TS5[.]dll | Triage™

General

Target
TS5.dll
Size 323KB
Sample220707-pdqtrsgber
SHA256 27a886793c653bb69c886a3db1fb6753e9ecd184bd4459af9c315fa7ef29eeca
MD5 b08edb650316f8c46257b58767f5fd65
SHA1 b33b5864f47ad8f089e12893453fea00f4db27a5
SHA512 773e2b57fdc10571cefc243b9e697a7f74bbda4ea917c5e6f00bb7ad7cf1e1699fa406da1143d006e3afd2b90534f0b3f56af2f3ef022da773c6de94998bd317
SSDEEP 6144:APWA/nGhZPFrHhIUfSnkcJdDsf2dLPJViqiVTN1H3946yBPE5Eyi:APfuhZPDWzJOf8KVxZ394tPE5X
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

TS5.dll

.dll 323KB

TS5.dll

IMPHASH 82e76878f3d73e2f9e0fdc5dfcbc7363
SHA256 27a886793c653bb69c886a3db1fb6753e9ecd184bd4459af9c315fa7ef29eeca
MD5 b08edb650316f8c46257b58767f5fd65
SHA1 b33b5864f47ad8f089e12893453fea00f4db27a5
SHA512 773e2b57fdc10571cefc243b9e697a7f74bbda4ea917c5e6f00bb7ad7cf1e1699fa406da1143d006e3afd2b90534f0b3f56af2f3ef022da773c6de94998bd317
SSDEEP 6144:APWA/nGhZPFrHhIUfSnkcJdDsf2dLPJViqiVTN1H3946yBPE5Eyi:APfuhZPDWzJOf8KVxZ394tPE5X
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x64

Minor OS version

Major OS version

Entry point

66912

Magic Number

523

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetVersionExA FormatMessageA LocalFree GetCurrentProcess CloseHandle VirtualAlloc GetLastError SetStdHandle FlushFileBuffers HeapReAlloc HeapFree HeapAlloc GetProcAddress GetModuleHandleA ExitProcess ReadConsoleInputA SetConsoleMode GetConsoleMode WideCharToMultiByte MultiByteToWideChar GetCurrentThreadId FlsSetValue GetCommandLineA GetProcessHeap HeapSetInformation HeapCreate HeapDestroy WriteFile GetStdHandle GetModuleFileNameA FlsGetValue TlsFree FlsFree SetLastError TlsSetValue FlsAlloc DeleteCriticalSection LeaveCriticalSection EnterCriticalSection TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent RtlCaptureContext RtlUnwindEx LoadLibraryA InitializeCriticalSection CreateFileA RtlVirtualUnwind RtlLookupFunctionEntry GetCPInfo GetACP GetOEMCP LCMapStringA LCMapStringW Sleep SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetCurrentProcessId GetSystemTimeAsFileTime HeapSize GetLocaleInfoA WriteConsoleA GetConsoleOutputCP WriteConsoleW GetStringTypeA GetStringTypeW SetFilePointer GetConsoleCP

user32

MessageBoxA

advapi32

SetSecurityDescriptorOwner LookupAccountNameA IsValidSid CopySid OpenProcessToken GetTokenInformation LsaAddAccountRights LsaStorePrivateData LsaOpenPolicy LsaNtStatusToWinError AddAce GetAce GetAclInformation AddAccessDeniedAce InitializeAcl GetLengthSid AddAccessAllowedAce DeleteAce EqualSid RegCloseKey RegDeleteValueA RegOpenKeyExA RegSetValueExA RegQueryValueExA LookupAccountSidA FreeSid SetSecurityDescriptorGroup SetSecurityDescriptorDacl InitializeSecurityDescriptor AllocateAndInitializeSid GetSecurityDescriptorDacl MakeAbsoluteSD GetSecurityDescriptorGroup GetSecurityDescriptorOwner GetSecurityDescriptorSacl GetSecurityDescriptorLength RegCreateKeyExA MakeSelfRelativeSD LsaFreeMemory LsaClose LsaRetrievePrivateData

ole32

CoTaskMemFree CoTaskMemAlloc CoInitialize

Sharing