24072024_0247_2325616694802[.]dll | Triage

Sharing

General

Target

24072024_0247_2325616694802.dll
Size

180KB
MD5

12d24d4b3ed5bbaf16d7f6136ef0a6db
SHA1

bd84529de261dfd846f5b099e91384ca4b68bed2
SHA256

50bdc4f931426cf6deb104cc1cfa46f0ef88134221a07977d45a5fb60d8f2ffc
SHA512

52b0ca87a18510d2cadb62eb34a7fd312bec6cb3c26fb805ecadc7e7e23529b6bc7a7a7bd7bd1ac8e1d6d4c383217bbf95f2bef9af1722ad09a139fabe0b44d4
SSDEEP

3072:D+ndOFYNAhXcpbl3JV5pkSKvEuU9H4mNQDTh8yJd7p9qhH2pN81d2Zq:DEsVhqVnwQH4mNQDPJR2W80

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
24072024_0247_2325616694802.dll

Files

24072024_0247_2325616694802.dll
.dll regsvr32 windows:6 windows x64 arch:x64

Password: infected

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_DLL

Exports

Exports

DllRegisterServer

Sections

.text
Size: 60KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 3KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 115KB - Virtual size: 114KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 512B - Virtual size: 36B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 512B - Virtual size: 424B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ