SortWindows6Compat[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

SortWindows6Compat.dll
Size

53KB
MD5

8c0854d2bbae8e1b5f447b94cdd878f1
SHA1

1112903533e67a75b9cf01861fede786dc0dcbda
SHA256

c6109b9ddd0facc90cf316d344847c9b74fd213dcd64f398982161ff0f267308
SHA512

e2dc8b496a40a4215fbd8e41722b574365a35c4f43e5d264efc8015214f33718c2e43b0f1fe93079f33e07cf3c176546b6b2020ab6b65482857177b3e4d08aeb
SSDEEP

1536:xJgoIvLQbh4wzjeOKzdygCoBwkitFtyk6nWusvU:/goIvLQbh4wzjeOKzddCUwkitFtypnPZ

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SortWindows6Compat.dll

Files

SortWindows6Compat.dll
.dll windows:6 windows x86 arch:x86

d3039f6c963a196677d03cb91a5972ac

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

SortWindows6Compat.pdb

Imports

msvcrt

_XcptFilter
malloc
_except_handler4_common
memset
bsearch
_amsg_exit
_initterm
free

ntdll

RtlAllocateHeap
RtlFreeHeap

kernel32

InterlockedCompareExchange
CreateFileW
CreateFileMappingW
CloseHandle
MapViewOfFile
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
SetLastError
InterlockedExchange
Sleep
GetSystemWindowsDirectoryW
QueryPerformanceCounter

Exports

Exports

SortCloseHandle
SortGetHandle

Sections

.text
Size: 49KB - Virtual size: 49KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 1KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 558B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ