98734d3ad1484aaa9405652bf8952e5f429e1298710647d6be3f9a2a53dc48ca[.]dll

General

Target
98734d3ad1484aaa9405652bf8952e5f429e1298710647d6be3f9a2a53dc48ca.dll
Size 840KB
Sample240316-c4txwsbg56
SHA256 98734d3ad1484aaa9405652bf8952e5f429e1298710647d6be3f9a2a53dc48ca
MD5 944072be4a458a1506d0fd47962b9b19
SHA1 a138fcda691c0e98f0f266a787b514c0f89cbee8
SHA512 7d7976161a77e8d52b7dfa3d5713f937220ea9b7d5d4b7255409e45bf13b1a2955899d264f1babe1b7cb78e5f1971767f56b81495d8289f0b8bb57931292600e
SSDEEP 24576:Be9nfmpSVmL+Cf72yb1SFEtEfPmY4uRD7HpUMhOw8ghE:gBmpSVmLfCDfPJ4cDFPhmghE
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
98734d3ad1484aaa9405652bf8952e5f429e1298710647d6be3f9a2a53dc48ca.dll

File Explorer

98734d3ad1484aaa9405652bf8952e5f429e1298710647d6be3f9a2a53dc48ca.dll

.dll 840KB

98734d3ad1484aaa9405652bf8952e5f429e1298710647d6be3f9a2a53dc48ca.dll

IMPHASH 55f1ba0b782341fa929d61651ef47f0c
SHA256 98734d3ad1484aaa9405652bf8952e5f429e1298710647d6be3f9a2a53dc48ca
MD5 944072be4a458a1506d0fd47962b9b19
SHA1 a138fcda691c0e98f0f266a787b514c0f89cbee8
SHA512 7d7976161a77e8d52b7dfa3d5713f937220ea9b7d5d4b7255409e45bf13b1a2955899d264f1babe1b7cb78e5f1971767f56b81495d8289f0b8bb57931292600e
SSDEEP 24576:Be9nfmpSVmL+Cf72yb1SFEtEfPmY4uRD7HpUMhOw8ghE:gBmpSVmLfCDfPJ4cDFPhmghE
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

189353

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

E:\Jenkins\workspace\Osprey\Osprey_5.01\output\app\symbol\Win32\Release\TmopphDns.pdb

kernel32

WideCharToMultiByte CreateDirectoryA Sleep LocalFree LeaveCriticalSection InitializeCriticalSection DeleteCriticalSection WriteConsoleW GetProcAddress ResetEvent CloseHandle LoadLibraryA SetEvent GetLastError MultiByteToWideChar OpenEventW GetModuleFileNameW GetShortPathNameW SetLastError OpenEventA GetModuleFileNameA GetShortPathNameA EnterCriticalSection GetVersionExA HeapSize GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW FormatMessageW InitializeCriticalSectionAndSpinCount CreateEventW SwitchToThread TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetTickCount GetModuleHandleW EncodePointer DecodePointer CompareStringW LCMapStringW GetLocaleInfoW GetStringTypeW GetCPInfo UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId InitializeSListHead RtlUnwind RaiseException InterlockedPushEntrySList InterlockedFlushSList FreeLibrary LoadLibraryExW CreateFileW GetFileType ExitProcess GetModuleHandleExW HeapAlloc HeapFree GetDateFormatW GetTimeFormatW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetStdHandle GetCurrentThread GetFileAttributesExW WriteFile GetConsoleCP GetConsoleMode SetStdHandle SetEndOfFile ReadFile ReadConsoleW SetFilePointerEx GetFileSizeEx FlushFileBuffers DeleteFileW HeapReAlloc SetConsoleCtrlHandler GetTimeZoneInformation FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCommandLineA GetCommandLineW GetEnvironmentStringsW OutputDebugStringW

advapi32

GetTraceLoggerHandle GetTraceEnableFlags GetTraceEnableLevel UnregisterTraceGuids RegisterTraceGuidsA GetSecurityDescriptorSacl SetEntriesInAclA GetSecurityDescriptorDacl SetNamedSecurityInfoA ConvertStringSecurityDescriptorToSecurityDescriptorA TraceMessage GetNamedSecurityInfoA SetSecurityInfo ConvertStringSidToSidA ConvertStringSecurityDescriptorToSecurityDescriptorW

shell32

SHGetFolderPathW

ole32

CoTaskMemFree

Sharing