMultiByte HeapFree GetStdHandle GetFileType GetStringTypeW GetACP GetTimeZoneInformation CompareStringW LCMapStringW FindFirstFileExA IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetStdHandle RaiseException HeapSize HeapReAlloc WriteFile FlushFileBuffers GetConsoleCP GetConsoleMode SetFilePointerEx WriteConsoleW CreateFileW

Name

.text

Size

108KB

Virtual Size

107KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

825KB

Virtual Size

825KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

538KB

Virtual Size

542KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

5KB

Virtual Size

4KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

512B

Virtual Size

152B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

stats.dll

kernel32