SortWindows61[.]dll | Triage

Sharing

General

Target

SortWindows61.dll
Size

42KB
MD5

d0e6f4fb957eb57839dc627a686a56e0
SHA1

b8b7b789b08daf032edda0bd079584a99448df77
SHA256

c77d5b50bbd71a6e5a59d16cf1575c68775fee0ac2028b2932b4d0e74594074b
SHA512

e415b0968d78533eab5c05726dcc0d939583c5225a88d5c4c3d079c539efc27c0e939fc382a9e7a4019831afcb56806ce202fce1eedccaf6809f5d599f389b12
SSDEEP

768:7WJfvL6KKV0FhiVk+FPRLYb4IkNXLrlAIoQAZ:+/toV3PREnSX3ltoQA

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
SortWindows61.dll

Files

SortWindows61.dll
.dll windows:10 windows x86 arch:x86

e4206f100cb11d21114b705b750d0bbe

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

SortWindows61.pdb

Imports

msvcrt

_XcptFilter
_initterm
malloc
free
_except_handler4_common
bsearch
_amsg_exit
memset

ntdll

RtlAllocateHeap
RtlFreeHeap

kernel32

GetCurrentProcessId
CreateFileW
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetTickCount
GetSystemTimeAsFileTime
GetCurrentThreadId
QueryPerformanceCounter
GetSystemWindowsDirectoryW
MapViewOfFile
CreateFileMappingW
CloseHandle
SetLastError
Sleep

Exports

Exports

SortCloseHandle
SortGetHandle

Sections

.text
Size: 38KB - Virtual size: 37KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 1024B - Virtual size: 818B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 1024B - Virtual size: 1024B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 1024B - Virtual size: 752B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ