OG INTERNAL (6)[.]dll

General

Target
OG INTERNAL (6).dll
Size 793KB
Sample260804-t2cz2adf72
SHA256 8a3f519dbb3289cb13f37218f7b33ee7689a62b0c2b2f151aa326bd9eae119a8
MD5 6f661a731b9ae2c40f8ba9edd9be0fff
SHA1 9113f7a4891b3a30b368d4492f00b019e28f7a7c
SHA512 9ec74d74d2d1729283c355330fe6750ca893b5a60b36ff5d664cafa4aa86268d78ab3d8fc9375877643ac703be99447b1087bbfdb8062e5fbb93160ce3dda784
SSDEEP 12288:Z+IpAviJrBfV2qMRYudnwUrO2mVgis1Ht8Z0eG2+XL7n08MuiiosdJ+s0Mjf:Z+4AviV8HQVlslmCdJ+s0Mj
TLSH
T113058E19BAE901A8E172E5748E675507EA72F80A0734A6DB03E09DAD1F2B7D0573FF01
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
OG INTERNAL (6).dll

File Explorer

OG INTERNAL (6).dll

.dll 793KB

OG INTERNAL (6).dll

IMPHASH b3ae6b844b7ee9a581aa2a3f1e45d707
SHA256 8a3f519dbb3289cb13f37218f7b33ee7689a62b0c2b2f151aa326bd9eae119a8
MD5 6f661a731b9ae2c40f8ba9edd9be0fff
SHA1 9113f7a4891b3a30b368d4492f00b019e28f7a7c
SHA512 9ec74d74d2d1729283c355330fe6750ca893b5a60b36ff5d664cafa4aa86268d78ab3d8fc9375877643ac703be99447b1087bbfdb8062e5fbb93160ce3dda784
SSDEEP 12288:Z+IpAviJrBfV2qMRYudnwUrO2mVgis1Ht8Z0eG2+XL7n08MuiiosdJ+s0Mjf:Z+4AviV8HQVlslmCdJ+s0Mj
TLSH
T113058E19BAE901A8E172E5748E675507EA72F80A0734A6DB03E09DAD1F2B7D0573FF01
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

408128

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\Admin\Desktop\OG_INTERNAL_NO_AUTH\Release\OG INTERNAL.pdb

kernel32

DisableThreadLibraryCalls VirtualQuery CreateFileA GetFileAttributesA WriteFile CloseHandle Sleep GetTickCount GetTickCount64 GlobalUnlock GlobalLock WideCharToMultiByte VirtualAlloc WriteConsoleW HeapSize CreateFileW SetStdHandle GetProcessHeap SetEnvironmentVariableW FreeEnvironmentStringsW GetEnvironmentStringsW GetCommandLineW GetCommandLineA HeapReAlloc GetOEMCP SetEndOfFile CreateThread GetACP IsValidCodePage ReadConsoleW SetFilePointerEx GetFileSizeEx ReadFile LocalFree FormatMessageA GetLocaleInfoEx GetLastError GetCurrentThreadId MultiByteToWideChar GetStringTypeW CreateDirectoryW FindClose FindFirstFileW FindFirstFileExW FindNextFileW GetFileAttributesExW CreateFile2 AreFileApisANSI GetModuleHandleW GetProcAddress GetFileInformationByHandleEx EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW EncodePointer DecodePointer LCMapStringEx GetCPInfo SetUnhandledExceptionFilter GetStartupInfoW GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead RtlPcToFileHeader RaiseException RtlLookupFunctionEntry RtlUnwindEx InterlockedFlushSList SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree ExitThread FreeLibrary FreeLibraryAndExitThread GetModuleHandleExW IsProcessorFeaturePresent GetCurrentProcess ExitProcess TerminateProcess GetModuleFileNameW RtlCaptureContext RtlVirtualUnwind IsDebuggerPresent UnhandledExceptionFilter HeapAlloc HeapFree WaitForSingleObject GetExitCodeProcess CreateProcessW VirtualProtect LoadLibraryExW CompareStringW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetStdHandle GetFileType FlushFileBuffers GetConsoleOutputCP GetConsoleMode RtlUnwind

user32

OpenClipboard CloseClipboard GetClipboardData GetAsyncKeyState GetKeyboardState GetKeyNameTextA MessageBoxA GetCursorPos GetSystemMetrics MapVirtualKeyW ToUnicode

winmm

PlaySoundW

wininet

InternetOpenUrlA InternetOpenA InternetCloseHandle InternetReadFile

Name

.text

Size

597KB

Virtual Size

597KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

159KB

Virtual Size

158KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

9KB

Virtual Size

65KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

23KB

Virtual Size

22KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

512B

Virtual Size

248B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

3KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

OG INTERNAL (6).dll

kernel32

user32

winmm

wininet

generic