SortWindows61[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SortWindows61.dll
Size

41KB
MD5

fbb369d55f61fd03a33a814e925a78db
SHA1

046da07ec0758fc4804b64dfffd12f9df1a0754a
SHA256

08c874d0650a1a79b565f38f560cad87cefdc38ac9059e7bf85f66159b039eeb
SHA512

e8e5361d460ac86d1435c566a8ed3b98d4b4ed6e95cfd7929fac8a219018e054c3281ae5464f89813f976b0ed6aa486f8180a9a926f27bef74dc0536004e1636
SSDEEP

768:6Fq46PJKdVTjS5qcED76EFkyVMfNkdSD/cJX:v46P0d0Zw6YbdSLw

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SortWindows61.dll

Files

SortWindows61.dll
.dll windows:10 windows x86 arch:x86

e4206f100cb11d21114b705b750d0bbe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

SortWindows61.pdb

Imports

msvcrt

_XcptFilter
_initterm
malloc
free
_except_handler4_common
bsearch
_amsg_exit
memset

ntdll

RtlAllocateHeap
RtlFreeHeap

kernel32

GetCurrentProcessId
CreateFileW
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
GetSystemWindowsDirectoryW
MapViewOfFile
CreateFileMappingW
CloseHandle
SetLastError
Sleep

Exports

Exports

SortCloseHandle
SortGetHandle

Sections

.text
Size: 37KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 818B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 780B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ