file[.]dll | Triage

Resubmissions

25-09-2024 19:45

240925-ygpwbaxdmg 8

12-09-2024 10:27

240912-mg4hxssblh 3

Sharing

Copy URL

Twitter E-mail

General

Target

file.dll
Size

416KB
MD5

e73d75e539b7e9acf48683fc6b2cb4ab
SHA1

64006f712a8358817cc546922a1c402eb50a88dc
SHA256

17c8ef5428940de7399b3165fb2f7bf2f247e7082ce14a2c611931ea29f11c40
SHA512

0971977cab1348a62ea646cd12544f5285670fbe2cf5039df3a5dd8b002d770f2a143f2656a6c5b9138d6da3282a2321cfc7ef5e4a2e32459b89f9bf96f6b956
SSDEEP

12288:DqXLg/OBthPP7dUXOahcWUQcs2+2F6FH2PiuAdO:G7g/OvtP7dUX/hc7kdPH28O

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
file.dll

Files

file.dll
.dll windows:6 windows x86 arch:x86

2b2df0c25d77d3cb214decd4b05eacb5

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE
IMAGE_FILE_32BIT_MACHINE
IMAGE_FILE_DLL

Imports

kernel32

CloseHandle
GetLastError
SetLastError
HeapAlloc
HeapReAlloc
GetProcessHeap
GetCurrentProcessId
ExitProcess
GetCurrentThread
GetCurrentThreadId
CreateProcessW
GetCurrentProcessorNumber
GetTickCount
GetTickCount64
GetWindowsDirectoryW
GetLargePageMinimum
GetModuleHandleA
lstrlenA
lstrlenW
IsBadReadPtr
IsValidCodePage
GetACP
GetSystemDefaultUILanguage
GetUserDefaultLangID
GetSystemDefaultLangID
GetSystemDefaultLCID
GetThreadUILanguage
WriteConsoleW
CreateFileW
SetFilePointerEx
SetEnvironmentVariableW
GetConsoleOutputCP
WriteFile
FlushFileBuffers
SetStdHandle
HeapSize
GetStringTypeW
GetFileType
GetStdHandle
LCMapStringW
FreeEnvironmentStringsW
GetEnvironmentStringsW
WideCharToMultiByte
MultiByteToWideChar
GetCommandLineW
GetCPInfo
GetOEMCP
FindNextFileW
FindFirstFileExW
FindClose
HeapFree
GetModuleFileNameW
GetModuleHandleExW
RaiseException
LoadLibraryExW
GetProcAddress
GetEnvironmentVariableW
GetCommandLineA
GetEnvironmentStrings
GetConsoleMode
FreeLibrary
TlsFree
TlsSetValue
TlsGetValue
TlsAlloc
IsProcessorFeaturePresent
IsDebuggerPresent
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
GetModuleHandleW
QueryPerformanceCounter
GetSystemTimeAsFileTime
InitializeSListHead
GetCurrentProcess
TerminateProcess
RtlUnwind
InterlockedFlushSList
EncodePointer
EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSectionAndSpinCount
DecodePointer

user32

EndPaint
BeginPaint
GetSubMenu
GetDialogBaseUnits
GetDlgCtrlID
ArrangeIconicWindows
GetLastActivePopup
GetTopWindow
GetParent
GetDesktopWindow
GetCaretPos
GetCaretBlinkTime
GetCursor
GetCursorPos
GetWindowTextLengthA
GetUpdateRect
GetShellWindow
EndMenu
GetSystemMenu
GetMenu
IsWindowEnabled
IsWindowUnicode
GetCapture
GetFocus
GetActiveWindow
IsZoomed
AnyPopup
IsIconic
IsWindowVisible
EndDeferWindowPos
BeginDeferWindowPos
OpenIcon
IsWindow
GetDoubleClickTime
IsWow64Message
GetMessageExtraInfo
GetMessageTime
wsprintfW
GetWindowDC

advapi32

RegSetValueExW
RegCloseKey
RegCreateKeyExW

shell32

SHCreateDirectoryExW

shlwapi

StrCmpIW
PathAppendW

Exports

Exports

CheckLicense
DllInstall
DllUninitialize
DllUpdate
InitDll
ThreadFunction
_CheckLicense
curl_easy_cleanup
curl_easy_init
curl_easy_perform
curl_easy_setopt

Sections

.text
Size: 311KB - Virtual size: 310KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 76KB - Virtual size: 75KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 3KB - Virtual size: 4.8MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.reloc
Size: 25KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

2b2df0c25d77d3cb214decd4b05eacb5

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

advapi32

shell32

shlwapi

Exports

Exports

Sections

.text Size: 311KB - Virtual size: 310KB

.rdata Size: 76KB - Virtual size: 75KB

.data Size: 3KB - Virtual size: 4.8MB

.reloc Size: 25KB - Virtual size: 24KB

.text
Size: 311KB - Virtual size: 310KB

.rdata
Size: 76KB - Virtual size: 75KB

.data
Size: 3KB - Virtual size: 4.8MB

.reloc
Size: 25KB - Virtual size: 24KB