7[.]24[.]dll | Triage™

General

Target
7.24.dll
Size 3.6MB
Sample260801-sa76escc25
SHA256 4d6b9a762f56774197e83539ac36761eeb9e1bc21c12f60f046034bd6a3925ea
MD5 4eeffbcc914c35cd0f40c9cd565852cd
SHA1 b4e5025a7dc93b8208bebd0b248447152a4ae185
SHA512 604d48ea4299d98a2eb2535b438dccdf0999dcd1ed9d8d9ba989e82d4581ba3baf8a16fd666cb35dd1453f777a5d112042b77e44691506c5533ca8b0c5c1f4b6
SSDEEP 98304:B+FXiCBTOFtelel1tvuvOebP8OAxXCXWXOSFAnJnh8KP2lL:W8FtEOebPRAxXiWXOSQndPu
TLSH
T10B062373326680A2D3FA8C354933BEF172FA03268F42AC7A5A9D9DD514115F5BA13E13
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
7.24.dll

File Explorer

7.24.dll

.dll 3.6MB

7.24.dll

IMPHASH cdf6f8a38402458eaa6c129f313defe7
SHA256 4d6b9a762f56774197e83539ac36761eeb9e1bc21c12f60f046034bd6a3925ea
MD5 4eeffbcc914c35cd0f40c9cd565852cd
SHA1 b4e5025a7dc93b8208bebd0b248447152a4ae185
SHA512 604d48ea4299d98a2eb2535b438dccdf0999dcd1ed9d8d9ba989e82d4581ba3baf8a16fd666cb35dd1453f777a5d112042b77e44691506c5533ca8b0c5c1f4b6
SSDEEP 98304:B+FXiCBTOFtelel1tvuvOebP8OAxXCXWXOSFAnJnh8KP2lL:W8FtEOebPRAxXiWXOSQndPu
TLSH
T10B062373326680A2D3FA8C354933BEF172FA03268F42AC7A5A9D9DD514115F5BA13E13
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

14905

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

ntdll

RtlUnwind RtlFreeUnicodeString RtlInitAnsiString RtlInitUnicodeString RtlAnsiStringToUnicodeString

kernel32

GetTempPathA GetLocalTime SystemTimeToFileTime GetCurrentProcess WriteFile DeviceIoControl GetLastError DeleteFileA GetModuleHandleW HeapReAlloc HeapSize SetFilePointerEx CloseHandle GetProcAddress GetModuleHandleA CreateFileW WriteConsoleW CreateFileA GetSystemTimeAsFileTime GetFileSizeEx GetStringTypeW SetStdHandle EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionAndSpinCount DeleteCriticalSection SetEvent ResetEvent WaitForSingleObjectEx CreateEventW UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId DecodePointer InitializeSListHead RaiseException InterlockedFlushSList SetLastError EncodePointer TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW HeapAlloc HeapFree LCMapStringW GetStdHandle GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap FlushFileBuffers GetConsoleOutputCP GetConsoleMode

user32

GetCursorPos

advapi32

RegCreateKeyA CreateServiceA AdjustTokenPrivileges RegDeleteKeyA CloseServiceHandle LookupPrivilegeValueA OpenSCManagerA DeleteService ControlService StartServiceA RegSetValueExA OpenProcessToken OpenServiceA

Sharing