Client[.]dll | Triage™

Resubmissions

23/08/2026, 16:52

260823-vdd3vstsdw

23/08/2026, 16:49

260823-vbv9cstscv1

Sharing

Copy URL Twitter E-mail

General

Target
Client.dll
Size 392KB
Sample260823-vdd3vstsdw
SHA256 b09c50c26fb14d788accc2e548b28f077a141ca5e94d5f328dcd51d9c9757624
MD5 997000834456c0c55db378751ae14065
SHA1 b23a918fa14940660b9dd17e4c1fe485233d100e
SHA512 b0ac8e7877a34e975b94837c78caae8da16842e5f98f80456391d6cc7817a54dc4a13b48e0ea891b22295d0347124d032657a6ff6bf1357f8233cda92433ee07
SSDEEP 6144:8Tfi9kTSvTVCXTfSIrf/p7EkIwpwzWCRnVECabsvANkpkUjTrvNGKGYnHAZT/AU7:ifx71rpjbslrwFYnu44
TLSH
T1DB846B71E69C75AAD21A9478BC56AF0BE921748903107FC733E80D952FE2ED06B7D381
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

Client.dll

.dll 392KB

Client.dll

IMPHASH 3a519c5e50b7b0a8bcd2c73762cd756c
SHA256 b09c50c26fb14d788accc2e548b28f077a141ca5e94d5f328dcd51d9c9757624
MD5 997000834456c0c55db378751ae14065
SHA1 b23a918fa14940660b9dd17e4c1fe485233d100e
SHA512 b0ac8e7877a34e975b94837c78caae8da16842e5f98f80456391d6cc7817a54dc4a13b48e0ea891b22295d0347124d032657a6ff6bf1357f8233cda92433ee07
SSDEEP 6144:8Tfi9kTSvTVCXTfSIrf/p7EkIwpwzWCRnVECabsvANkpkUjTrvNGKGYnHAZT/AU7:ifx71rpjbslrwFYnu44
TLSH
T1DB846B71E69C75AAD21A9478BC56AF0BE921748903107FC733E80D952FE2ED06B7D381
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

bd:07:44:d9:eb:a3:28:5c:2b:17:22:77:7b:0f:e0:67:5d:7a:9f:28:38:0d:77:98:cd:e2:ef:fd:2b:fc:6d:da

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

CN=Lisa Gamble,O=Lisa Gamble,L=Watsonville,ST=California,C=US

Chains

Dec 11, 2025

CN=Lisa Gamble,O=Lisa Gamble,L=Watsonville,ST=California,C=US

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Subject

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Serial Number

7b:2c:9b:d3:16:80:32:99

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Feb 12, 2016 - Feb 12, 2041

Subject

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

64:33:51:d3:c7:38:9f:08

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Jun 24, 2016 - Jun 24, 2031

Subject

CN=Lisa Gamble,O=Lisa Gamble,L=Watsonville,ST=California,C=US

Serial Number

2f:d1:9f:3b:e5:95:11:99:4c:d5:39:5c:94:55:20:d6

Issuer

CN=SSL.com Code Signing Intermediate CA RSA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Nov 7, 2025 - Nov 6, 2026

Subject

CN=SSL.com Timestamping Unit 2024 E1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

5a:5a:ac:e8:1a:35:6e:b4:62:86:8d:57:7d:e0:3d:c7

Issuer

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Feb 19, 2024 - Feb 16, 2034

Subject

CN=SSL.com Timestamping Issuing RSA CA R1,O=SSL Corp,L=Houston,ST=Texas,C=US

Serial Number

6d:52:18:70:87:e8:23:4d:85:60:00:d0:80:8f:93:56

Issuer

CN=SSL.com Root Certification Authority RSA,O=SSL Corporation,L=Houston,ST=Texas,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Nov 13, 2019 - Nov 12, 2034

Minor OS version

Major OS version

Entry point

309184

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

QueryPerformanceCounter InitializeSListHead GetCurrentThreadId GetCurrentProcessId IsDebuggerPresent IsProcessorFeaturePresent TerminateProcess GlobalUnlock SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext SleepConditionVariableSRW WakeAllConditionVariable AcquireSRWLockExclusive ReleaseSRWLockExclusive GlobalLock GlobalFree QueryPerformanceFrequency GlobalAlloc WideCharToMultiByte GetCurrentProcess GetSystemTimeAsFileTime

user32

ScreenToClient GetCapture ClientToScreen IsChild GetForegroundWindow SetWindowLongPtrA CallWindowProcA SetClipboardData GetClipboardData EmptyClipboard CloseClipboard OpenClipboard GetCursorPos SetCursorPos ReleaseCapture GetClientRect LoadCursorA SetCursor SetCapture

msvcp140

_Query_perf_counter ?_Xlength_error@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z _Query_perf_frequency ?_Random_device@std@@YAIXZ

imm32

ImmGetContext ImmReleaseContext ImmSetCompositionWindow

d3dcompiler_47

D3DCompile

xinput1_4

ord4 ord2

vcruntime140_1

__CxxFrameHandler4

vcruntime140

__current_exception_context __current_exception memset memcpy _CxxThrowException __std_type_info_destroy_list memchr strstr strrchr __std_terminate __std_exception_copy __std_exception_destroy memmove __C_specific_handler memcmp

api-ms-win-crt-heap-l1-1-0

malloc free _callnewh

api-ms-win-crt-string-l1-1-0

tolower strcmp strncpy towlower

api-ms-win-crt-stdio-l1-1-0

fread __stdio_common_vfprintf __stdio_common_vsscanf freopen_s __stdio_common_vsprintf _wfopen fwrite ftell fflush fseek fclose __acrt_iob_func

api-ms-win-crt-runtime-l1-1-0

_crt_atexit _invoke_watson _seh_filter_dll _initterm_e _configure_narrow_argv _initterm _cexit terminate _execute_onexit_table _register_onexit_function _initialize_onexit_table _initialize_narrow_environment

api-ms-win-crt-convert-l1-1-0

atof strtoul

api-ms-win-crt-utility-l1-1-0

qsort

api-ms-win-crt-math-l1-1-0

sinf powf fmodf floorf cosf pow sqrtf ceilf

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

Client.dll

kernel32

user32

msvcp140

imm32

d3dcompiler_47

xinput1_4

vcruntime140_1

vcruntime140

api-ms-win-crt-heap-l1-1-0

api-ms-win-crt-string-l1-1-0

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-convert-l1-1-0

api-ms-win-crt-utility-l1-1-0

api-ms-win-crt-math-l1-1-0

generic