441041364[.]dll[.]exe

Sharing

Copy URL Twitter E-mail

General

Target
441041364.dll.exe
Size 6.0MB
Sample260611-qv486aev4s
SHA256 c36190496bb245686f887896a46ee2bd31facf10bf6e4eed6ea7e7211b7fad2f
MD5 aa97e81e32e24655dd00a98676613f4c
SHA1 f70c53fd023c935d060b6cb76849957d6122a839
SHA512 cb5695860f27b4e08edb6d88533ca027f61bff96d66857ae89c7dc46f0bf4f2e96eda022845a5a0a9e6edd92aa17df4fd827c354df673fa0b06b9c60f2b1dd6d
SSDEEP 98304:6Jxm36lRtUwlSCyqZyiIQGugJwooOkmNQRjSlarg2KD96aPJ3OM:6SqPtUwZGPhoyQRWV2KDht
TLSH
T143560106BCA104F5D0BAA231CD6356517B71BC881F3123D72AA0BA782FB76E1DD78395
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
441041364.dll.exe

File Explorer

441041364.dll.exe

.exe 6.0MB

441041364.dll.exe

IMPHASH 703c33eb82cb860e4e70f6478d707fe6
SHA256 c36190496bb245686f887896a46ee2bd31facf10bf6e4eed6ea7e7211b7fad2f
MD5 aa97e81e32e24655dd00a98676613f4c
SHA1 f70c53fd023c935d060b6cb76849957d6122a839
SHA512 cb5695860f27b4e08edb6d88533ca027f61bff96d66857ae89c7dc46f0bf4f2e96eda022845a5a0a9e6edd92aa17df4fd827c354df673fa0b06b9c60f2b1dd6d
SSDEEP 98304:6Jxm36lRtUwlSCyqZyiIQGugJwooOkmNQRjSlarg2KD96aPJ3OM:6SqPtUwZGPhoyQRWV2KDht
TLSH
T143560106BCA104F5D0BAA231CD6356517B71BC881F3123D72AA0BA782FB76E1DD78395
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

5184

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DEBUG_STRIPPED

PDB paths

kernel32

AddVectoredContinueHandler AddVectoredExceptionHandler CloseHandle CreateEventA CreateIoCompletionPort CreateThread CreateWaitableTimerExW DeleteCriticalSection DuplicateHandle EnterCriticalSection ExitProcess FreeEnvironmentStringsW GetCPInfo GetConsoleMode GetCurrentThreadId GetEnvironmentStringsW GetErrorMode GetLastError GetModuleHandleA GetProcAddress GetProcessAffinityMask GetQueuedCompletionStatusEx GetStdHandle GetSystemDirectoryA GetSystemInfo GetThreadContext InitializeCriticalSection LeaveCriticalSection LoadLibraryExW MultiByteToWideChar PostQueuedCompletionStatus RaiseFailFastException ResumeThread RtlLookupFunctionEntry RtlVirtualUnwind SetConsoleCtrlHandler SetErrorMode SetEvent SetProcessPriorityBoost SetThreadContext SetUnhandledExceptionFilter SetWaitableTimer Sleep SuspendThread SwitchToThread TlsAlloc TlsGetValue VirtualAlloc VirtualFree VirtualProtect VirtualQuery WaitForMultipleObjects WaitForSingleObject WerGetFlags WerSetFlags WideCharToMultiByte WriteConsoleW WriteFile __C_specific_handler

msvcrt

___lc_codepage_func ___mb_cur_max_func __getmainargs __initenv __iob_func __set_app_type __setusermatherr _amsg_exit _cexit _commode _errno _fmode _initterm _lock _unlock abort atexit calloc exit fflush fprintf fputc free fwrite localeconv malloc memcpy setvbuf signal strerror strlen strncmp vfprintf wcslen

Name

.text

Size

614KB

Virtual Size

614KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

4.5MB

Virtual Size

4.5MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

812KB

Virtual Size

811KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.pdata

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.xdata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

298KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

64B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

3KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

512B

Virtual Size

16B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

14KB

Virtual Size

13KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

441041364.dll.exe

kernel32

msvcrt

generic