clip64[.]dll | Triage™

General

Target
clip64.dll
Size 117KB
Sample260709-agyw8aax4k
SHA256 2b5fa9b9db15a70b3f902632459d1fec97dc834149dc2a0bd5e8e04c6c3f494b
MD5 4f2ab71e9c4270548b3d8e9e62bd7279
SHA1 06dfe02acdeae34dac7f09584d0d75c750fc38a6
SHA512 9241a4803469adc363aae0ae53b359daceb6286e90808505ee81ccfc9a5def7eac6855535765cb31e2f2dd8a2ecd3814631f0553502cc0fa7d132fcaf2de150b
SSDEEP 3072:jYOCGInnVo+TOVQET2bGWG6ZoRgK1vVy5RmVSb:jGVi/8GWPZIkaSb
TLSH
T193C35A213467C071E99D597E1CA8BBF0476D7910DFA14DE73B840A279E206D3AE38D3A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
clip64.dll

File Explorer

clip64.dll

.dll 117KB

clip64.dll

IMPHASH 41a061f19f2a7afce4f3586f40ee23ad
SHA256 2b5fa9b9db15a70b3f902632459d1fec97dc834149dc2a0bd5e8e04c6c3f494b
MD5 4f2ab71e9c4270548b3d8e9e62bd7279
SHA1 06dfe02acdeae34dac7f09584d0d75c750fc38a6
SHA512 9241a4803469adc363aae0ae53b359daceb6286e90808505ee81ccfc9a5def7eac6855535765cb31e2f2dd8a2ecd3814631f0553502cc0fa7d132fcaf2de150b
SSDEEP 3072:jYOCGInnVo+TOVQET2bGWG6ZoRgK1vVy5RmVSb:jGVi/8GWPZIkaSb
TLSH
T193C35A213467C071E99D597E1CA8BBF0476D7910DFA14DE73B840A279E206D3AE38D3A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

29808

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

Sleep GlobalAlloc GlobalUnlock GlobalLock WideCharToMultiByte WriteConsoleW CloseHandle CreateFileW SetFilePointerEx GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers SetStdHandle HeapReAlloc HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RaiseException InterlockedFlushSList GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetProcessHeap GetStdHandle GetFileType GetStringTypeW DecodePointer

user32

CloseClipboard SetClipboardData GetClipboardData EmptyClipboard OpenClipboard

wininet

InternetCloseHandle InternetConnectA InternetReadFile HttpOpenRequestA HttpSendRequestA InternetOpenW

Sharing