14ff2a275e6994ba792d2733f35c410f[.]dll

General

Target
14ff2a275e6994ba792d2733f35c410f.dll
Size 635KB
Sample241025-jmh8dsxama
SHA256 ab67f9b2aba675e29dfde3beb40683ffdceb70b1237f43093aa94a20855d2e87
MD5 14ff2a275e6994ba792d2733f35c410f
SHA1 52305ae15c459eb33e76c0df79622147e54b6ddb
SHA512 d940946861eb1f3f5e562bec8e583e2ec126ddeb45e15c8c9a1861c7bcc1a3cb987e66e0c0da4860d3351458f1ccf74cf68f870c7daa3c460b22511df4a67df2
SSDEEP 12288:MSB6YObJN3d0aH+5lR35CTxzcTo6cNs6IQy/lOljXtF9EO:MSE5JN3dVS/cTps19Olbt7EO
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
14ff2a275e6994ba792d2733f35c410f.dll

File Explorer

14ff2a275e6994ba792d2733f35c410f.dll

.dll 635KB

14ff2a275e6994ba792d2733f35c410f.dll

IMPHASH 56b6595b1315c0d123745ab0902e6aad
SHA256 ab67f9b2aba675e29dfde3beb40683ffdceb70b1237f43093aa94a20855d2e87
MD5 14ff2a275e6994ba792d2733f35c410f
SHA1 52305ae15c459eb33e76c0df79622147e54b6ddb
SHA512 d940946861eb1f3f5e562bec8e583e2ec126ddeb45e15c8c9a1861c7bcc1a3cb987e66e0c0da4860d3351458f1ccf74cf68f870c7daa3c460b22511df4a67df2
SSDEEP 12288:MSB6YObJN3d0aH+5lR35CTxzcTo6cNs6IQy/lOljXtF9EO:MSE5JN3dVS/cTps19Olbt7EO
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

123606

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

user32

wsprintfW

crypt32

CryptStringToBinaryA

kernel32

IsDebuggerPresent GetCurrentProcess FreeLibrary GetProcAddress LoadLibraryW VirtualProtect CreateFileW GetFileSize ReadFile CloseHandle SetLastError GetLastError GetModuleHandleW GetModuleHandleA GetNativeSystemInfo VirtualAlloc LoadLibraryA VirtualFree GetThreadLocale lstrlenW QueryPerformanceCounter QueryPerformanceFrequency DuplicateHandle WaitForSingleObjectEx Sleep GetCurrentThread GetCurrentThreadId GetExitCodeThread InitializeCriticalSectionAndSpinCount CreateEventW TlsAlloc TlsGetValue TlsSetValue TlsFree GetSystemTimeAsFileTime GetTickCount EnterCriticalSection LeaveCriticalSection TryEnterCriticalSection RtlCaptureStackBackTrace SetEvent ResetEvent UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent GetCurrentProcessId InitializeSListHead GetStartupInfoW CreateTimerQueue SignalObjectAndWait SwitchToThread CreateThread SetThreadPriority GetThreadPriority GetLogicalProcessorInformation CreateTimerQueueTimer ChangeTimerQueueTimer DeleteTimerQueueTimer GetNumaHighestNodeNumber GetProcessAffinityMask SetThreadAffinityMask RegisterWaitForSingleObject FormatMessageW OutputDebugStringW EncodePointer GetThreadTimes FreeLibraryAndExitThread GetModuleFileNameW LoadLibraryExW GetVersionExW SetProcessAffinityMask ReleaseSemaphore InterlockedPopEntrySList InterlockedPushEntrySList InterlockedFlushSList QueryDepthSList UnregisterWaitEx WaitForMultipleObjectsEx WaitForSingleObject DeleteCriticalSection UnregisterWait RtlUnwind RaiseException VirtualQuery MultiByteToWideChar ExitThread ResumeThread GetModuleHandleExW HeapAlloc HeapFree ExitProcess WideCharToMultiByte GetACP GetStdHandle GetFileType GetStringTypeW SetConsoleCtrlHandler GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetProcessHeap IsValidCodePage GetOEMCP GetCPInfo GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA SetEnvironmentVariableW GetCommandLineA GetCommandLineW FlushFileBuffers WriteFile GetConsoleCP GetConsoleMode SetStdHandle SetFilePointerEx HeapSize HeapReAlloc WriteConsoleW DecodePointer OutputDebugStringA

advapi32

SystemFunction036

Name

.text

Size

507KB

Virtual Size

506KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

73KB

Virtual Size

73KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

22KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

9B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

28KB

Virtual Size

27KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

14ff2a275e6994ba792d2733f35c410f.dll

user32

crypt32

kernel32

advapi32

generic