strafe[.]one[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
strafe.one.dll
Size 12.5MB
Sample260722-my61datclc
SHA256 d452c65606ebda3f8325ab98463da0dfaf20cf39fb68054370505bdaa4a23ce8
MD5 db34773c3338b604efaa01669a8839ed
SHA1 dfc3fc67d985c2e51928ead0e7d94be37e930b29
SHA512 1d9d0c56d1defed7b8bac82869d552a9b13ce42a4b94c14b622a2b65155e450422557003c639037c54a0055b9adda4cfc463e2cfc7e1b8ed3ccadc6370fd730f
SSDEEP 98304:qhAganML4zp8bdJGv3GPN+ZP+1Yq9DMbJcioxcKK2SewFiYCJc7vfmIelTwEkZ:PnGIp8bdJk3GPNGKAeJwr
TLSH
T103D69E29A27800D8D47A91BCCD82D657E771B8005BB093CF266456BADF37AE41EBF740
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
strafe.one.dll

File Explorer

strafe.one.dll

.dll 12.5MB

strafe.one.dll

IMPHASH 1c682afccc2cb804576d75046645f137
SHA256 d452c65606ebda3f8325ab98463da0dfaf20cf39fb68054370505bdaa4a23ce8
MD5 db34773c3338b604efaa01669a8839ed
SHA1 dfc3fc67d985c2e51928ead0e7d94be37e930b29
SHA512 1d9d0c56d1defed7b8bac82869d552a9b13ce42a4b94c14b622a2b65155e450422557003c639037c54a0055b9adda4cfc463e2cfc7e1b8ed3ccadc6370fd730f
SSDEEP 98304:qhAganML4zp8bdJGv3GPN+ZP+1Yq9DMbJcioxcKK2SewFiYCJc7vfmIelTwEkZ:PnGIp8bdJk3GPNGKAeJwr
TLSH
T103D69E29A27800D8D47A91BCCD82D657E771B8005BB093CF266456BADF37AE41EBF740
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

4101

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Clancy\Desktop\fucking_lib\Traceless-crack\x64\Release\Traceless-crack.pdb

kernel32

VirtualQuery GetModuleHandleA HeapAlloc HeapFree GetProcessHeap ReleaseSRWLockExclusive AcquireSRWLockExclusive TlsGetValue TlsSetValue TlsAlloc TlsFree GetLastError SetLastError FlsGetValue GetCurrentProcess FlushInstructionCache GetProcAddress AllocConsole SetConsoleTitleA VirtualAlloc VirtualFree LoadLibraryA GetSystemInfo CloseHandle HeapCreate HeapDestroy HeapReAlloc Sleep GetCurrentProcessId GetCurrentThreadId OpenThread SuspendThread ResumeThread GetThreadContext SetThreadContext VirtualProtect GetModuleHandleW CreateToolhelp32Snapshot Thread32First Thread32Next GetSystemTimeAsFileTime QueryPerformanceCounter GetStartupInfoW IsDebuggerPresent IsProcessorFeaturePresent InitializeSListHead TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140

__std_type_info_destroy_list __C_specific_handler memset memcmp __std_exception_destroy _CxxThrowException memcpy __current_exception __current_exception_context __std_exception_copy

vcruntime140_1

__CxxFrameHandler4

api-ms-win-crt-stdio-l1-1-0

__acrt_iob_func __stdio_common_vfprintf freopen

api-ms-win-crt-runtime-l1-1-0

_initterm _configure_narrow_argv _crt_at_quick_exit _crt_atexit _execute_onexit_table _initialize_narrow_environment _seh_filter_dll _register_onexit_function _initialize_onexit_table _initterm_e terminate _invalid_parameter_noinfo_noreturn _cexit

api-ms-win-crt-heap-l1-1-0

malloc free _callnewh

Name

.text

Size

88KB

Virtual Size

87KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

33KB

Virtual Size

32KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

12.3MB

Virtual Size

12.3MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.idata

Size

5KB

Virtual Size

5KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.tls

Size

1024B

Virtual Size

771B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.00cfg

Size

512B

Virtual Size

373B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1024B

Virtual Size

806B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

2KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

strafe.one.dll

kernel32

msvcp140

vcruntime140

vcruntime140_1

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

generic