5477[.]dll | Triage™

General

Target
5477.dll
Size 150KB
Sample240907-d7e4kstbpe
SHA256 4fe8a3272239a784a99b8fc6504175ad880f17fc95afe2c9908ad77505bb869a
MD5 49d12aa4286ead33ca8f06bbc19ce4f7
SHA1 30e26a157465daeadf1a214903e713d8427806e3
SHA512 45f2bc9bba4e7d5f323e462813a2df4565e2cca6b8281ee7a4828733d9f100612a27224c78b284ce4fac84c305da63e28163a2c8e21b1e7681408bb7975c2c32
SSDEEP 3072:KHHZMRNjKy4cTcOiu5ecbCKnN22lQBV+UdE+rECWp7hK58Pr:TWncTjXecbC7BV+UdvrEFp7hK5Wr
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

5477.dll

.dll 150KB

5477.dll

IMPHASH b06d4116da69a513992d529f84731e6f
SHA256 4fe8a3272239a784a99b8fc6504175ad880f17fc95afe2c9908ad77505bb869a
MD5 49d12aa4286ead33ca8f06bbc19ce4f7
SHA1 30e26a157465daeadf1a214903e713d8427806e3
SHA512 45f2bc9bba4e7d5f323e462813a2df4565e2cca6b8281ee7a4828733d9f100612a27224c78b284ce4fac84c305da63e28163a2c8e21b1e7681408bb7975c2c32
SSDEEP 3072:KHHZMRNjKy4cTcOiu5ecbCKnN22lQBV+UdE+rECWp7hK58Pr:TWncTjXecbC7BV+UdvrEFp7hK5Wr
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

22:0f:ba:ec:dd:f0:b6:43:46:2a:34:5e:a5:c9:fe:0c:8c:de:ab:57:7e:8f:6d:1b:ea:e9:d0:7d:d3:94:65:4d

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 6, 2024

Minor OS version

0

Major OS version

6

Entry point

58816

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\a01\_work\11\s\\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb

_CreateFrameInfo _CxxThrowException _EH_prolog _FindAndUnlinkFrame _IsExceptionObjectToBeDestroyed _NLG_Dispatch2 _NLG_Return _NLG_Return2 _SetWinRTOutOfMemoryExceptionCallback __AdjustPointer __BuildCatchObject __BuildCatchObjectHelper __CxxDetectRethrow __CxxExceptionFilter __CxxFrameHandler __CxxFrameHandler2 __CxxFrameHandler3 __CxxLongjmpUnwind __CxxQueryExceptionSize __CxxRegisterExceptionObject __CxxUnregisterExceptionObject __DestructExceptionObject __FrameUnwindFilter __GetPlatformExceptionInfo __RTCastToVoid __RTDynamicCast __RTtypeid __TypeMatch __current_exception __current_exception_context __intrinsic_setjmp __processing_throw __report_gsfailure __std_exception_copy __std_exception_destroy __std_terminate __std_type_info_compare __std_type_info_destroy_list __std_type_info_hash __std_type_info_name __telemetry_main_invoke_trigger __telemetry_main_return_trigger __unDName __unDNameEx __uncaught_exception __uncaught_exceptions __vcrt_GetModuleFileNameW __vcrt_GetModuleHandleW __vcrt_InitializeCriticalSectionEx __vcrt_LoadLibraryExW _chkesp _except_handler2 _except_handler3 _except_handler4_common _get_purecall_handler _get_unexpected _global_unwind2 _is_exception_typeof _local_unwind2 _local_unwind4 _longjmpex _purecall _seh_longjmp_unwind _seh_longjmp_unwind4 _set_purecall_handler _set_se_translator _setjmp3 longjmp memchr memcmp memcpy memmove memset set_unexpected strchr strrchr strstr unexpected wcschr wcsrchr wcsstr

5477.dll

PE Signature issue

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

5477.dll

PE Signature issue

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

kernel32

generic