verification[.]google[.]dll

General

Target
verification.google.dll
Size 1.5MB
Sample260318-kmpwlset9v
SHA256 b40047866ffef50dc21b4cc6b4f9643ebdc32f9f1584818489f6fa545368ab62
MD5 cc3ab78221e02d7d6409e8ef5f604242
SHA1 cf4723ae97bacf4ba1b367eb31f933ddaddbd1e8
SHA512 e43c8dc394528dd32559f747e7da750fb9efcc9fc5a880d7e41fe3fd9299659eddec0f7af3817dcd7cc3f2ea57ed222fade4164bf0239f18998a18134974d792
SSDEEP 12288:TbQT9bKl+jx17h+6om3v983cr7J0xnRvkdBSz5wEk/YILFlQihA5oRLtBq:/yZ/ymwxnRyY9wEk/YILFlQihY
TLSH
T120653C0A80E658E3B5E314B74563A6427F390C4906DDCC09B1BE4DECB39AF9D63B71A1
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
verification.google.dll

File Explorer

verification.google.dll

.dll 1.5MB

verification.google.dll

IMPHASH 2560af07e8c46481887e984b59fb6d6c
SHA256 b40047866ffef50dc21b4cc6b4f9643ebdc32f9f1584818489f6fa545368ab62
MD5 cc3ab78221e02d7d6409e8ef5f604242
SHA1 cf4723ae97bacf4ba1b367eb31f933ddaddbd1e8
SHA512 e43c8dc394528dd32559f747e7da750fb9efcc9fc5a880d7e41fe3fd9299659eddec0f7af3817dcd7cc3f2ea57ed222fade4164bf0239f18998a18134974d792
SSDEEP 12288:TbQT9bKl+jx17h+6om3v983cr7J0xnRvkdBSz5wEk/YILFlQihA5oRLtBq:/yZ/ymwxnRyY9wEk/YILFlQihY
TLSH
T120653C0A80E658E3B5E314B74563A6427F390C4906DDCC09B1BE4DECB39AF9D63B71A1
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

362064

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

DeleteCriticalSection DisableThreadLibraryCalls GetACP GetCommandLineW GetCurrentProcessId GetCurrentProcessorNumber GetCurrentThreadId GetLargePageMinimum GetLastError GetLocalTime GetModuleHandleA GetOEMCP GetProcessHeap GetSystemDefaultLangID GetSystemInfo GetSystemTime GetSystemTimeAsFileTime GetTempPathA GetTickCount64 GetTickCount GetVersion HeapAlloc HeapFree InitializeCriticalSection IsValidCodePage QueryPerformanceCounter QueryPerformanceFrequency VirtualAlloc WaitForSingleObject lstrlenA

advapi32

RegDeleteKeyA RegEnumValueA RegNotifyChangeKeyValue

gdi32

GetPixel SetBkMode SetTextColor

shell32

ExtractIconA ShellExecuteExA

user32

BeginDeferWindowPos BeginPaint EndDeferWindowPos EndPaint FindWindowA GetActiveWindow GetCapture GetCaretBlinkTime GetCaretPos GetCursor GetCursorPos GetDC GetDesktopWindow GetDlgCtrlID GetDoubleClickTime GetFocus GetForegroundWindow GetLastActivePopup GetMenu GetMenuItemCount GetMessageTime GetParent GetShellWindow GetSystemMenu GetSystemMetrics GetTopWindow GetUpdateRect GetWindowDC GetWindowLongA GetWindowRect GetWindowTextLengthA IsIconic IsWindow IsWindowEnabled IsWindowUnicode IsWindowVisible IsZoomed ReleaseDC SetTimer

Name

.text

Size

364KB

Virtual Size

363KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

536KB

Virtual Size

536KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

1024B

Virtual Size

728B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata2

Size

512B

Virtual Size

31B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls2

Size

512B

Virtual Size

63B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

584KB

Virtual Size

583KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

24KB

Virtual Size

24KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

verification.google.dll

kernel32

advapi32

gdi32

shell32

user32

generic