slc[.]dll | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

slc.dll
Size

6KB
MD5

e2840606372ab67b7107ce757d506c28
SHA1

87c1c645eba6d6a2aa695d4fd2ece5fc5e5568ef
SHA256

37e20a504ade965184d92ed5ca415cde899090a6a20ea3abf8c85ff9648b66f4
SHA512

cf7914a6a8c6d878caeb7f726f86fbdc77d2ea246d9ea600d82a0c66e4154ee0acdbd3ff5949523b35642735d741fde39d177e5d4aff83ea4475ef84e0188ab6
SSDEEP

96:B42g18NxaCRTqVSv6SqjNK03LhxMX7Z1NXSEsAYEiXR2PQ9zy:SQRTYSv6bzxMX7Z1NXSEsSlPky

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
slc.dll

Files

slc.dll
.dll windows:4 windows x86

34af5e85d00bbfdc35025f10757712af

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DEBUG_STRIPPED
IMAGE_FILE_DLL

Imports

advapi32

RegCloseKey
RegEnumValueW
RegOpenKeyExA
RegQueryValueExW
RegSetValueExW

kernel32

LocalAlloc
LocalFree

ntdll

NtQueryLicenseValue
wcslen

ole32

CLSIDFromString
StringFromGUID2

shlwapi

PathMatchSpecW

Exports

Exports

SLClose
SLConsumeRight
SLConsumeWindowsRight
SLDepositOfflineConfirmationId
SLDepositOfflineConfirmationIdEx
SLFireEvent
SLGenerateOfflineInstallationId
SLGenerateOfflineInstallationIdEx
SLGetApplicationInformation
SLGetGenuineInformation
SLGetInstalledProductKeyIds
SLGetLicense
SLGetLicenseFileId
SLGetLicenseInformation
SLGetLicensingStatusInformation
SLGetPKeyId
SLGetPKeyInformation
SLGetPolicyInformation
SLGetPolicyInformationDWORD
SLGetProductSkuInformation
SLGetSLIDList
SLGetServiceInformation
SLGetWindowsInformation
SLGetWindowsInformationDWORD
SLInstallLicense
SLInstallProofOfPurchase
SLIsWindowsGenuineLocal
SLOpen
SLReArmWindows
SLRegisterEvent
SLRegisterWindowsEvent
SLSetCurrentProductKey
SLSetGenuineInformation
SLUninstallLicense
SLUninstallProofOfPurchase
SLUnregisterEvent
SLUnregisterWindowsEvent
SLpCheckProductKey
SLpGetGenuineLocal
SLpUpdateComponentTokens

Sections

.text
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 512B - Virtual size: 56B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.bss
Size: - Virtual size: 68KB

IMAGE_SCN_CNT_UNINITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.edata
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.idata
Size: 1024B - Virtual size: 568B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 512B - Virtual size: 104B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

34af5e85d00bbfdc35025f10757712af

Headers

File Characteristics

Imports

advapi32

kernel32

ntdll

ole32

shlwapi

Exports

Exports

Sections

.text Size: 2KB - Virtual size: 1KB

.rdata Size: 512B - Virtual size: 56B

.bss Size: - Virtual size: 68KB

.edata Size: 1KB - Virtual size: 1KB

.idata Size: 1024B - Virtual size: 568B

.reloc Size: 512B - Virtual size: 104B

.text
Size: 2KB - Virtual size: 1KB

.rdata
Size: 512B - Virtual size: 56B

.bss
Size: - Virtual size: 68KB

.edata
Size: 1KB - Virtual size: 1KB

.idata
Size: 1024B - Virtual size: 568B

.reloc
Size: 512B - Virtual size: 104B