file[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

file.dll
Size

3.2MB
MD5

e7a8bcd939d250ecbc69bf5ded916899
SHA1

b7f81e105d327809c22b67cdf2f6ff908c2db525
SHA256

1ec41f21a6185c8a120aaddd85d3e062b7a59db529491d0d0863bdaa5c83ae2e
SHA512

f287288c6408415ca2d2410d1822be270779272bfc6405b39611ce63c3336d6b079dfb81a203fcbfbbccc69c0b57de7e5ff34a7d4e6c64f052307ceb20e3284f
SSDEEP

49152:37ls32ZolHrKDzVHBv2E/rmZ6X1jDViQOmnUfUqWdgsDBI9raMLbqWO:Js32ZolHuDjrJ1lLLUfU13ixaMHL

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.dll

Files

file.dll
.dll windows:5 windows x86 arch:x86

b680bc0043242ee6be4a0f3088163214

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

advapi32

CreateProcessAsUserW

kernel32

GetModuleHandleA
AreFileApisANSI
SetPriorityClass
GetModuleHandleW
OutputDebugStringA
GetStringTypeA

gdi32

SetDCPenColor

user32

SetForegroundWindow
SetCaretBlinkTime

oleaut32

GetRecordInfoFromGuids

mprapi

MprConfigInterfaceCreate

Exports

Exports

AwcdthodsHlu

Sections

.text
Size: 2.8MB - Virtual size: 2.8MB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.crt
Size: 4KB - Virtual size: 273B

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_MEM_READ

.data
Size: 292KB - Virtual size: 292KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 108KB - Virtual size: 107KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ