876feac850e9030e3aff1b7bd69f85a613d21661e9350b7fa10dd263a61724fe[.]dll

General

Target
876feac850e9030e3aff1b7bd69f85a613d21661e9350b7fa10dd263a61724fe.dll
Size 652KB
Sample241004-b4rl4axflj
SHA256 876feac850e9030e3aff1b7bd69f85a613d21661e9350b7fa10dd263a61724fe
MD5 536bc1eadab8af8f052544cfcd5150ec
SHA1 ff3c9ee18e0e6f3f3a7b04e6c4c210d0adf29232
SHA512 33eae31cee1dd47e490111c7cd2fc0871e69b5a42fb24d807aa52b65ca9a6e457028ff8bea1ca2115a05f4ff99dd2c6c8075e3267d19b62b15087b437ca09d6c
SSDEEP 12288:vgQY+jL8MsthpNREymEG26+hbE64VJuzl8vr4JHdi7:vy5thpNRFxXblE67mX7
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
876feac850e9030e3aff1b7bd69f85a613d21661e9350b7fa10dd263a61724fe.dll

File Explorer

876feac850e9030e3aff1b7bd69f85a613d21661e9350b7fa10dd263a61724fe.dll

.dll 652KB

876feac850e9030e3aff1b7bd69f85a613d21661e9350b7fa10dd263a61724fe.dll

IMPHASH e508a746a3946beda3b79173e8298687
SHA256 876feac850e9030e3aff1b7bd69f85a613d21661e9350b7fa10dd263a61724fe
MD5 536bc1eadab8af8f052544cfcd5150ec
SHA1 ff3c9ee18e0e6f3f3a7b04e6c4c210d0adf29232
SHA512 33eae31cee1dd47e490111c7cd2fc0871e69b5a42fb24d807aa52b65ca9a6e457028ff8bea1ca2115a05f4ff99dd2c6c8075e3267d19b62b15087b437ca09d6c
SSDEEP 12288:vgQY+jL8MsthpNREymEG26+hbE64VJuzl8vr4JHdi7:vy5thpNRFxXblE67mX7
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

146228

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

user32

ShowWindow

kernel32

EncodePointer WriteConsoleW GetCurrentProcess GetModuleHandleA K32GetModuleInformation GetModuleFileNameA CreateFileA CreateFileMappingA CloseHandle MapViewOfFile VirtualProtect GetModuleHandleW GetConsoleWindow VirtualAlloc CreateProcessW GetThreadContext VirtualAllocEx WriteProcessMemory ReadProcessMemory SetThreadContext ResumeThread UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW CreateFileW RaiseException InterlockedFlushSList RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW DecodePointer ExitProcess GetModuleHandleExW GetModuleFileNameW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetProcessHeap GetStdHandle GetFileType GetStringTypeW HeapSize HeapReAlloc SetStdHandle FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode SetFilePointerEx

Sharing