_c480d1d8b50d9c94655b26755431d2d5a3c7d741a30047a21d1e13723109718f[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
_c480d1d8b50d9c94655b26755431d2d5a3c7d741a30047a21d1e13723109718f.dll
Size 13.4MB
Sample260701-lrgapsay7m
SHA256 c480d1d8b50d9c94655b26755431d2d5a3c7d741a30047a21d1e13723109718f
MD5 3f1fa41a280d2e628aa2f4c7d5502518
SHA1 f320455de57557db3331e2e4abf26654a74065cf
SHA512 fac6651fd77c6e986ce0ea1df06d1e84b57485e420122c72547ed3aaf56f50fcddadf2f2e598f88844c772447db22d9d5015157bdd38c88c51f37a4d1bd6b1f1
SSDEEP 196608:mq11fj6QX4e6tmX5qVzpXr/HTx9Eb6q4naN3Gu4IoZrinBnYiQAPp:r1b8tmsXbHO7Gu4IoZeQAPp
TLSH
T173E6D07E27CB1DC3C33CF4BD9B49FBB4B85F60A14225D45A549D01F8082AC6A9DA5A0F
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
_c480d1d8b50d9c94655b26755431d2d5a3c7d741a30047a21d1e13723109718f.dll

File Explorer

_c480d1d8b50d9c94655b26755431d2d5a3c7d741a30047a21d1e13723109718f.dll

.dll 13.4MB

_c480d1d8b50d9c94655b26755431d2d5a3c7d741a30047a21d1e13723109718f.dll

IMPHASH 6c871eb5afcc648e749d578ab8277277
SHA256 c480d1d8b50d9c94655b26755431d2d5a3c7d741a30047a21d1e13723109718f
MD5 3f1fa41a280d2e628aa2f4c7d5502518
SHA1 f320455de57557db3331e2e4abf26654a74065cf
SHA512 fac6651fd77c6e986ce0ea1df06d1e84b57485e420122c72547ed3aaf56f50fcddadf2f2e598f88844c772447db22d9d5015157bdd38c88c51f37a4d1bd6b1f1
SSDEEP 196608:mq11fj6QX4e6tmX5qVzpXr/HTx9Eb6q4naN3Gu4IoZrinBnYiQAPp:r1b8tmsXbHO7Gu4IoZeQAPp
TLSH
T173E6D07E27CB1DC3C33CF4BD9B49FBB4B85F60A14225D45A549D01F8082AC6A9DA5A0F
MD5 SHA1 SHA512 SSDEEP TLSH

windows:5 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

12331755

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED IMAGE_FILE_DLL

PDB paths

Name

.text

Size

245KB

Virtual Size

244KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.data

Size

2.4MB

Virtual Size

2.4MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rdata

Size

4KB

Virtual Size

3KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.bss

Size

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_UNINITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.edata

Size

512B

Virtual Size

90B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.CRT

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.tls

Size

512B

Virtual Size

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

7.5MB

Virtual Size

7.5MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

Size

512B

Virtual Size

44B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

Size

1.9MB

Virtual Size

1.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

904KB

Virtual Size

903KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

_c480d1d8b50d9c94655b26755431d2d5a3c7d741a30047a21d1e13723109718f.dll

kernel32

msvcrt

generic