TUP-Free[.]dll | Triage™

General

Target
TUP-Free.dll
Size 9.7MB
Sample260729-de6qtsshqc
SHA256 fe8ea488799c269361557cbdcc14db83f6e6b309c7e13fd5d8a7cd2a34e24c2a
MD5 8c9ae4dbd5ec3ea74c812fdc65192eed
SHA1 4c005bac70c48d4b1404e097e3df8113cc124cbf
SHA512 99632f3d172918ea4d32595d509fad9cde1e014967c6259f134be50d222284b64cd9b2f3ffaf94ae47d362ae8d7f0ad82883fbe1489ebe8b770a1f30cf8c4a8c
SSDEEP 196608:Ul0kjj2ebboLH+qxhZOI37hqTYTNKu/aXz14ZIK6LxBwpiB2:U0kWebo+qPhhfc14+zPwpi
TLSH
T1A4A64BF0EC18FD2669261171C27782E3BDE411F5B83162B2BA2764F8A4C1297BD5D83D
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
TUP-Free.dll

File Explorer

TUP-Free.dll

.dll 9.7MB

TUP-Free.dll

IMPHASH dae02f32a21e03ce65412f6e56942daa
SHA256 fe8ea488799c269361557cbdcc14db83f6e6b309c7e13fd5d8a7cd2a34e24c2a
MD5 8c9ae4dbd5ec3ea74c812fdc65192eed
SHA1 4c005bac70c48d4b1404e097e3df8113cc124cbf
SHA512 99632f3d172918ea4d32595d509fad9cde1e014967c6259f134be50d222284b64cd9b2f3ffaf94ae47d362ae8d7f0ad82883fbe1489ebe8b770a1f30cf8c4a8c
SSDEEP 196608:Ul0kjj2ebboLH+qxhZOI37hqTYTNKu/aXz14ZIK6LxBwpiB2:U0kWebo+qPhhfc14+zPwpi
TLSH
T1A4A64BF0EC18FD2669261171C27782E3BDE411F5B83162B2BA2764F8A4C1297BD5D83D
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

4

Entry point

10205630

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_NO_SEH IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

TUP-Free.dll

mscoree

dotnet

Sharing

General

Malware Config

Signatures

File Explorer

TUP-Free.dll

mscoree

dotnet