main[.]php[.]dll | Triage™

General

Target
main.php.dll
Size 442KB
Sample240315-ql79fshc2t
SHA256 b54dc5193824eb35233c3922687a5adc462ab474362dd4effd488c2ae0dae301
MD5 7e9449a1e238d8caaf39b5e911d71b21
SHA1 1b5e7aa02340d85b14af3dddf7c86c2f7502bf50
SHA512 5ab0e98db6bdb5b5c9601be27308130f792084dd1cdd1fec026a4915012a750c8b404ce5e855c6cd1b05c152135bedf29e939480ae9ed4325aabf01b48b840b7
SSDEEP 12288:kHlAiJHCwjXvMHk37t4Mv//IfN/YoyL8ozF0nxatQp:kHltJHCkvH/IJvUWxatu
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
main.php.dll

File Explorer

main.php.dll

.dll 442KB

main.php.dll

IMPHASH 3a94ffcdb86144f7d0b6d92dd3393d93
SHA256 b54dc5193824eb35233c3922687a5adc462ab474362dd4effd488c2ae0dae301
MD5 7e9449a1e238d8caaf39b5e911d71b21
SHA1 1b5e7aa02340d85b14af3dddf7c86c2f7502bf50
SHA512 5ab0e98db6bdb5b5c9601be27308130f792084dd1cdd1fec026a4915012a750c8b404ce5e855c6cd1b05c152135bedf29e939480ae9ed4325aabf01b48b840b7
SSDEEP 12288:kHlAiJHCwjXvMHk37t4Mv//IfN/YoyL8ozF0nxatQp:kHltJHCkvH/IJvUWxatu
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

29079

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\Baby\High\Ease\gener\side \Soon.pdb

kernel32

TlsAlloc LoadLibraryW VirtualProtectEx GetModuleHandleW CreateSemaphoreW GetTempPathW WriteConsoleW CloseHandle CreateFileW OutputDebugStringW ReadConsoleW GetEnvironmentVariableW InitializeCriticalSection GetModuleFileNameW RemoveDirectoryW DeviceIoControl GetCurrentProcess EnterCriticalSection UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead EncodePointer RaiseException InterlockedPushEntrySList InterlockedFlushSList GetLastError SetLastError RtlUnwind LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW HeapFree HeapAlloc GetCurrentThread GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetTimeZoneInformation FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetProcessHeap GetStdHandle GetFileType SetConsoleCtrlHandler GetStringTypeW HeapSize HeapReAlloc SetStdHandle FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode GetFileSizeEx SetFilePointerEx ReadFile DecodePointer

ole32

CoUninitialize CoTaskMemAlloc CoInitialize CoTaskMemFree

cryptui

CryptUIDlgViewContext CryptUIDlgViewCertificateW CryptUIWizDigitalSign CryptUIWizFreeDigitalSignContext CryptUIWizImport CryptUIWizExport CryptUIDlgSelectCertificateFromStore

Sharing