user[.]dat[.]dll | Triage™

General

Target
user.dat.dll
Size 516KB
Sample221222-xs7ptsac21
SHA256 ac99b1d6fa6746b9a2e89f404e88a7fc249daf9cda5bb1f1639371cd36379237
MD5 e351d66cd0103864d9fdb439a451b253
SHA1 d1d9c420c4b06e33f4bd8b84f740be04db035fc4
SHA512 002c853352a06868d0a9b0201ee7dfc5e83b201c48d85bb7914f3e314012256129a752d8b05829074ee3364656a2c239f5eae0105c3597a432f89961b6d7bb62
SSDEEP 12288:+ihnctArBgRprvbiIIAuz19n26pmpmlCO:HnqAyprvbiIIAuRUmxf
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

user.dat.dll

.dll 516KB

user.dat.dll

IMPHASH d0ce5a8d5d0f4fa36cbdd8035bad1ebc
SHA256 ac99b1d6fa6746b9a2e89f404e88a7fc249daf9cda5bb1f1639371cd36379237
MD5 e351d66cd0103864d9fdb439a451b253
SHA1 d1d9c420c4b06e33f4bd8b84f740be04db035fc4
SHA512 002c853352a06868d0a9b0201ee7dfc5e83b201c48d85bb7914f3e314012256129a752d8b05829074ee3364656a2c239f5eae0105c3597a432f89961b6d7bb62
SSDEEP 12288:+ihnctArBgRprvbiIIAuz19n26pmpmlCO:HnqAyprvbiIIAuRUmxf
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

35315

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

DeleteCriticalSection InitializeCriticalSection LeaveCriticalSection EnterCriticalSection DebugBreak GetCommandLineA GetVersion RtlUnwind HeapFree GetLastError CloseHandle WriteFile ReadFile ExitProcess TerminateProcess GetCurrentProcess SetHandleCount GetStdHandle GetFileType GetStartupInfoA HeapAlloc GetProcAddress GetModuleHandleA GetModuleFileNameA GetEnvironmentVariableA GetVersionExA HeapDestroy HeapCreate VirtualFree FreeEnvironmentStringsA FreeEnvironmentStringsW WideCharToMultiByte GetEnvironmentStrings GetEnvironmentStringsW MultiByteToWideChar GetStringTypeA GetStringTypeW VirtualAlloc HeapReAlloc IsBadWritePtr SetStdHandle FlushFileBuffers SetFilePointer CreateFileA GetCPInfo GetACP GetOEMCP LoadLibraryA SetEndOfFile LCMapStringA LCMapStringW GlobalMemoryStatus GetTickCount FindFirstFileA OpenFile lstrcpynA GetDriveTypeA IsDBCSLeadByte lstrlenA GetFileAttributesA _lclose _llseek _lread _lwrite DeleteFileA FreeLibrary GetDiskFreeSpaceA GetTempFileNameA GetTempPathA lstrcatA lstrcpyA FindClose CompareStringA FileTimeToSystemTime FileTimeToLocalFileTime FindNextFileA CreateDirectoryA RemoveDirectoryA SetEnvironmentVariableA CompareStringW IsDBCSLeadByteEx MoveFileA GetTimeZoneInformation GetSystemTime GetLocalTime HeapCompact RaiseException GetCurrentProcessId SetUnhandledExceptionFilter IsBadReadPtr IsBadCodePtr

user32

MessageBoxA CharUpperBuffA CharToOemBuffA OemToCharBuffA GetActiveWindow

mpr

WNetEnumResourceA WNetCloseEnum WNetGetConnectionA WNetOpenEnumA WNetAddConnection2A

Sharing