tmpED62[.]dll[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
tmpED62.dll.exe
Size 821KB
Sample221207-3clejsge29
SHA256 b99aba08a984359703f765f57ea9714232baf2397d774cd8ed81258c1c4896fc
MD5 78bb5b0c9f7e2d5cabf36deee8941d80
SHA1 c988e68e09364ffbfaafc5036ae98b91144b3aa2
SHA512 5c7e22342a35f963576cdf3a5129a57af7526d2d61ba7fdec6c96014790168f540c810e43180a7f19f3ee86b5bb3c044d972d9783606db1d07b83c1dbfa34c7b
SSDEEP 24576:8VVT+XirpTs7sx0QBnoNjla+idlpdIFyF3N8:QF+uTsAx0tlpidvdkyF3N8
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

tmpED62.dll.exe

.dll 821KB

tmpED62.dll.exe

IMPHASH fcd69661d52485330c4a65d12b66db6d
SHA256 b99aba08a984359703f765f57ea9714232baf2397d774cd8ed81258c1c4896fc
MD5 78bb5b0c9f7e2d5cabf36deee8941d80
SHA1 c988e68e09364ffbfaafc5036ae98b91144b3aa2
SHA512 5c7e22342a35f963576cdf3a5129a57af7526d2d61ba7fdec6c96014790168f540c810e43180a7f19f3ee86b5bb3c044d972d9783606db1d07b83c1dbfa34c7b
SSDEEP 24576:8VVT+XirpTs7sx0QBnoNjla+idlpdIFyF3N8:QF+uTsAx0tlpidvdkyF3N8
MD5 SHA1 SHA512 SSDEEP

windows x64

Minor OS version

Major OS version

Entry point

4944

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

hOVER_best_destroy hOVER_best_finish hOVER_best_init hOVER_best_start hOVER_best_wait hOVER_checkTotalCompressedSize hOVER_computeEpochs hOVER_dictSelectionError hOVER_dictSelectionFree hOVER_dictSelectionIsError hOVER_selectDict hOVER_sum hOVER_warnOnSmallCorpus hRR_getErrorString hSE_NCountWriteBound hSE_buildCTable_raw hSE_buildCTable_rle hSE_buildCTable_wksp hSE_buildDTable hSE_buildDTable_raw hSE_buildDTable_rle hSE_buildDTable_wksp hSE_compress hSE_compress2 hSE_compressBound hSE_compress_usingCTable hSE_compress_wksp hSE_createCTable hSE_createDTable hSE_decompress hSE_decompress_usingDTable hSE_decompress_wksp hSE_decompress_wksp_bmi2 hSE_freeCTable hSE_freeDTable hSE_getErrorName hSE_isError hSE_normalizeCount hSE_optimalTableLog hSE_optimalTableLog_internal hSE_readNCount hSE_readNCount_bmi2 hSE_versionNumber hSE_writeNCount hIST_count hIST_countFast hIST_countFast_wksp hIST_count_simple hIST_count_wksp hIST_isError hUF_buildCTable hUF_buildCTable_wksp hUF_compress hUF_compress1X hUF_compress1X_repeat hUF_compress1X_usingCTable hUF_compress1X_usingCTable_bmi2 hUF_compress1X_wksp hUF_compress2 hUF_compress4X_repeat hUF_compress4X_usingCTable hUF_compress4X_usingCTable_bmi2 hUF_compress4X_wksp hUF_compressBound hUF_decompress hUF_decompress1X1 hUF_decompress1X1_DCtx hUF_decompress1X1_DCtx_wksp hUF_decompress1X1_DCtx_wksp_bmi2 hUF_decompress1X1_usingDTable hUF_decompress1X2 hUF_decompress1X2_DCtx hUF_decompress1X2_DCtx_wksp hUF_decompress1X2_usingDTable hUF_decompress1X_DCtx hUF_decompress1X_DCtx_wksp hUF_decompress1X_usingDTable hUF_decompress1X_usingDTable_bmi2 hUF_decompress4X1 hUF_decompress4X1_DCtx hUF_decompress4X1_DCtx_wksp hUF_decompress4X1_usingDTable hUF_decompress4X2 hUF_decompress4X2_DCtx hUF_decompress4X2_DCtx_wksp hUF_decompress4X2_usingDTable hUF_decompress4X_DCtx hUF_decompress4X_hufOnly hUF_decompress4X_hufOnly_wksp hUF_decompress4X_hufOnly_wksp_bmi2 hUF_decompress4X_usingDTable hUF_decompress4X_usingDTable_bmi2 hUF_estimateCompressedSize hUF_getErrorName hUF_getNbBitsFromCTable hUF_isError hUF_optimalTableLog hUF_readCTable hUF_readDTableX1 hUF_readDTableX1_wksp hUF_readDTableX1_wksp_bmi2 hUF_readDTableX2 hUF_readDTableX2_wksp hUF_readDTableX2_wksp_bmi2 hUF_readStats hUF_readStats_wksp hUF_selectDecoder hUF_validateCTable hUF_writeCTable hUF_writeCTable_wksp hOOL_add hOOL_create hOOL_create_advanced hOOL_free hOOL_resize hOOL_sizeof hOOL_tryAdd hDICT_addEntropyTablesFromBuffer hDICT_finalizeDictionary hDICT_getDictHeaderSize hDICT_getDictID hDICT_getErrorName hDICT_isError hDICT_optimizeTrainFromBuffer_cover hDICT_optimizeTrainFromBuffer_fastCover hDICT_trainFromBuffer hDICT_trainFromBuffer_cover hDICT_trainFromBuffer_fastCover hDICT_trainFromBuffer_legacy hSTDMT_compressStream_generic hSTDMT_createCCtx_advanced hSTDMT_freeCCtx hSTDMT_getFrameProgression hSTDMT_initCStream_internal hSTDMT_nextInputSizeHint hSTDMT_sizeof_CCtx hSTDMT_toFlushNow hSTDMT_updateCParams_whileCompressing hSTD_CCtxParams_getParameter hSTD_CCtxParams_init hSTD_CCtxParams_init_advanced hSTD_CCtxParams_reset hSTD_CCtxParams_setParameter hSTD_CCtx_getParameter hSTD_CCtx_loadDictionary hSTD_CCtx_loadDictionary_advanced hSTD_CCtx_loadDictionary_byReference hSTD_CCtx_refCDict hSTD_CCtx_refPrefix hSTD_CCtx_refPrefix_advanced hSTD_CCtx_refThreadPool hSTD_CCtx_reset hSTD_CCtx_setParameter hSTD_CCtx_setParametersUsingCCtxParams hSTD_CCtx_setPledgedSrcSize hSTD_CCtx_trace hSTD_CStreamInSize hSTD_CStreamOutSize hSTD_DCtx_getParameter hSTD_DCtx_loadDictionary hSTD_DCtx_loadDictionary_advanced hSTD_DCtx_loadDictionary_byReference hSTD_DCtx_refDDict hSTD_DCtx_refPrefix hSTD_DCtx_refPrefix_advanced hSTD_DCtx_reset hSTD_DCtx_setFormat hSTD_DCtx_setMaxWindowSize hSTD_DCtx_setParameter hSTD_DDict_dictContent hSTD_DDict_dictSize hSTD_DStreamInSize hSTD_DStreamOutSize hSTD_XXH32 hSTD_XXH32_canonicalFromHash hSTD_XXH32_copyState hSTD_XXH32_createState hSTD_XXH32_digest hSTD_XXH32_freeState hSTD_XXH32_hashFromCanonical hSTD_XXH32_reset hSTD_XXH32_update hSTD_XXH64 hSTD_XXH64_canonicalFromHash hSTD_XXH64_copyState hSTD_XXH64_createState hSTD_XXH64_digest hSTD_XXH64_freeState hSTD_XXH64_hashFromCanonical hSTD_XXH64_reset hSTD_XXH64_update hSTD_XXH_versionNumber hSTD_adjustCParams hSTD_buildBlockEntropyStats hSTD_buildCTable hSTD_buildFSETable hSTD_cParam_getBounds hSTD_checkCParams hSTD_checkContinuity hSTD_compress hSTD_compress2 hSTD_compressBegin hSTD_compressBegin_advanced hSTD_compressBegin_advanced_internal hSTD_compressBegin_usingCDict hSTD_compressBegin_usingCDict_advanced hSTD_compressBegin_usingDict hSTD_compressBlock hSTD_compressBlock_btlazy2 hSTD_compressBlock_btlazy2_dictMatchState hSTD_compressBlock_btlazy2_extDict hSTD_compressBlock_btopt hSTD_compressBlock_btopt_dictMatchState hSTD_compressBlock_btopt_extDict hSTD_compressBlock_btultra hSTD_compressBlock_btultra2 hSTD_compressBlock_btultra_dictMatchState hSTD_compressBlock_btultra_extDict hSTD_compressBlock_doubleFast hSTD_compressBlock_doubleFast_dictMatchState hSTD_compressBlock_doubleFast_extDict hSTD_compressBlock_fast hSTD_compressBlock_fast_dictMatchState hSTD_compressBlock_fast_extDict hSTD_compressBlock_greedy hSTD_compressBlock_greedy_dedicatedDictSearch hSTD_compressBlock_greedy_dedicatedDictSearch_row hSTD_compressBlock_greedy_dictMatchState hSTD_compressBlock_greedy_dictMatchState_row hSTD_compressBlock_greedy_extDict hSTD_compressBlock_greedy_extDict_row hSTD_compressBlock_greedy_row hSTD_compressBlock_lazy hSTD_compressBlock_lazy2 hSTD_compressBlock_lazy2_dedicatedDictSearch hSTD_compressBlock_lazy2_dedicatedDictSearch_row hSTD_compressBlock_lazy2_dictMatchState hSTD_compressBlock_lazy2_dictMatchState_row hSTD_compressBlock_lazy2_extDict hSTD_compressBlock_lazy2_extDict_row hSTD_compressBlock_lazy2_row hSTD_compressBlock_lazy_dedicatedDictSearch hSTD_compressBlock_lazy_dedicatedDictSearch_row hSTD_compressBlock_lazy_dictMatchState hSTD_compressBlock_lazy_dictMatchState_row hSTD_compressBlock_lazy_extDict hSTD_compressBlock_lazy_extDict_row hSTD_compressBlock_lazy_row hSTD_compressBound hSTD_compressCCtx hSTD_compressContinue hSTD_compressEnd hSTD_compressLiterals hSTD_compressRleLiteralsBlock hSTD_compressSequences hSTD_compressStream hSTD_compressStream2 hSTD_compressStream2_simpleArgs hSTD_compressSuperBlock hSTD_compress_advanced hSTD_compress_advanced_internal hSTD_compress_usingCDict hSTD_compress_usingCDict_advanced hSTD_compress_usingDict hSTD_copyCCtx hSTD_copyDCtx hSTD_copyDDictParameters hSTD_createCCtx hSTD_createCCtxParams hSTD_createCCtx_advanced hSTD_createCDict hSTD_createCDict_advanced hSTD_createCDict_advanced2 hSTD_createCDict_byReference hSTD_createCStream hSTD_createCStream_advanced hSTD_createDCtx hSTD_createDCtx_advanced hSTD_createDDict hSTD_createDDict_advanced hSTD_createDDict_byReference hSTD_createDStream hSTD_createDStream_advanced hSTD_createThreadPool hSTD_crossEntropyCost hSTD_customCalloc hSTD_customFree hSTD_customMalloc hSTD_cycleLog hSTD_dParam_getBounds hSTD_decodeLiteralsBlock hSTD_decodeSeqHeaders hSTD_decodingBufferSize_min hSTD_decompress hSTD_decompressBegin hSTD_decompressBegin_usingDDict hSTD_decompressBegin_usingDict hSTD_decompressBlock hSTD_decompressBlock_internal hSTD_decompressBound hSTD_decompressContinue hSTD_decompressDCtx hSTD_decompressStream hSTD_decompressStream_simpleArgs hSTD_decompress_usingDDict hSTD_decompress_usingDict hSTD_dedicatedDictSearch_lazy_loadDictionary hSTD_defaultCLevel hSTD_encodeSequences hSTD_endStream hSTD_estimateCCtxSize hSTD_estimateCCtxSize_usingCCtxParams hSTD_estimateCCtxSize_usingCParams hSTD_estimateCDictSize hSTD_estimateCDictSize_advanced hSTD_estimateCStreamSize hSTD_estimateCStreamSize_usingCCtxParams hSTD_estimateCStreamSize_usingCParams hSTD_estimateDCtxSize hSTD_estimateDDictSize hSTD_estimateDStreamSize hSTD_estimateDStreamSize_fromFrame hSTD_fillDoubleHashTable hSTD_fillHashTable hSTD_findDecompressedSize hSTD_findFrameCompressedSize hSTD_flushStream hSTD_frameHeaderSize hSTD_freeCCtx hSTD_freeCCtxParams hSTD_freeCDict hSTD_freeCStream hSTD_freeDCtx hSTD_freeDDict hSTD_freeDStream hSTD_freeThreadPool hSTD_fseBitCost hSTD_generateSequences hSTD_getBlockSize hSTD_getCParams hSTD_getCParamsFromCCtxParams hSTD_getCParamsFromCDict hSTD_getDecompressedSize hSTD_getDictID_fromCDict hSTD_getDictID_fromDDict hSTD_getDictID_fromDict hSTD_getDictID_fromFrame hSTD_getErrorCode hSTD_getErrorName hSTD_getErrorString hSTD_getFrameContentSize hSTD_getFrameHeader hSTD_getFrameHeader_advanced hSTD_getFrameProgression hSTD_getParams hSTD_getSeqStore hSTD_getcBlockSize hSTD_initCStream hSTD_initCStream_advanced hSTD_initCStream_internal hSTD_initCStream_srcSize hSTD_initCStream_usingCDict hSTD_initCStream_usingCDict_advanced hSTD_initCStream_usingDict hSTD_initDStream hSTD_initDStream_usingDDict hSTD_initDStream_usingDict hSTD_initStaticCCtx hSTD_initStaticCDict hSTD_initStaticCStream hSTD_initStaticDCtx hSTD_initStaticDDict hSTD_initStaticDStream hSTD_insertAndFindFirstIndex hSTD_insertBlock hSTD_invalidateRepCodes hSTD_isError hSTD_isFrame hSTD_isSkippableFrame hSTD_ldm_adjustParameters hSTD_ldm_blockCompress hSTD_ldm_fillHashTable hSTD_ldm_generateSequences hSTD_ldm_getMaxNbSeq hSTD_ldm_getTableSize hSTD_ldm_skipRawSeqStoreBytes hSTD_ldm_skipSequences hSTD_loadCEntropy hSTD_loadDEntropy hSTD_maxCLevel hSTD_mergeBlockDelimiters hSTD_minCLevel hSTD_nextInputType hSTD_nextSrcSizeToDecompress hSTD_noCompressLiterals hSTD_pthread_create hSTD_pthread_join hSTD_readSkippableFrame hSTD_referenceExternalSequences hSTD_resetCStream hSTD_resetDStream hSTD_resetSeqStore hSTD_reset_compressedBlockState hSTD_row_update hSTD_selectBlockCompressor hSTD_selectEncodingType hSTD_seqToCodes hSTD_sizeof_CCtx hSTD_sizeof_CDict hSTD_sizeof_CStream hSTD_sizeof_DCtx hSTD_sizeof_DDict hSTD_sizeof_DStream hSTD_toFlushNow hSTD_updateTree hSTD_versionNumber hSTD_versionString hSTD_writeLastEmptyBlock hSTD_writeSkippableFrame hivbwt hivsufsort h_ZSTD_threading_useless_symbol init

Name

.text

Size

742KB

Virtual Size

741KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

512B

Virtual Size

480B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

27KB

Virtual Size

26KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

8KB

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

11KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

88B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

12KB

Virtual Size

11KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

512B

Virtual Size

428B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

tmpED62.dll.exe

kernel32

msvcrt