SortWindows61[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SortWindows61.dll
Size

41KB
MD5

dee00e7f830eae13ea0abff69c019025
SHA1

a858befab37d59c98405990c8ade0e4018c5c815
SHA256

6c358f27626f3eb4fee5485f3d76738f9973988273c36a769be025e1748f329c
SHA512

e4b9e5de103ee0fca308c37d9eacb0f7c92be7d71b0d0ccae74515b30abc2fedf89afc2191d1c6f49ecdba7bd787bc3e4c078febed12694b61b8d53842edea5a
SSDEEP

384:pRNmA1AH0vuzrz2sJKnOy7898mbMWnB6jodJBwSOl2Pb6oyxwUCuQx+a+6z8xoXJ:/Nr1AH0vubUiqmbnsolrOlGbEGKcpX

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SortWindows61.dll

Files

SortWindows61.dll
.dll windows:10 windows x86 arch:x86

091688a131a0260558d04f58257cea0d

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

SortWindows61.pdb

Imports

msvcrt

_except_handler4_common
_initterm
malloc
bsearch
free
_amsg_exit
_XcptFilter
memset

ntdll

RtlAllocateHeap
RtlFreeHeap

kernel32

GetCurrentProcessId
CreateFileW
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
GetSystemWindowsDirectoryW
MapViewOfFile
CreateFileMappingW
SetLastError
Sleep
QueryPerformanceCounter
CloseHandle

Exports

Exports

SortCloseHandle
SortGetHandle

Sections

.text
Size: 36KB - Virtual size: 36KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 968B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 818B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 804B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ