check[.]dll | Triage

Sharing

General

Target

check.dll
Size

453KB
MD5

19cf698a9ec21bb5a1b12c9c462e2d3d
SHA1

b2b24c301064bfe51f9db437caeb50e6e4b7070d
SHA256

94dfc86b7314e9b0981a4e3667d5b82711ab82a3079f2441788bb9523249a7eb
SHA512

6f69f04682b6ce910b13a16ff1bd96802e4c0f85c72eda85231fb6be5ee6e520129d421aaa648c4f11fba117384a80376999a755fa30f837bb648ccc7a326991
SSDEEP

12288:oIa8AH657UylIxg2IAnrEfKqKrIm0DAg7Bhlkb:QLu2IGklKQ7lkb

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
check.dll

Files

check.dll
.dll windows x86

fe54aa4914f46efb2484d8839e21efc3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

shlwapi

wnsprintfA

kernel32

CloseHandle
CreateFileA
WriteFile

user32

GetClientRect
GetClassNameA
GetWindowTextA

Exports

Exports

StartW

Sections

.text
Size: 25KB - Virtual size: 25KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 1024B - Virtual size: 622B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 425KB - Virtual size: 425KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 184B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ