NRR-1[.]dll | Triage™

Target
NRR-1.dll
Size 2.0MB
Sample260420-ym23tsds8p
SHA256 3e1015e338384acfc12eeec1005b5ae4f1b0f32bffa1ad586db9d0cd8bf3c814
MD5 ce6daace1d68e01c6f26918f8bec7554
SHA1 0eab88f8e6c7b3f07dc4bb2437354c5a6500f215
SHA512 9a027c43a4c9b395a4d6ec954374e7e4313bf01c21c2e76deb47e892153429a6df78d65e627cb42f7fef469a113e4f4e25763f648807ff098690b709275fe5a7
SSDEEP 49152:OUgXn0e/ariDNFNLvKariuj0dVCMt77X:7g/ar2NVh0dP7
TLSH
T1A0A59F47757884ADC15AE0B889779949E77270080F789BDF12A2475EAF7BFD00DBB220
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
NRR-1.dll

File Explorer

NRR-1.dll

.dll 2.0MB

NRR-1.dll

IMPHASH f113f48878f092d2bb596c20e93506f4
SHA256 3e1015e338384acfc12eeec1005b5ae4f1b0f32bffa1ad586db9d0cd8bf3c814
MD5 ce6daace1d68e01c6f26918f8bec7554
SHA1 0eab88f8e6c7b3f07dc4bb2437354c5a6500f215
SHA512 9a027c43a4c9b395a4d6ec954374e7e4313bf01c21c2e76deb47e892153429a6df78d65e627cb42f7fef469a113e4f4e25763f648807ff098690b709275fe5a7
SSDEEP 49152:OUgXn0e/ariDNFNLvKariuj0dVCMt77X:7g/ar2NVh0dP7
TLSH
T1A0A59F47757884ADC15AE0B889779949E77270080F789BDF12A2475EAF7BFD00DBB220
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

383312

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\Development\cpp\ignite\projects\windows\visualstudio\VST\x64\VST Release\NRR-1.pdb

kernel32

WideCharToMultiByte GetTickCount GlobalUnlock ReadFile SetConsoleTextAttribute GetStdHandle WriteFile SetFilePointer SetEndOfFile FindClose CreateFileW GetCurrentThreadId Sleep FormatMessageW GetLastError GetFileAttributesExW TerminateThread CloseHandle GetCurrentDirectoryW GetModuleHandleW FlushFileBuffers WriteConsoleW SetEnvironmentVariableA FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA GetOEMCP IsValidCodePage FreeLibrary FindFirstFileExA GetProcessHeap HeapSize ReadConsoleW SetFilePointerEx SetStdHandle GetConsoleMode GetConsoleCP EnumSystemLocalesW GetUserDefaultLCID IsValidLocale GetACP GetModuleFileNameA ExitProcess HeapFree HeapReAlloc HeapAlloc GetFullPathNameA GetFileType GetDriveTypeW GetModuleHandleExW GetTimeZoneInformation QueryPerformanceFrequency InterlockedFlushSList DeleteCriticalSection GlobalLock GetProcAddress LoadResource GlobalFree GlobalAlloc LockResource LoadLibraryA GlobalSize MultiByteToWideChar GetVersionExW FindResourceA LeaveCriticalSection InitializeCriticalSection EnterCriticalSection FindNextFileA SizeofResource LoadLibraryExW RtlUnwindEx TerminateProcess GetCurrentProcess InitializeSListHead GetCurrentProcessId QueryPerformanceCounter IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext WaitForSingleObjectEx ResetEvent SetEvent GetCPInfo GetStringTypeW GetLocaleInfoW LCMapStringW CompareStringW GetSystemTimeAsFileTime TlsFree TlsSetValue TlsGetValue TlsAlloc CreateEventW InitializeCriticalSectionAndSpinCount SetLastError RaiseException DecodePointer EncodePointer RtlPcToFileHeader

user32

RegisterClassW PeekMessageW SetMenuItemInfoW ClientToScreen GetWindowInfo SetTimer GetAsyncKeyState TrackPopupMenu GetWindowLongPtrW SetClassLongPtrW CreatePopupMenu SetWindowTextW UnregisterClassW GetSystemMetrics SendMessageW ScreenToClient CreateWindowExW SetWindowLongPtrW SetWindowPos GetDC MapWindowPoints GetFocus GetWindowRect CallWindowProcW GetUpdateRgn GetKeyState DefWindowProcW GetWindowTextLengthW GetClassNameW DispatchMessageW SetMenuInfo TrackMouseEvent DestroyMenu SetLayeredWindowAttributes SetFocus GetParent ReleaseCapture InvalidateRect ReleaseDC GetCursorPos BeginPaint EndPaint EnableWindow GetWindowTextW GetUpdateRect SetCapture LoadCursorW wsprintfW GetClientRect AppendMenuW DestroyWindow KillTimer

gdi32

CreateCompatibleDC CreateRectRgn DeleteDC SetTextColor ChoosePixelFormat GetRegionData SetBkColor DeleteObject CreateSolidBrush SwapBuffers CreateFontIndirectW SetPixelFormat CreateDIBSection

comdlg32

GetSaveFileNameW GetOpenFileNameW

shell32

SHBrowseForFolderW SHGetSpecialFolderPathW SHGetPathFromIDListW DragQueryFileW

ole32

GetHGlobalFromStream CoCreateInstance DoDragDrop CreateStreamOnHGlobal OleInitialize RegisterDragDrop RevokeDragDrop OleUninitialize

gdiplus

GdipBitmapUnlockBits GdipCloneImage GdipSetPenColor GdipSetPathGradientCenterPoint GdipSetClipRect GdipGetLineSpacing GdipCreateBitmapFromResource GdipCreateFontFamilyFromName GdipGetEmHeight GdipAddPathString GdipGetFamily GdipSetImageAttributesColorMatrix GdipGetImageHeight GdipDeleteFontFamily GdipAddPathLine GdiplusShutdown GdiplusStartup GdipTransformPath GdipDeleteBrush GdipIsVisiblePathPoint GdipAlloc GdipDeleteGraphics GdipClonePath GdipDeleteFont GdipStartPathFigure GdipGetFontSize GdipGetImageWidth GdipTranslateWorldTransform GdipDeletePen GdipCreateBitmapFromScan0 GdipSetPathFillMode GdipCreatePen1 GdipDrawPolygon GdipDrawImageRectRectI GdipDeleteMatrix GdipSetPathGradientSurroundColorsWithCount GdipGetPathLastPoint GdipCreateMatrix2 GdipAddPathBezier GdipDisposeImageAttributes GdipDeletePath GdipSetPathGradientCenterColor GdipCreatePathGradientFromPath GdipCreateBitmapFromStreamICM GdipCreateMatrix GdipDisposeImage GdipSetMatrixElements GdipSetSmoothingMode GdipSetWorldTransform GdipGetWorldTransform GdipCreateLineBrush GdipCreatePath GdipFillPolygon GdipCreateFont GdipSetLinePresetBlend GdipSetInterpolationMode GdipGetDpiY GdipGetCellDescent GdipSetPenLineCap197819 GdipCreateSolidFill GdipGetFontStyle GdipFillPath GdipGetPathWorldBounds GdipSetPenDashArray GdipSetPenDashStyle GdipSetPenWidth GdipCreateFromHWND GdipDrawLine GdipDrawRectangle GdipCreateHBITMAPFromBitmap GdipSetPixelOffsetMode GdipFillRectangle GdipAddPathEllipse GdipSetPageUnit GdipSetSolidFillColor GdipClosePathFigure GdipCreateImageAttributes GdipGetGenericFontFamilySansSerif GdipFree GdipDrawPath GdipDrawString GdipBitmapLockBits GdipSetPenLineJoin ord1 GdipFillEllipse GdipAddPathRectangle GdipSetTextRenderingHint GdipGetCellAscent GdipDrawEllipse GdipCloneBrush GdipSetPenDashOffset GdipMeasureString GdipGetFontHeightGivenDPI GdipGetImageGraphicsContext GdipGetPathGradientPointCount GdipCreateFromHDC

opengl32

wglGetCurrentContext wglDeleteContext wglMakeCurrent wglCreateContext

Name

.text

Size

1.1MB

Virtual Size

1.1MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

416KB

Virtual Size

415KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

28KB

Virtual Size

37KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

63KB

Virtual Size

63KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.gfids

Size

1024B

Virtual Size

896B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

389KB

Virtual Size

388KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

21KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

NRR-1.dll

kernel32

user32

gdi32

comdlg32

shell32

ole32

gdiplus

opengl32

generic