444444444[.]dll | Triage™

General

Target
444444444.dll
Size 150KB
Sample240907-d9manstakj
SHA256 23cfd4f577d1a5acaacc17c6c880f62bd3fd0d5a175e943f75b180cb001b83d4
MD5 8bb42ebf251d56aea5d95a88d3db81bf
SHA1 493e5b4504c9a0f2ba90ae4b07c3afe92f3bc319
SHA512 ce40e9f0d28255ce89b7709253593eaa3e48c4e8a62a974ea0c80e7156690fc26994c350775c830e51460fbde9879f7af3672740ce6768432ad4a7fc20accae7
SSDEEP 3072:KHHZMRNjKySdrun5ecbCKnN22lQBV+UdE+rECWp7hKLw5op:TWLgecbC7BV+UdvrEFp7hKLQop
MD5 SHA1 SHA512 SSDEEP

Score

1^/10

Malware Config

Signatures

File Explorer

444444444.dll

.dll 150KB

444444444.dll

IMPHASH b06d4116da69a513992d529f84731e6f
SHA256 23cfd4f577d1a5acaacc17c6c880f62bd3fd0d5a175e943f75b180cb001b83d4
MD5 8bb42ebf251d56aea5d95a88d3db81bf
SHA1 493e5b4504c9a0f2ba90ae4b07c3afe92f3bc319
SHA512 ce40e9f0d28255ce89b7709253593eaa3e48c4e8a62a974ea0c80e7156690fc26994c350775c830e51460fbde9879f7af3672740ce6768432ad4a7fc20accae7
SSDEEP 3072:KHHZMRNjKySdrun5ecbCKnN22lQBV+UdE+rECWp7hKLw5op:TWLgecbC7BV+UdvrEFp7hKLQop
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

PE Signature issue

Digest

29:91:a0:81:46:4a:a7:e0:bc:0d:53:7c:2e:2e:aa:fb:4d:96:c2:88:8b:f7:6a:09:a7:2a:7c:92:7e:f1:ea:de

Digest Algorithm

sha256

PE Digests Matches

Not matched

Trusted

Not trusted

Signing Certificate

CN=Microsoft Corporation,O=Microsoft Corporation,L=Redmond,ST=Washington,C=US

Chains

Sep 6, 2024

Minor OS version

0

Major OS version

6

Entry point

58816

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

d:\a01\_work\11\s\\binaries\x86ret\bin\i386\\vcruntime140.i386.pdb

_CreateFrameInfo _CxxThrowException _EH_prolog _FindAndUnlinkFrame _IsExceptionObjectToBeDestroyed _NLG_Dispatch2 _NLG_Return _NLG_Return2 _SetWinRTOutOfMemoryExceptionCallback __AdjustPointer __BuildCatchObject __BuildCatchObjectHelper __CxxDetectRethrow __CxxExceptionFilter __CxxFrameHandler __CxxFrameHandler2 __CxxFrameHandler3 __CxxLongjmpUnwind __CxxQueryExceptionSize __CxxRegisterExceptionObject __CxxUnregisterExceptionObject __DestructExceptionObject __FrameUnwindFilter __GetPlatformExceptionInfo __RTCastToVoid __RTDynamicCast __RTtypeid __TypeMatch __current_exception __current_exception_context __intrinsic_setjmp __processing_throw __report_gsfailure __std_exception_copy __std_exception_destroy __std_terminate __std_type_info_compare __std_type_info_destroy_list __std_type_info_hash __std_type_info_name __telemetry_main_invoke_trigger __telemetry_main_return_trigger __unDName __unDNameEx __uncaught_exception __uncaught_exceptions __vcrt_GetModuleFileNameW __vcrt_GetModuleHandleW __vcrt_InitializeCriticalSectionEx __vcrt_LoadLibraryExW _chkesp _except_handler2 _except_handler3 _except_handler4_common _get_purecall_handler _get_unexpected _global_unwind2 _is_exception_typeof _local_unwind2 _local_unwind4 _longjmpex _purecall _seh_longjmp_unwind _seh_longjmp_unwind4 _set_purecall_handler _set_se_translator _setjmp3 longjmp memchr memcmp memcpy memmove memset set_unexpected strchr strrchr strstr unexpected wcschr wcsrchr wcsstr

444444444.dll

PE Signature issue

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

kernel32

generic

Sharing

General

Malware Config

Signatures

File Explorer

444444444.dll

PE Signature issue

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-convert-l1-1-0

kernel32

generic