1a92217df557e5e678f2833faf433d959e757ab6421e41605519a0dbcaefa28f[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
1a92217df557e5e678f2833faf433d959e757ab6421e41605519a0dbcaefa28f.dll
Size 8.7MB
Sample260702-e2j11sh19m
SHA256 1a92217df557e5e678f2833faf433d959e757ab6421e41605519a0dbcaefa28f
MD5 282035e960dfd27d4d35f135168e12b8
SHA1 c2a107cae575772755515c7b6e99e9556dc15639
SHA512 885178f38b4006c9d128ff1fb7b3878be734a7e63187cfae8149746d5c5308dece6732557445b147b1af088a90c2519d902cd59e9e0a742943f9f093114c7a00
SSDEEP 196608:fQ5fqSWAlMuE8MSSBlramKp0JweTrQ4Y2WcVs8sttifD7RE6+QDW+LL:IEuE8MSal0p0JwoQ4YncV7sttifD7RJp
TLSH
T12196F19B36DE6219D132DBB4557B9C0B1A4442974B32B1DF5F430860AEA2FDC4BBF4A0
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
1a92217df557e5e678f2833faf433d959e757ab6421e41605519a0dbcaefa28f.dll

File Explorer

1a92217df557e5e678f2833faf433d959e757ab6421e41605519a0dbcaefa28f.dll

.dll 8.7MB

1a92217df557e5e678f2833faf433d959e757ab6421e41605519a0dbcaefa28f.dll

IMPHASH 5c0f42f9e718b9bda003303aa0e756df
SHA256 1a92217df557e5e678f2833faf433d959e757ab6421e41605519a0dbcaefa28f
MD5 282035e960dfd27d4d35f135168e12b8
SHA1 c2a107cae575772755515c7b6e99e9556dc15639
SHA512 885178f38b4006c9d128ff1fb7b3878be734a7e63187cfae8149746d5c5308dece6732557445b147b1af088a90c2519d902cd59e9e0a742943f9f093114c7a00
SSDEEP 196608:fQ5fqSWAlMuE8MSSBlramKp0JweTrQ4Y2WcVs8sttifD7RE6+QDW+LL:IEuE8MSal0p0JwoQ4YncV7sttifD7RJp
TLSH
T12196F19B36DE6219D132DBB4557B9C0B1A4442974B32B1DF5F430860AEA2FDC4BBF4A0
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

8925648

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

Name

.text

Size

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

6KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

640B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

660B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

248B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.mtcn9

Size

Virtual Size

4KB

Characteristics

IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.h2wu3

Size

Virtual Size

500KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.d5o1n

Size

8.7MB

Virtual Size

8.7MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.reloc

Size

18KB

Virtual Size

20KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

1a92217df557e5e678f2833faf433d959e757ab6421e41605519a0dbcaefa28f.dll

kernel32

user32

advapi32

msvcp140

wininet

vcruntime140_1

vcruntime140

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic