94c5cf35160062b5810c8839d94a5ff27c16e43435376bc4a79693c9879aee0b[.]dll

General

Target
94c5cf35160062b5810c8839d94a5ff27c16e43435376bc4a79693c9879aee0b.dll
Size 1.9MB
Sample241104-c4d7fatpfm
SHA256 94c5cf35160062b5810c8839d94a5ff27c16e43435376bc4a79693c9879aee0b
MD5 3ba40ab5aa74dc76522942bae0793e51
SHA1 e59857ad8b2f560be38e62c4006b6498569dbbd3
SHA512 7aae7c27ba029c79de7f107c926a086389ba1c194342b8e308a3d50cd2d9937740e3cdb041c3f2e2512764322548220a79c9c82e260c2da63edaf8fff0e8cbf9
SSDEEP 49152:FQU1aLhQhG5NUAgoOa8nBc0SmmdWwMLwktw4Bwezqfn8+nFFQCxEsJwKQs:FfaNQh+NUABO/c0Y9Adxzqf8+gqJW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
94c5cf35160062b5810c8839d94a5ff27c16e43435376bc4a79693c9879aee0b.dll

File Explorer

94c5cf35160062b5810c8839d94a5ff27c16e43435376bc4a79693c9879aee0b.dll

.dll 1.9MB

94c5cf35160062b5810c8839d94a5ff27c16e43435376bc4a79693c9879aee0b.dll

IMPHASH fa26e90b751209baf7f71870da02cfde
SHA256 94c5cf35160062b5810c8839d94a5ff27c16e43435376bc4a79693c9879aee0b
MD5 3ba40ab5aa74dc76522942bae0793e51
SHA1 e59857ad8b2f560be38e62c4006b6498569dbbd3
SHA512 7aae7c27ba029c79de7f107c926a086389ba1c194342b8e308a3d50cd2d9937740e3cdb041c3f2e2512764322548220a79c9c82e260c2da63edaf8fff0e8cbf9
SSDEEP 49152:FQU1aLhQhG5NUAgoOa8nBc0SmmdWwMLwktw4Bwezqfn8+nFFQCxEsJwKQs:FfaNQh+NUABO/c0Y9Adxzqf8+gqJW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1395915

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\Safe\Share\Born\magnet\Thin.pdb

kernel32

QueryPerformanceCounter CreateFileW GetWindowsDirectoryW GetSystemTime GetModuleHandleW GetVersionExW OpenProcess GetDateFormatW SizeofResource LockResource LoadLibraryW ExitProcess GetFileTime WideCharToMultiByte GetModuleFileNameW TlsAlloc GetTempPathW VirtualProtect CreateSemaphoreW GetCurrentDirectoryW GetEnvironmentVariableW CompareStringW CompareStringA CreateFileA GetLocaleInfoW SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA ReadFile GetTimeZoneInformation LoadLibraryA FreeLibrary SetConsoleCtrlHandler CloseHandle SetFilePointer FlushFileBuffers GetConsoleMode GetConsoleCP WriteFile HeapSize IsValidCodePage IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetOEMCP GetACP GetDateFormatA GetTimeFormatA GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree GetCurrentThreadId GetCommandLineA GetVersionExA HeapAlloc GetProcessHeap LCMapStringA LCMapStringW GetCPInfo GetStringTypeA GetStringTypeW GetProcAddress GetModuleHandleA TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThread HeapDestroy HeapCreate VirtualFree FatalAppExitA VirtualAlloc HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetEnvironmentVariableA

setupapi

SetupDefaultQueueCallbackW SetupCopyOEMInfW SetupGetStringFieldW SetupSetSourceListW SetupCancelTemporarySourceList SetupQueryInfVersionInformationW SetupTermDefaultQueueCallback SetupGetFieldCount SetupDestroyDiskSpaceList SetupGetTargetPathW SetupInitDefaultQueueCallback SetupRemoveFromDiskSpaceListW SetupGetLineCountW SetupAddToSourceListW SetupPromptForDiskW SetupQueueCopyW SetupGetSourceInfoW SetupQueueRenameW SetupFreeSourceListW SetupSetPlatformPathOverrideW SetupRemoveFromSourceListW SetupQuerySourceListW SetupPromptReboot SetupGetLineByIndexW SetupGetIntField SetupGetLineTextW SetupQueryDrivesInDiskSpaceListW SetupCreateDiskSpaceListW SetupQueueDefaultCopyW SetupQuerySpaceRequiredOnDriveW SetupIterateCabinetW

Sharing