login[.]dll | Triage™

General

Target
login.dll
Size 614KB
Sample230207-h9hppsab28
SHA256 9cc3318cdf29c5b6a1c170facbd0e7849b674ecd2072d9741424709e0931f8cf
MD5 34fe297ae7f34d3062cb6adb5363970a
SHA1 ab2c8edc316e5e55ce258bcc6f165ec9b7e92e28
SHA512 8629116073b3c7cf6b700e9a3b577b31543a30584538e7d8fe63b78e62938976917c399f3e63f74cb003bd19458d860f74ed77ae3a11cc68f32b296c84bfb442
SSDEEP 6144:pYQoxugZKqxvBWqg+wyJzYH7nQYorovRQWDRSpPUeinhnBeY:kYqdBWOvNgorDWUUeinhnBt
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

login.dll

.dll 614KB

login.dll

IMPHASH 91d84abb2a106c8482be2981cbb80ded
SHA256 9cc3318cdf29c5b6a1c170facbd0e7849b674ecd2072d9741424709e0931f8cf
MD5 34fe297ae7f34d3062cb6adb5363970a
SHA1 ab2c8edc316e5e55ce258bcc6f165ec9b7e92e28
SHA512 8629116073b3c7cf6b700e9a3b577b31543a30584538e7d8fe63b78e62938976917c399f3e63f74cb003bd19458d860f74ed77ae3a11cc68f32b296c84bfb442
SSDEEP 6144:pYQoxugZKqxvBWqg+wyJzYH7nQYorovRQWDRSpPUeinhnBeY:kYqdBWOvNgorDWUUeinhnBt
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

110179

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

FindNextFileA SleepEx ExitProcess GetTickCount GetSystemDirectoryA FreeLibrary GetProcAddress LoadLibraryExA GetCommandLineA CreateDirectoryA GetTickCount64 VirtualAlloc GetCurrentDirectoryA GetFileAttributesA FindFirstFileA GetCurrentThreadId GetModuleHandleA lstrcmpA lstrcmpiA lstrlenA CloseHandle CreateFileW SetFilePointerEx GetConsoleMode GetConsoleOutputCP FindClose GetCurrentProcess GetEnvironmentStrings WriteFile FlushFileBuffers SetStdHandle HeapReAlloc HeapSize IsProcessorFeaturePresent IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead TerminateProcess RaiseException RtlUnwind InterlockedFlushSList GetLastError SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree LoadLibraryExW GetModuleHandleExW GetModuleFileNameW HeapAlloc HeapFree MultiByteToWideChar LCMapStringW MoveFileExW DecodePointer FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineW WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap GetStdHandle GetFileType GetStringTypeW WriteConsoleW

user32

CloseWindow DestroyWindow PostQuitMessage DefWindowProcA SendMessageTimeoutA CreateDialogParamA FindWindowA

advapi32

RegEnumKeyA RegOpenKeyA

shlwapi

StrToIntA PathAppendA PathFileExistsW PathFindSuffixArrayA

Sharing