webio[.]dll | Triage™

General

Target
webio.dll
Size 1.1MB
Sample260802-e1kk6avbqf
SHA256 817e90dacad86d7b7c465bf735e102d6629e2f31d84068c541e06758612680b9
MD5 6217daf10978f31901a4a61e1d2dff6b
SHA1 56881869970878f0edbde68da6a76a819789d5fd
SHA512 6355580c5070419b956f9c8dc6c1d00372b2a3185b15b9e83556a5be5a7c2dff1776f3d4562adae4e6e6db8bc75e91bc5ebcd4c437107dcf1d50ac271f807a67
SSDEEP 24576:DrR9nLeYQ8o/cvh5URoUeQaCu1g9eZYUt:DrjCYQ8IcTgoUeQaV1ggYI
TLSH
T115359D0661E645F9D2BF9074C91BA60BE63534480730BAFB67E046992FA3BE0537F352
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
webio.dll

File Explorer

webio.dll

.dll 1.1MB

webio.dll

IMPHASH 89f40b25a95d3482c7a89b02ce217871
SHA256 817e90dacad86d7b7c465bf735e102d6629e2f31d84068c541e06758612680b9
MD5 6217daf10978f31901a4a61e1d2dff6b
SHA1 56881869970878f0edbde68da6a76a819789d5fd
SHA512 6355580c5070419b956f9c8dc6c1d00372b2a3185b15b9e83556a5be5a7c2dff1776f3d4562adae4e6e6db8bc75e91bc5ebcd4c437107dcf1d50ac271f807a67
SSDEEP 24576:DrR9nLeYQ8o/cvh5URoUeQaCu1g9eZYUt:DrjCYQ8IcTgoUeQaV1ggYI
TLSH
T115359D0661E645F9D2BF9074C91BA60BE63534480730BAFB67E046992FA3BE0537F352
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

736544

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\PC\Desktop\broken - jup\x64\dll\dummy.pdb

kernel32

VirtualAlloc GetSystemInfo VirtualQuery HeapCreate VirtualProtect HeapFree GetCurrentProcess Thread32Next Thread32First GetCurrentThreadId SuspendThread ResumeThread CreateToolhelp32Snapshot Sleep HeapReAlloc CloseHandle VirtualFree GetThreadContext GetProcAddress GetCurrentProcessId GetModuleHandleW FlushInstructionCache SetThreadContext OpenThread WaitForMultipleObjects GetModuleHandleA GetComputerNameA SetEndOfFile WriteConsoleW HeapSize SetStdHandle GetProcessHeap GlobalFree HeapAlloc GlobalAlloc FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW QueryPerformanceCounter QueryPerformanceFrequency ReleaseSRWLockExclusive AcquireSRWLockExclusive SleepConditionVariableSRW LocalFree FormatMessageA GetLocaleInfoEx CreateDirectoryW CreateFileW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW AreFileApisANSI GetLastError GetFileInformationByHandleEx MultiByteToWideChar WideCharToMultiByte InitializeCriticalSectionEx GetSystemTimeAsFileTime EnterCriticalSection LeaveCriticalSection DeleteCriticalSection EncodePointer DecodePointer LCMapStringEx GetStringTypeW GetCPInfo WakeAllConditionVariable RtlCaptureContext RtlLookupFunctionEntry RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter SetUnhandledExceptionFilter GetStartupInfoW IsProcessorFeaturePresent InitializeSListHead TerminateProcess RtlPcToFileHeader RaiseException RtlUnwindEx InterlockedFlushSList SetLastError InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary LoadLibraryExW ReadFile ExitProcess GetModuleHandleExW GetModuleFileNameW GetStdHandle GetFileType SetFilePointerEx GetConsoleMode ReadConsoleW FlsAlloc FlsGetValue FlsSetValue FlsFree LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW FlushFileBuffers WriteFile GetConsoleOutputCP GetFileSizeEx IsValidCodePage GetACP GetOEMCP GetCommandLineA RtlUnwind

Sharing