june30[.]dll | Triage

Resubmissions

23-01-2024 11:21

240123-nf6gkaaea6 10

01-07-2020 07:49

200701-87235lf94e 10

Sharing

Copy URL

Twitter E-mail

General

Target

june30.dll
Size

607KB
MD5

086e1c7401f82543d162ebaef816ef35
SHA1

25fbe1ef6ed713011a02cd6fc930105d4f612130
SHA256

b8cef342a47915615a35aab7333567db7c86570d4d3362470e19b6d0b3dab1af
SHA512

be9bd937ef926cab65ada2f4103642993ae1428fa6b9a83f9824cc4f10cb07354954fa948a5d9b2c83ac79f7ac04269d9fb3ac8f21e46c53fdb2b4dd39c726f7
SSDEEP

12288:p+gJA98D0ogyQT7x1wn6UIxsuAmHdbL69ZqQB02iMQ/t:pu8DRgHLC6UyzZWJB02iMQ/

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
june30.dll

Files

june30.dll
.dll windows:6 windows x86 arch:x86

308141c79342b2d7737db8da0cb9ce22

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

shlwapi

PathRemoveArgsW

rpcrt4

RpcServerListen
RpcRaiseException
UuidFromStringW
I_RpcBindingIsClientLocal
RpcServerRegisterIf
RpcImpersonateClient
NdrServerCall2
RpcMgmtSetServerStackSize
UuidCreate
RpcRevertToSelf

kernel32

DeleteCriticalSection
SetStdHandle
FreeEnvironmentStringsW
GetEnvironmentStringsW
GetCommandLineW
GetCommandLineA
GetOEMCP
IsValidCodePage
FindNextFileA
GetVolumeInformationW
VirtualProtect
GetTempPathW
CreateFileW
GetVersionExW
GetSystemDirectoryW
OpenProcess
Sleep
LoadResource
FindResourceW
VirtualProtectEx
GetModuleHandleW
GetSystemTime
QueryPerformanceCounter
GetDateFormatW
FindFirstFileExA
FindClose
SetFilePointerEx
ReadFile
GetConsoleMode
GetConsoleCP
FlushFileBuffers
EnumSystemLocalesW
GetUserDefaultLCID
IsValidLocale
GetProcessHeap
GetACP
HeapQueryInformation
HeapSize
HeapReAlloc
HeapFree
CreateThread
WaitForSingleObjectEx
CloseHandle
WriteConsoleW
OutputDebugStringW
OutputDebugStringA
WriteFile
GetFileType
GetStdHandle
ExitProcess
GetSystemInfo
HeapValidate
HeapAlloc
GetModuleHandleExW
GetModuleFileNameW
GetModuleFileNameA
LoadLibraryExW
FreeLibrary
InterlockedFlushSList
RaiseException
RtlUnwind
GetStartupInfoW
IsDebuggerPresent
InitializeSListHead
GetCurrentThreadId
GetCurrentProcessId
IsProcessorFeaturePresent
MultiByteToWideChar
GetLastError
GetStringTypeW
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
ReadConsoleW
SetLastError
InitializeCriticalSectionAndSpinCount
SwitchToThread
TlsAlloc
TlsGetValue
TlsSetValue
TlsFree
GetSystemTimeAsFileTime
GetProcAddress
EncodePointer
DecodePointer
LCMapStringW
GetLocaleInfoW
GetCPInfo
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess

mscms

SelectCMM
GetPS2ColorRenderingDictionary
GetPS2ColorSpaceArray
TranslateBitmapBits
CloseColorProfile
ConvertColorNameToIndex
UninstallColorProfileW
SetColorProfileElementReference
CheckColors
IsColorProfileValid
GetNamedProfileInfo
DeleteColorTransform
CreateColorTransformW
CreateProfileFromLogColorSpaceW
SetColorProfileElementSize
InstallColorProfileW
GetColorDirectoryW
IsColorProfileTagPresent
TranslateColors
SetColorProfileHeader
SetColorProfileElement
GetPS2ColorRenderingIntent
DisassociateColorProfileFromDeviceW
RegisterCMMW
GetColorProfileElement
UnregisterCMMW
ConvertIndexToColorName
GetCMMInfo
EnumColorProfilesW
AssociateColorProfileWithDeviceW
GetStandardColorSpaceProfileW
CreateMultiProfileTransform
OpenColorProfileW
CheckBitmapBits
GetCountColorProfileElements
GetColorProfileElementTag
GetColorProfileFromHandle
CreateDeviceLinkProfile
GetColorProfileHeader
SetStandardColorSpaceProfileW

msdmo

MoCreateMediaType
MoDeleteMediaType
MoInitMediaType
MoFreeMediaType
MoDuplicateMediaType

Sections

.text
Size: 334KB - Virtual size: 334KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 250KB - Virtual size: 249KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 135KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

308141c79342b2d7737db8da0cb9ce22

Headers

DLL Characteristics

File Characteristics

Imports

shlwapi

rpcrt4

kernel32

mscms

msdmo

Sections

.text Size: 334KB - Virtual size: 334KB

.rdata Size: 250KB - Virtual size: 249KB

.data Size: 4KB - Virtual size: 135KB

.rsrc Size: 1KB - Virtual size: 1KB

.reloc Size: 16KB - Virtual size: 15KB

.text
Size: 334KB - Virtual size: 334KB

.rdata
Size: 250KB - Virtual size: 249KB

.data
Size: 4KB - Virtual size: 135KB

.rsrc
Size: 1KB - Virtual size: 1KB

.reloc
Size: 16KB - Virtual size: 15KB