f08ffc855b9d9de8fca32c4da5f0f585[.]dll[.]exe

General

Target
f08ffc855b9d9de8fca32c4da5f0f585.dll.exe
Size 3.8MB
Sample221220-lyc7macd2x
SHA256 76bcdbd0b4f4d9db2d11ec26a3becfcd3b17049efa4bceb0e32fa7e4c1d004a1
MD5 f08ffc855b9d9de8fca32c4da5f0f585
SHA1 eaa65d3de8c15d905cbcefb15ffb3df159aadc40
SHA512 526e141163e1981af8b19f7d1ed1f6d6d3f57084a4930a562e6d950df6fb536f1ae9dc3d1fcac8caa1b01619b1ddab94245df965bae401f523d6082e6adf9bd4
SSDEEP 24576:uH8Pf2oZ6/u/ILJl0yo3iHc1LVlwJt4AfVGj3d+j5gn3jpp13WOTVPC4K9JKZq+C:wfP5gnzppkoCTDv+oAcSHY
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

f08ffc855b9d9de8fca32c4da5f0f585.dll.exe

.dll 3.8MB

f08ffc855b9d9de8fca32c4da5f0f585.dll.exe

IMPHASH 2c974d07f3a49352022eb09a7a9494cd
SHA256 76bcdbd0b4f4d9db2d11ec26a3becfcd3b17049efa4bceb0e32fa7e4c1d004a1
MD5 f08ffc855b9d9de8fca32c4da5f0f585
SHA1 eaa65d3de8c15d905cbcefb15ffb3df159aadc40
SHA512 526e141163e1981af8b19f7d1ed1f6d6d3f57084a4930a562e6d950df6fb536f1ae9dc3d1fcac8caa1b01619b1ddab94245df965bae401f523d6082e6adf9bd4
SSDEEP 24576:uH8Pf2oZ6/u/ILJl0yo3iHc1LVlwJt4AfVGj3d+j5gn3jpp13WOTVPC4K9JKZq+C:wfP5gnzppkoCTDv+oAcSHY
MD5 SHA1 SHA512 SSDEEP

Minor OS version

Major OS version

Entry point

3111840

Magic Number

523

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE

PDB paths

kernel32

GetCurrentThread GetThreadTimes VirtualAlloc QueryPerformanceFrequency GetProcAddress QueryPerformanceCounter SetLastError VirtualProtect GetLastError WideCharToMultiByte InitializeSRWLock ReleaseSRWLockExclusive AcquireSRWLockExclusive EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx TryEnterCriticalSection DeleteCriticalSection GetCurrentThreadId EncodePointer DecodePointer MultiByteToWideChar LCMapStringEx GetSystemTimeAsFileTime GetModuleHandleW GetStringTypeW GetCPInfo InitializeSListHead RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent CloseHandle InitializeCriticalSectionAndSpinCount SetEvent ResetEvent WaitForSingleObjectEx CreateEventW IsDebuggerPresent GetStartupInfoW GetCurrentProcessId RtlPcToFileHeader RaiseException RtlUnwindEx InterlockedPushEntrySList InterlockedFlushSList TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW HeapAlloc HeapFree LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetStdHandle GetFileType FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW HeapReAlloc HeapSize FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetStdHandle CreateFileW WriteConsoleW SetEndOfFile RtlUnwind

advapi32

CryptReleaseContext CryptAcquireContextA CryptGenRandom

Resubmissions

Sharing