ooiwy[.]pdf[.]dll | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
ooiwy.pdf.dll
Size 316KB
Sample221002-sx2l6aebar
SHA256 f25a780095730701efac67e9d5b84bc289afea56d96d8aff8a44af69ae606404
MD5 4e4ae70b6346eae111e31716dc76bc23
SHA1 1e7b9af799048e4112d2468323c5c147e20558f9
SHA512 c6fe39e0d40ef150017d85719d4b4096244e58bd2384e420370302229d816e212658151fcf22bb847f3c16b4da2402a3f8dfc465dba563c5b0572e710018750e
SSDEEP 6144:v39GX5QjsakVCm+3OgNA0VEXf/DQEuOGAG:v65Qu/+egA0VutG
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

ooiwy.pdf.dll

.dll 316KB

ooiwy.pdf.dll

IMPHASH ab2c68685bab8fd78cc7ca3dc94a8e95
SHA256 f25a780095730701efac67e9d5b84bc289afea56d96d8aff8a44af69ae606404
MD5 4e4ae70b6346eae111e31716dc76bc23
SHA1 1e7b9af799048e4112d2468323c5c147e20558f9
SHA512 c6fe39e0d40ef150017d85719d4b4096244e58bd2384e420370302229d816e212658151fcf22bb847f3c16b4da2402a3f8dfc465dba563c5b0572e710018750e
SSDEEP 6144:v39GX5QjsakVCm+3OgNA0VEXf/DQEuOGAG:v65Qu/+egA0VutG
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

10841

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

mfc42

ord4486 ord2554 ord2512 ord5731 ord3922 ord1089 ord5199 ord2396 ord3346 ord5300 ord5302 ord2725 ord4079 ord4698 ord5307 ord5289 ord5714 ord2982 ord3147 ord3259 ord4465 ord3136 ord3262 ord2985 ord3081 ord2976 ord3830 ord3831 ord3825 ord3079 ord4080 ord4622 ord4424 ord3738 ord815 ord561 ord641 ord656 ord2514 ord2621 ord5265 ord4376 ord4998 ord6052 ord1775 ord6375 ord4425 ord3597 ord6055 ord4078 ord1776 ord4407 ord5241 ord2385 ord5163 ord6374 ord4353 ord5290 ord3798 ord4837 ord4441 ord2648 ord2055 ord6376 ord3749 ord5065 ord1727 ord5261 ord2446 ord2124 ord5277 ord3402 ord4627 ord3610 ord1146 ord1168 ord567 ord324 ord2302 ord4234 ord6199 ord6195 ord3870 ord4710 ord6453 ord4853 ord3874 ord2379 ord755 ord470 ord4274 ord4673 ord2818 ord5683 ord858 ord535 ord823 ord825 ord537 ord540 ord860 ord941 ord5280 ord800

msvcrt

_adjust_fdiv _initterm free _onexit __CxxFrameHandler _mbscmp atof _wcsicmp malloc atoi printf __dllonexit

kernel32

LoadLibraryA ExitProcess DisableThreadLibraryCalls GetCurrentProcess

user32

GetSystemMetrics GetClientRect DrawIcon SendMessageA EnableWindow LoadIconA IsIconic

advapi32

RegCreateKeyExA RegOpenKeyExA RegCloseKey RegQueryValueExA RegSetValueExA