8ff43b6ddf6243bd5ee073f9987920fa223809f589d151d7e438fd8cc08ce292[.]dll

General

Target
8ff43b6ddf6243bd5ee073f9987920fa223809f589d151d7e438fd8cc08ce292.dll
Size 525KB
Sample250207-qmyfmstmap
SHA256 8ff43b6ddf6243bd5ee073f9987920fa223809f589d151d7e438fd8cc08ce292
MD5 4198ac1dc34de77ab8ceac3c9a25480e
SHA1 f8fb1264a292aecb6c2bf5c5d4f3e199e3a822ad
SHA512 37dd3c50283daa7be1fb831820d273b7663dddce4d98c87c8d08864fac2dc00daf243ca6e50e028d4f04262160f5dea9a98000cffb67d70c07875d3fc2e4c47c
SSDEEP 12288:4sskVmMfu4CN1NYPkDbkuN90VOR47wn2vTPHXL2n2UT1p0:v0NYPkEuz0VOR47w2rvXyD0
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8ff43b6ddf6243bd5ee073f9987920fa223809f589d151d7e438fd8cc08ce292.dll

File Explorer

8ff43b6ddf6243bd5ee073f9987920fa223809f589d151d7e438fd8cc08ce292.dll

.dll 525KB

8ff43b6ddf6243bd5ee073f9987920fa223809f589d151d7e438fd8cc08ce292.dll

IMPHASH 81bbf124b97b7484333ed4ffba3d7e94
SHA256 8ff43b6ddf6243bd5ee073f9987920fa223809f589d151d7e438fd8cc08ce292
MD5 4198ac1dc34de77ab8ceac3c9a25480e
SHA1 f8fb1264a292aecb6c2bf5c5d4f3e199e3a822ad
SHA512 37dd3c50283daa7be1fb831820d273b7663dddce4d98c87c8d08864fac2dc00daf243ca6e50e028d4f04262160f5dea9a98000cffb67d70c07875d3fc2e4c47c
SSDEEP 12288:4sskVmMfu4CN1NYPkDbkuN90VOR47wn2vTPHXL2n2UT1p0:v0NYPkEuz0VOR47w2rvXyD0
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Password

infected

Minor OS version

0

Major OS version

6

Entry point

5196

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

c:\clothe\923\Sight\Captain\Sell\cool.pdb

kernel32

CreateDirectoryA CreateSemaphoreA DecodePointer WriteConsoleW CreateThread WaitForSingleObjectEx CloseHandle OutputDebugStringW OutputDebugStringA VirtualProtectEx GetConsoleMode GetConsoleCP FlushFileBuffers WriteFile SetStdHandle HeapReAlloc HeapSize GetStringTypeW SetConsoleCtrlHandler ResetEvent DeleteFileA GetTempPathA GetEnvironmentVariableA VirtualAlloc VirtualFree SetFilePointerEx VirtualProtect GetFileType GetStdHandle GetProcessHeap SetEnvironmentVariableW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW InterlockedPushEntrySList InterlockedFlushSList RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW EncodePointer RaiseException ExitProcess GetModuleHandleExW GetModuleFileNameA GetModuleFileNameW MultiByteToWideChar WideCharToMultiByte GetCurrentThread GetACP GetDateFormatW GetTimeFormatW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW HeapAlloc HeapFree FindClose FindFirstFileExA FindFirstFileExW FindNextFileA FindNextFileW IsValidCodePage GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableA CreateFileW

user32

InflateRect GetClassInfoExA GetKeyNameTextA CallWindowProcA ExitWindowsEx GetFocus IntersectRect SetFocus SetParent EndDeferWindowPos AppendMenuA GetWindowTextLengthA RegisterClassExA GetCursorPos GetWindowLongA

gdi32

ExtTextOutA StartPage StartDocA Rectangle CreateFontIndirectA RestoreDC SaveDC

mpr

WNetGetUniversalNameA WNetGetUserA WNetAddConnection2A

Sharing