_77a53dc757fdf381d3906ab256b74ad3cdb7628261c58a62bcc9c6ca605307ba[.]dll

General

Target
_77a53dc757fdf381d3906ab256b74ad3cdb7628261c58a62bcc9c6ca605307ba.dll
Size 1.2MB
Sample251209-jynbgser4v
SHA256 77a53dc757fdf381d3906ab256b74ad3cdb7628261c58a62bcc9c6ca605307ba
MD5 1ff365902d427237cf9965779ef65ad0
SHA1 cd53bfe4b85dad062121e337db4ef3e16cb3267a
SHA512 42ce597798efc9d9f5a22293fe471d15d81e1732393173f914d2f5184aa024e9796a8e69fa440c3b53ac9d50d5c8e85485bb8dca1d817c672cad43dd6a989890
SSDEEP 24576:S2Zm93HeH5n7tDGKoORmoSVPbi7VaqKFxPTw/3kPoouW6Ds69DMfV87ZqEArCe:Se43+H5n7tiK3RmhVPb83kPfv6DsZfMo
MD5 SHA1 SHA512 SSDEEP

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
_77a53dc757fdf381d3906ab256b74ad3cdb7628261c58a62bcc9c6ca605307ba.dll

File Explorer

_77a53dc757fdf381d3906ab256b74ad3cdb7628261c58a62bcc9c6ca605307ba.dll

.dll 1.2MB

_77a53dc757fdf381d3906ab256b74ad3cdb7628261c58a62bcc9c6ca605307ba.dll

IMPHASH cf5cb8c86b694abd9c1ab08034eb8bca
SHA256 77a53dc757fdf381d3906ab256b74ad3cdb7628261c58a62bcc9c6ca605307ba
MD5 1ff365902d427237cf9965779ef65ad0
SHA1 cd53bfe4b85dad062121e337db4ef3e16cb3267a
SHA512 42ce597798efc9d9f5a22293fe471d15d81e1732393173f914d2f5184aa024e9796a8e69fa440c3b53ac9d50d5c8e85485bb8dca1d817c672cad43dd6a989890
SSDEEP 24576:S2Zm93HeH5n7tDGKoORmoSVPbi7VaqKFxPTw/3kPoouW6Ds69DMfV87ZqEArCe:Se43+H5n7tiK3RmhVPb83kPfv6DsZfMo
MD5 SHA1 SHA512 SSDEEP

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

828140

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

EnterCriticalSection LeaveCriticalSection lstrlenW GetProcAddress GetFileSize GetFileAttributesA GetFullPathNameW GetTempFileNameW SetLastError GetSystemDirectoryW GetWindowsDirectoryW lstrlenA GetFileType GetTempPathW GetTempPathA GetModuleFileNameW GetACP GetCPInfo GetDriveTypeA GetWindowsDirectoryA GetEnvironmentVariableA GetSystemDirectoryA GetModuleFileNameA GetModuleHandleA LoadLibraryA GetSystemDefaultLangID GetEnvironmentStringsW GetEnvironmentVariableW GetCurrentDirectoryA GetFullPathNameA GetTempFileNameA InitializeProcThreadAttributeList UpdateProcThreadAttribute LoadLibraryW CreateMutexW IsValidCodePage GetCommandLineA GetCurrentThreadId GetThreadUILanguage GetOEMCP VirtualProtect GetTickCount GetProcessHeap GetCurrentProcess GetCurrentThread GetCurrentProcessId GetSystemDefaultUILanguage WriteConsoleW CloseHandle HeapReAlloc HeapSize SetFilePointerEx GetFileSizeEx SetStdHandle GetConsoleMode GetConsoleOutputCP FlushFileBuffers GetStringTypeW FreeEnvironmentStringsW WideCharToMultiByte DecodePointer MultiByteToWideChar WriteFile LoadLibraryExA CreateFileW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent GetModuleHandleW TerminateProcess RtlUnwind InterlockedFlushSList GetLastError EncodePointer DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW RaiseException ExitProcess GetModuleHandleExW HeapAlloc HeapFree FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx LCMapStringW GetStdHandle FindClose FindFirstFileExW FindNextFileW GetCommandLineW

user32

IsCharAlphaA IsWindow GetDialogBaseUnits GetLastActivePopup IsCharUpperA IsIconic GetParent GetDlgCtrlID OpenIcon IsZoomed GetCursorPos GetMessageTime GetWindowTextLengthA GetDoubleClickTime GetTopWindow

advapi32

GetUserNameA GetUserNameW

Name

.flat

Size

512B

Virtual Size

160B

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.text

Size

876KB

Virtual Size

875KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

210KB

Virtual Size

209KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

36KB

Virtual Size

57.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

512B

Virtual Size

128B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

76KB

Virtual Size

76KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

_77a53dc757fdf381d3906ab256b74ad3cdb7628261c58a62bcc9c6ca605307ba.dll

kernel32

user32

advapi32

generic