main[.]php[.]00_0006ea00[.]dll

General

Target
main.php.00_0006ea00.dll
Size 442KB
Sample240209-chvmasfh68
SHA256 730e35f847304e4d4e5a7aec86b1b39c41aecf29d445034439484689e1abff4f
MD5 c661c4659c4ecc91fda3c192226878bf
SHA1 3f120537b9bd8fa0365ae8459d7394502a5ff511
SHA512 963b4b7a5f5554e5606ec544f35a83ec72456c646a7301b3171ab0bf90a8aab3085860f70ee8276885233766bc495c727b2b5d4128b174ef2aa0b41834ece649
SSDEEP 12288:kHlAiJHCwjXvMHk37t4Mv//IfN/YoyL8ozF0nxatQ:kHltJHCkvH/IJvUWxat
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
main.php.00_0006ea00.dll

File Explorer

main.php.00_0006ea00.dll

.dll 442KB

main.php.00_0006ea00.dll

IMPHASH 3a94ffcdb86144f7d0b6d92dd3393d93
SHA256 730e35f847304e4d4e5a7aec86b1b39c41aecf29d445034439484689e1abff4f
MD5 c661c4659c4ecc91fda3c192226878bf
SHA1 3f120537b9bd8fa0365ae8459d7394502a5ff511
SHA512 963b4b7a5f5554e5606ec544f35a83ec72456c646a7301b3171ab0bf90a8aab3085860f70ee8276885233766bc495c727b2b5d4128b174ef2aa0b41834ece649
SSDEEP 12288:kHlAiJHCwjXvMHk37t4Mv//IfN/YoyL8ozF0nxatQ:kHltJHCkvH/IJvUWxat
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

29079

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\Baby\High\Ease\gener\side \Soon.pdb

kernel32

TlsAlloc LoadLibraryW VirtualProtectEx GetModuleHandleW CreateSemaphoreW GetTempPathW WriteConsoleW CloseHandle CreateFileW OutputDebugStringW ReadConsoleW GetEnvironmentVariableW InitializeCriticalSection GetModuleFileNameW RemoveDirectoryW DeviceIoControl GetCurrentProcess EnterCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead EncodePointer RaiseException InterlockedPushEntrySList InterlockedFlushSList GetLastError SetLastError RtlUnwind LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW HeapFree HeapAlloc GetCurrentThread GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetTimeZoneInformation FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap GetStdHandle GetFileType SetConsoleCtrlHandler GetStringTypeW HeapSize HeapReAlloc SetStdHandle FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode GetFileSizeEx SetFilePointerEx ReadFile DecodePointer

ole32

CoUninitialize CoTaskMemAlloc CoInitialize CoTaskMemFree

cryptui

CryptUIDlgViewContext CryptUIDlgViewCertificateW CryptUIWizDigitalSign CryptUIWizFreeDigitalSignContext CryptUIWizImport CryptUIWizExport CryptUIDlgSelectCertificateFromStore

Sharing