f4be28ff3ca6e36a4b6844cde7898e15bd66e9014b50933947e94e132f737d1c[.]dll

General

Target
f4be28ff3ca6e36a4b6844cde7898e15bd66e9014b50933947e94e132f737d1c.dll
Size 1.9MB
Sample241104-dlf4ra1mex
SHA256 f4be28ff3ca6e36a4b6844cde7898e15bd66e9014b50933947e94e132f737d1c
MD5 45fd9aaf1d07676187ddb47b7c7bb81e
SHA1 df864079598c06a2799c7a1a75355e724ff4e1d9
SHA512 33f3754c6b8d969692874b1f563d39b084c98c3e768867ad96b07fd9ea1f094f9e73ea88d82e31066b6bfc285d5232ff1159b0db187a632bdeb0669df59ccc4f
SSDEEP 49152:VQU1aLhQhG5NUAgoOa8nBc0SmmdWwMLwktw4BueSqfn8+nFFQCxEsJwKQf:VfaNQh+NUABO/c0Y9AdTSqf8+gqJW
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
f4be28ff3ca6e36a4b6844cde7898e15bd66e9014b50933947e94e132f737d1c.dll

File Explorer

f4be28ff3ca6e36a4b6844cde7898e15bd66e9014b50933947e94e132f737d1c.dll

.dll 1.9MB

f4be28ff3ca6e36a4b6844cde7898e15bd66e9014b50933947e94e132f737d1c.dll

IMPHASH 53fd5b941162c3d3a04b5a7ae8bef103
SHA256 f4be28ff3ca6e36a4b6844cde7898e15bd66e9014b50933947e94e132f737d1c
MD5 45fd9aaf1d07676187ddb47b7c7bb81e
SHA1 df864079598c06a2799c7a1a75355e724ff4e1d9
SHA512 33f3754c6b8d969692874b1f563d39b084c98c3e768867ad96b07fd9ea1f094f9e73ea88d82e31066b6bfc285d5232ff1159b0db187a632bdeb0669df59ccc4f
SSDEEP 49152:VQU1aLhQhG5NUAgoOa8nBc0SmmdWwMLwktw4BueSqfn8+nFFQCxEsJwKQf:VfaNQh+NUABO/c0Y9AdTSqf8+gqJW
MD5 SHA1 SHA512 SSDEEP

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

1395915

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\Safe\Share\Born\magnet\Thin.pdb

kernel32

QueryPerformanceCounter CreateFileW GetWindowsDirectoryW GetSystemTime GetModuleHandleW GetVersionExW OpenProcess GetDateFormatW SizeofResource LockResource LoadLibraryW ExitProcess GetFileTime WideCharToMultiByte GetModuleFileNameW TlsAlloc GetTempPathW VirtualProtect CreateSemaphoreW GetCurrentDirectoryW GetEnvironmentVariableW CompareStringW CompareStringA CreateFileA GetLocaleInfoW SetStdHandle WriteConsoleW GetConsoleOutputCP WriteConsoleA ReadFile GetTimeZoneInformation LoadLibraryA FreeLibrary SetConsoleCtrlHandler CloseHandle SetFilePointer FlushFileBuffers GetConsoleMode GetConsoleCP WriteFile HeapSize IsValidCodePage IsValidLocale EnumSystemLocalesA GetLocaleInfoA GetUserDefaultLCID GetOEMCP GetACP GetDateFormatA GetTimeFormatA GetSystemTimeAsFileTime GetCurrentProcessId GetTickCount InterlockedIncrement InterlockedDecrement InterlockedCompareExchange InterlockedExchange MultiByteToWideChar Sleep InitializeCriticalSection DeleteCriticalSection EnterCriticalSection LeaveCriticalSection RtlUnwind RaiseException TerminateProcess GetCurrentProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetLastError HeapFree GetCurrentThreadId GetCommandLineA GetVersionExA HeapAlloc GetProcessHeap LCMapStringA LCMapStringW GetCPInfo GetStringTypeA GetStringTypeW GetProcAddress GetModuleHandleA TlsGetValue TlsSetValue TlsFree SetLastError GetCurrentThread HeapDestroy HeapCreate VirtualFree FatalAppExitA VirtualAlloc HeapReAlloc SetHandleCount GetStdHandle GetFileType GetStartupInfoA GetModuleFileNameA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW SetEnvironmentVariableA

setupapi

SetupCancelTemporarySourceList SetupDefaultQueueCallbackW SetupSetSourceListW SetupCopyOEMInfW SetupAddToSourceListW SetupQueryDrivesInDiskSpaceListW SetupPromptForDiskW SetupRemoveFromDiskSpaceListW SetupGetLineTextW SetupDestroyDiskSpaceList SetupQuerySpaceRequiredOnDriveW SetupGetLineByIndexW SetupQueueDefaultCopyW SetupFreeSourceListW SetupGetIntField SetupQueueRenameW SetupCreateDiskSpaceListW SetupPromptReboot SetupInitDefaultQueueCallback SetupRemoveFromSourceListW SetupQueueCopyW SetupSetPlatformPathOverrideW SetupQuerySourceListW SetupGetStringFieldW SetupIterateCabinetW SetupGetLineCountW SetupGetFieldCount SetupQueryInfVersionInformationW SetupGetTargetPathW SetupGetSourceInfoW SetupTermDefaultQueueCallback

Sharing