out[.]dll | Triage

Sharing

General

Target

out.dll
Size

17KB
MD5

23918b1f2c19defdcadd52121b4fd18b
SHA1

3f07408a0beb184b30fb6affdf2c57ccc6f99e4d
SHA256

1c441d7d8abb43824a77a15c539e46eafb8f098c5e0efcc57f8b688a12af18dd
SHA512

220f52f9a765a4095852750700c7211b27b5798e103a8e55fd40a2fce7f6bacb941d5149491d83487bd7b7e0cd48434d4769e91fbb98f09f2fb3c512abb99d99
SSDEEP

384:fbL37fBKnm8Cb2PLAXbmUO1mvNp5Mimca/:fbnBKCxmKNXYb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
out.dll

Files

out.dll
.dll windows x64

37af5cd8fc35f39f0815827f7b80b304

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

CreateMutexA
WaitForSingleObject
ReleaseMutex
Sleep
GetLastError
SetEvent
lstrcpyA
CloseHandle
CreateThread
ResetEvent
GetCurrentProcessId
GetComputerNameExA
DeleteCriticalSection
VirtualFree
VirtualAlloc
WaitForMultipleObjects
GetQueuedCompletionStatus
PostQueuedCompletionStatus
CreateIoCompletionPort
HeapFree
EnterCriticalSection
HeapReAlloc
InitializeCriticalSection
LeaveCriticalSection
HeapAlloc
HeapDestroy
HeapCreate
lstrlenA
CreateEventA

user32

wsprintfA

advapi32

GetUserNameA
SystemFunction036

ws2_32

inet_addr
select
gethostbyname
closesocket
socket
inet_ntoa
recv
htons
WSACleanup
WSAStartup
send
connect

iphlpapi

GetAdaptersInfo

Exports

Exports

VxlIgLMOfFEgfPMw

Sections

.text
Size: 8KB - Virtual size: 7KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 856B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 360B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ