8[.]51[.]dll | Triage™

General

Target
8.51.dll
Size 35KB
Sample260808-agb3fswbkc
SHA256 c4e8e4bef30a221a790300810d46fc01481bcd91ad8254c2121da93a51fdcf02
MD5 5de6364b3c5fa008f6c130ff7f4bcf3b
SHA1 3d6f014ff8366066ccb6687d02f75fd635cca6bd
SHA512 26422d9438e8e7d5d25a9f62f065444045ef8ceb6d421438e643f186ffb83ffcff7a904e8148b0cb9d5b9e6ee2235b344eaf9863d82d78d368d6f1a727c0fb04
SSDEEP 384:3W8D+H52y5b+MpD+RO/3hz9cXnvT6hdlwPZ/k/BW+KqRQfB5M2zfH4Vg4CZw:3r65aO+RUVyuPGPZ/CQ+Kq4BTjHR4CZ
TLSH
T1D0F2F60BE7B390E7D878E174D1222635F5A6780D83B8A3EF5784436A2FA27D4A43D345
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
8.51.dll

File Explorer

8.51.dll

.dll 35KB

8.51.dll

IMPHASH cd4f9b52f07691727fecaa1301475669
SHA256 c4e8e4bef30a221a790300810d46fc01481bcd91ad8254c2121da93a51fdcf02
MD5 5de6364b3c5fa008f6c130ff7f4bcf3b
SHA1 3d6f014ff8366066ccb6687d02f75fd635cca6bd
SHA512 26422d9438e8e7d5d25a9f62f065444045ef8ceb6d421438e643f186ffb83ffcff7a904e8148b0cb9d5b9e6ee2235b344eaf9863d82d78d368d6f1a727c0fb04
SSDEEP 384:3W8D+H52y5b+MpD+RO/3hz9cXnvT6hdlwPZ/k/BW+KqRQfB5M2zfH4Vg4CZw:3r65aO+RUVyuPGPZ/CQ+Kq4BTjHR4CZ
TLSH
T1D0F2F60BE7B390E7D878E174D1222635F5A6780D83B8A3EF5784436A2FA27D4A43D345
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

21832

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\Downlouds\LargePakPatch-main\x64\Release\LargePakPatch.pdb

kernel32

CreateThread CloseHandle GetLastError HeapCreate HeapDestroy HeapAlloc HeapReAlloc HeapFree Sleep GetCurrentProcess GetCurrentProcessId GetCurrentThreadId OpenThread SuspendThread ResumeThread GetThreadContext SetThreadContext FlushInstructionCache VirtualProtect GetModuleHandleW GetProcAddress CreateToolhelp32Snapshot Thread32First Thread32Next GetSystemInfo VirtualAlloc VirtualFree VirtualQuery GetProcessHeap InitializeSListHead GetSystemTimeAsFileTime QueryPerformanceCounter IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext WideCharToMultiByte MultiByteToWideChar RaiseException IsDebuggerPresent FreeLibrary

user32

MessageBoxA

vcruntime140

__vcrt_GetModuleFileNameW __std_type_info_destroy_list __C_specific_handler_noexcept __vcrt_LoadLibraryExW memcpy memset __C_specific_handler

api-ms-win-crt-runtime-l1-1-0

exit _initterm _cexit _initterm_e _execute_onexit_table _initialize_onexit_table _initialize_narrow_environment _configure_narrow_argv _seh_filter_dll

api-ms-win-crt-string-l1-1-0

strcpy_s strcat_s

Sharing