Overview

overview

7

Static

static

5

830bb3c4d0...83.dll

windows10-2004-x64

7

830bb3c4d0...83.dll

windows11-ltsc_2024-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    830bb3c4d06bb69575c84dc50258059ad609d6e7a820079bd2179179b6037583.dll
  • Size 5.1MB
  • Sample260706-e8kk5ahy5v
  • SHA256 830bb3c4d06bb69575c84dc50258059ad609d6e7a820079bd2179179b6037583
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
5/10

Malware Config

Signatures

  • Codesign digest Mismatch 1 IoCs

    File was altered after it was signed.

File Explorer

  • 830bb3c4d06bb69575c84dc50258059ad609d6e7a820079bd2179179b6037583.dll
    .dll 5.1MB

830bb3c4d06bb69575c84dc50258059ad609d6e7a820079bd2179179b6037583.dll

  • IMPHASH 43198719bc4531747a27649122197131
  • SHA256 830bb3c4d06bb69575c84dc50258059ad609d6e7a820079bd2179179b6037583
  • MD5 SHA1 SHA512 SSDEEP TLSH
regsvr32windows:5windowsx64arch:x64

  • Codesign digest Mismatch

    File was altered after it was signed.

PE Signature issue

Digest
c9:6a:b2:94:27:ec:34:33:90:5b:33:cd:01:f2:e9:4d:80:5a:49:84:3f:ca:19:a0:ba:f2:16:2e:8b:45:e3:ff
Digest Algorithm
sha256
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e

PE Signature issue

Digest
cb:8c:f7:98:95:ee:9d:e1:fc:95:94:71:c4:22:4a:51:63:d1:d0:fa
Digest Algorithm
sha1
PE Digests Matches
Not matched
Trusted
Signing Certificate
SERIALNUMBER=913101150729060470,CN=Shanghai 2345 Mobile Technology Co.\, Ltd.,O=Shanghai 2345 Mobile Technology Co.\, Ltd.,ST=上海市,C=CN,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.1=#0c0ce6b5a6e4b89ce696b0e58cba,1.3.6.1.4.1.311.60.2.1.2=#0c09e4b88ae6b5b7e5b882,1.3.6.1.4.1.311.60.2.1.3=#1302434e
Minor OS version
2
Major OS version
5
Entry point
2768956
Magic Number
523
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_NX_COMPAT
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL
PDB paths
D:\zhanlue\2345pinyin\bin\x64\Release\pdb\2345Pinyin.pdb