ConnectedAccountState[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

ConnectedAccountState.dll
Size

40KB
MD5

5d481cdad0375fcf3d3a661098f26a46
SHA1

d07a7d998ebe0f7a45e75d3eeac1f2f9c1438012
SHA256

538b738789a677edf2bf0047dc1a50fb5b8963fb0bb60f9f84de543ef417a9c3
SHA512

026762814225bb93e271e2c1f09a9dc75482cd30de144f07ce5aa5981751251084255caf2be9bb003d3821dbd3794e864adf0783e32735c1dd39eb705ac9417c
SSDEEP

768:Jr/fcm640Rn/ts68+iluSYCGDa4L+1JY7sThsGnx:J8Zn/tzjiluSYCGD7+rCqn

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
ConnectedAccountState.dll

Files

ConnectedAccountState.dll
.dll windows:6 windows x86 arch:x86

8b068f6954c0bfb82b49a1bd5abcbdb0

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

PDB Paths

ConnectedAccountState.pdb

Imports

msvcrt

_except_handler4_common
??1type_info@@UAE@XZ
__CxxFrameHandler3
_onexit
__dllonexit
_unlock
_lock
_purecall
_amsg_exit
_XcptFilter
_CxxThrowException
_callnewh
?what@exception@@UBEPBDXZ
??1exception@@UAE@XZ
??0exception@@QAE@ABV0@@Z
??0exception@@QAE@XZ
realloc
free
malloc
memmove_s
_get_errno
_vsnwprintf
_set_errno
_initterm
memcpy
memset

api-ms-win-core-winrt-error-l1-1-1

RoTransformError
RoOriginateError

api-ms-win-core-winrt-l1-1-0

RoActivateInstance
RoGetActivationFactory

api-ms-win-core-winrt-string-l1-1-0

WindowsCreateStringReference
WindowsCreateString

api-ms-win-core-com-l1-1-1

CLSIDFromString

kernel32

ResolveDelayLoadedAPI
DelayLoadFailureHook
RegOpenKeyExW
TerminateProcess
GetCurrentProcess
SetUnhandledExceptionFilter
UnhandledExceptionFilter
GetSystemTimeAsFileTime
GetCurrentThreadId
GetCurrentProcessId
QueryPerformanceCounter
Sleep
GetModuleHandleExW
FreeLibrary
SetEvent
CreateEventExW
InitializeSRWLock
AcquireSRWLockExclusive
ReleaseSRWLockExclusive
AcquireSRWLockShared
ReleaseSRWLockShared
RaiseException
GetTickCount
CloseHandle
GetLastError

Exports

Exports

ActionCenterRunDllW
DllCanUnloadNow
DllGetClassObject

Sections

.text
Size: 31KB - Virtual size: 30KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.idata
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.didat
Size: 512B - Virtual size: 172B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

8b068f6954c0bfb82b49a1bd5abcbdb0

Headers

DLL Characteristics

File Characteristics

PDB Paths

Imports

msvcrt

api-ms-win-core-winrt-error-l1-1-1

api-ms-win-core-winrt-l1-1-0

api-ms-win-core-winrt-string-l1-1-0

api-ms-win-core-com-l1-1-1

kernel32

Exports

Exports

Sections

.text Size: 31KB - Virtual size: 30KB

.data Size: 512B - Virtual size: 1KB

.idata Size: 2KB - Virtual size: 1KB

.didat Size: 512B - Virtual size: 172B

.rsrc Size: 2KB - Virtual size: 2KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 31KB - Virtual size: 30KB

.data
Size: 512B - Virtual size: 1KB

.idata
Size: 2KB - Virtual size: 1KB

.didat
Size: 512B - Virtual size: 172B

.rsrc
Size: 2KB - Virtual size: 2KB

.reloc
Size: 2KB - Virtual size: 2KB