66480aab75eb380ce9c1ede4e9f0d855534bad0921e8fbc467dadb7b41225075[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
66480aab75eb380ce9c1ede4e9f0d855534bad0921e8fbc467dadb7b41225075.dll
Size 6.3MB
Sample240613-bqhf9sseqp
SHA256 66480aab75eb380ce9c1ede4e9f0d855534bad0921e8fbc467dadb7b41225075
MD5 c05e22b288ae1ab8bb88f595d61dff5c
SHA1 d5e7cc245edf3671b20a7b2de8e54de0bf125ce8
SHA512 ced4123cab29c992bf9a94a46eab1c05ef9bba262ee47ec8ae39fd7dc82f616b1b18afa088cb34967d036479f04b62c250a09c9a853424a1b067e3919012efa0
SSDEEP 98304:A3noUtXsq6DWt7mSn/LwWYOVNFC1e9oaEWDg:AYUQDWt7mS/LwWYOVNFCso5WM
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
66480aab75eb380ce9c1ede4e9f0d855534bad0921e8fbc467dadb7b41225075.dll

File Explorer

66480aab75eb380ce9c1ede4e9f0d855534bad0921e8fbc467dadb7b41225075.dll

.dll 6.3MB

66480aab75eb380ce9c1ede4e9f0d855534bad0921e8fbc467dadb7b41225075.dll

IMPHASH 9ab3baba5555f17df6a34cd9ca7333f0
SHA256 66480aab75eb380ce9c1ede4e9f0d855534bad0921e8fbc467dadb7b41225075
MD5 c05e22b288ae1ab8bb88f595d61dff5c
SHA1 d5e7cc245edf3671b20a7b2de8e54de0bf125ce8
SHA512 ced4123cab29c992bf9a94a46eab1c05ef9bba262ee47ec8ae39fd7dc82f616b1b18afa088cb34967d036479f04b62c250a09c9a853424a1b067e3919012efa0
SSDEEP 98304:A3noUtXsq6DWt7mSn/LwWYOVNFC1e9oaEWDg:AYUQDWt7mS/LwWYOVNFCso5WM
MD5 SHA1 SHA512 SSDEEP

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5057384

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

Z:\proxy\target\release\deps\proxy.pdb

kernel32

ReleaseSRWLockExclusive AcquireSRWLockExclusive GetVolumeInformationA CloseHandle ReleaseSRWLockShared TryAcquireSRWLockExclusive AcquireSRWLockShared TlsGetValue TlsSetValue lstrlenW AllocConsole FormatMessageW GetLastError Sleep CreateToolhelp32Snapshot Module32First Module32Next GetModuleFileNameW GlobalLock GlobalSize GlobalAlloc GlobalFree WideCharToMultiByte MultiByteToWideChar GlobalUnlock CreateFileW WaitNamedPipeW PeekNamedPipe ReadFile WriteFile FlushFileBuffers SetConsoleTextAttribute GetStdHandle GetConsoleScreenBufferInfo GetCurrentThreadId GetModuleHandleA GetProcAddress LoadLibraryExW GetCurrentProcess GetCurrentProcessId TzSpecificLocalTimeToSystemTime SystemTimeToFileTime SystemTimeToTzSpecificLocalTime SleepConditionVariableSRW SetHandleInformation PostQueuedCompletionStatus CreateIoCompletionPort GetQueuedCompletionStatusEx SetFileCompletionNotificationModes GetNativeSystemInfo VirtualQuery VirtualAlloc VirtualFree VirtualProtect GetSystemInfo CreateFileMappingW MapViewOfFile UnmapViewOfFile SetThreadStackGuarantee SwitchToThread CreateWaitableTimerExW SetWaitableTimer WaitForSingleObject GetCurrentThread RtlCaptureContext ReleaseMutex SetLastError GetCurrentDirectoryW GetEnvironmentVariableW GetCommandLineW SetFilePointerEx TerminateProcess WakeAllConditionVariable WakeConditionVariable QueryPerformanceCounter GetProcessHeap HeapAlloc HeapFree HeapReAlloc WaitForSingleObjectEx LoadLibraryA CreateMutexA FindNextFileW FindClose GetFileInformationByHandle GetFileInformationByHandleEx CreateDirectoryW FindFirstFileW DeleteFileW MoveFileExW GetFinalPathNameByHandleW CopyFileExW GetConsoleMode GetModuleHandleW ExitProcess GetFullPathNameW WriteConsoleW CreateThread InitOnceBeginInitialize TlsAlloc InitOnceComplete TlsFree QueryPerformanceFrequency GetSystemTimeAsFileTime GetTempPathW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent InitializeSListHead IsProcessorFeaturePresent

ws2_32

WSASend send recv getsockopt getpeername getsockname ioctlsocket connect bind WSASocketW setsockopt getaddrinfo freeaddrinfo WSACleanup WSAStartup socket WSAGetLastError closesocket WSAIoctl

user32

GetWindowLongW FindWindowExW MessageBoxW FlashWindowEx OpenClipboard GetClipboardData CloseClipboard GetForegroundWindow GetWindowThreadProcessId SetClipboardData EmptyClipboard

shell32

SHGetKnownFolderPath

ole32

CoTaskMemFree

crypt32

CryptProtectData CryptUnprotectData

iphlpapi

GetAdaptersAddresses

bcrypt

BCryptGenRandom

advapi32

RegDeleteKeyExA RegCreateKeyExA RegSetValueExA RegOpenKeyExA RegCloseKey SystemFunction036 RegGetValueA

ntdll

NtDeviceIoControlFile RtlNtStatusToDosError NtCreateFile NtWriteFile NtCancelIoFileEx NtReadFile

vcruntime140

__CxxFrameHandler3 _except_handler4_common __std_type_info_destroy_list _CxxThrowException memset memcmp memmove memcpy

api-ms-win-crt-math-l1-1-0

ceil floor roundf

api-ms-win-crt-string-l1-1-0

strlen

api-ms-win-crt-runtime-l1-1-0

_cexit _execute_onexit_table _initialize_onexit_table strerror _configure_narrow_argv _seh_filter_dll _initterm_e _initterm _initialize_narrow_environment

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func fgetc

api-ms-win-crt-heap-l1-1-0

free