Lossless[.]dll | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Lossless.dll
Size 7.2MB
Sample260827-e382jazamg
SHA256 626b196d799606cd4250b7b29e04228692ab70cf56a5d1bbb56d748c8219f0eb
MD5 db2e5fd8e487a36805c2aa637899a9fe
SHA1 df6f606610baa983606679f4a61fb6c667055bbd
SHA512 5c7245f5e7d8e2ad9c0a191e986986a6dad7565f995b3338f68cb03025c53becd8e4b97d6763ab2486e1f6e88705036ed492ce7b7a7f273363a4d6febdcb6fc0
SSDEEP 49152:86xQF0Gbs8jsGBM4l7R5vZjUWwS3ze2St3:vQFFbs8jsGBVdR5vZjUVS3zst3
TLSH
T18B7621CB5A51F933C01946BBA4EF61B0F36CB4384AB7868A3E5C116C7EC334E1957986
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Lossless.dll

File Explorer

Lossless.dll

.dll 7.2MB

Lossless.dll

IMPHASH 70c07904e765c9aeb605e47e9caf5066
SHA256 626b196d799606cd4250b7b29e04228692ab70cf56a5d1bbb56d748c8219f0eb
MD5 db2e5fd8e487a36805c2aa637899a9fe
SHA1 df6f606610baa983606679f4a61fb6c667055bbd
SHA512 5c7245f5e7d8e2ad9c0a191e986986a6dad7565f995b3338f68cb03025c53becd8e4b97d6763ab2486e1f6e88705036ed492ce7b7a7f273363a4d6febdcb6fc0
SSDEEP 49152:86xQF0Gbs8jsGBM4l7R5vZjUWwS3ze2St3:vQFFbs8jsGBVdR5vZjUVS3zst3
TLSH
T18B7621CB5A51F933C01946BBA4EF61B0F36CB4384AB7868A3E5C116C7EC334E1957986
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

220452

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

dxgi

CreateDXGIFactory1

dwmapi

DwmGetCompositionTimingInfo DwmGetWindowAttribute DwmSetWindowAttribute

d2d1

ord2 ord1

vcruntime140_1

__CxxFrameHandler4

vcruntime140

_purecall __std_terminate __C_specific_handler memcmp memcpy memset _CxxThrowException wcsrchr __std_type_info_destroy_list wcsstr __std_exception_copy __std_exception_destroy memmove

kernel32

ResetEvent EnterCriticalSection LeaveCriticalSection InitializeCriticalSection SetThreadPriority SetWaitableTimerEx CreateWaitableTimerExW QueryPerformanceCounter VirtualFree VirtualAlloc GetSystemInfo VirtualQuery HeapCreate VirtualProtect HeapFree GetCurrentProcess Thread32Next Thread32First GetCurrentThreadId SuspendThread ResumeThread CreateToolhelp32Snapshot Sleep HeapReAlloc HeapAlloc CloseHandle GetThreadContext GetProcAddress GetCurrentProcessId GetModuleHandleW FlushInstructionCache SetThreadContext OpenThread GetModuleFileNameW SizeofResource FreeResource GetLastError LockResource LoadLibraryW LoadResource FindResourceW VerSetConditionMask FreeLibrary VerifyVersionInfoW LocalAlloc GetSystemDirectoryW GetFileAttributesW SetLastError LocalFree LoadLibraryExW GetModuleFileNameA GetFullPathNameW QueryPerformanceFrequency RaiseException LoadLibraryExA SetEvent CreateEventW WaitForSingleObject FormatMessageW InterlockedPushEntrySList GetProcessHeap MultiByteToWideChar InitializeSListHead GetSystemTimeAsFileTime IsDebuggerPresent CreateThread IsProcessorFeaturePresent TerminateProcess SetUnhandledExceptionFilter UnhandledExceptionFilter RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext HeapDestroy

user32

DefWindowProcW GetWindowRect DestroyWindow SetWindowPos EqualRect CreateWindowExW GetSystemMetrics RegisterClassExW GetWindowPlacement ShowWindow GetClipCursor GetForegroundWindow LoadCursorW ClipCursor GetClassNameW SetWindowLongW SystemParametersInfoW SetWinEventHook SetSystemCursor PtInRect UnhookWinEvent SetForegroundWindow LoadImageW GetCursorPos EnableWindow GetWindowTextW GetDpiForWindow ScreenToClient DispatchMessageW GetCursorInfo PeekMessageW TranslateMessage GetWindowThreadProcessId MonitorFromWindow GetWindowInfo GetMonitorInfoW SetWindowDisplayAffinity SetLayeredWindowAttributes GetIconInfo GetWindowLongW

gdi32

GetDIBits DeleteDC CreateCompatibleDC GetObjectW GetStockObject DeleteObject

advapi32

LookupPrivilegeValueW RegCreateKeyExW RegCloseKey AdjustTokenPrivileges RegSetValueExW OpenProcessToken

oleaut32

SysStringLen GetErrorInfo SetErrorInfo SysFreeString SysAllocStringLen

dwrite

DWriteCreateFactory

msvcp140

??0?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA@PEAV?$basic_streambuf@DU?$char_traits@D@std@@@1@_N@Z ??0?$basic_ios@DU?$char_traits@D@std@@@std@@IEAA@XZ ?setstate@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?clear@?$basic_ios@DU?$char_traits@D@std@@@std@@QEAAXH_N@Z ?_Getcat@?$codecvt@DDU_Mbstatet@@@std@@SA_KPEAPEBVfacet@locale@2@PEBV42@@Z ?unshift@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEAD1AEAPEAD@Z ?_Init@?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAAXXZ ??0?$basic_streambuf@DU?$char_traits@D@std@@@std@@IEAA@XZ ?getloc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@QEBA?AVlocale@2@XZ ?_Fiopen@std@@YAPEAU_iobuf@@PEBDHH@Z ?id@?$codecvt@DDU_Mbstatet@@@std@@2V0locale@2@A ?_Id_cnt@id@locale@std@@0HA ?_Xbad_alloc@std@@YAXXZ ?_Getgloballocale@locale@std@@CAPEAV_Locimp@12@XZ ?in@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z ??1_Lockit@std@@QEAA@XZ ??1?$basic_istream@DU?$char_traits@D@std@@@std@@UEAA@XZ ?get@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAHXZ ?read@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@PEAD_J@Z ?seekg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAAAEAV12@_JH@Z ?tellg@?$basic_istream@DU?$char_traits@D@std@@@std@@QEAA?AV?$fpos@U_Mbstatet@@@2@XZ ??1?$basic_ios@DU?$char_traits@D@std@@@std@@UEAA@XZ ??1?$basic_streambuf@DU?$char_traits@D@std@@@std@@UEAA@XZ ?showmanyc@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JXZ ?xsgetn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEAD_J@Z ?xsputn@?$basic_streambuf@DU?$char_traits@D@std@@@std@@MEAA_JPEBD_J@Z ??0_Lockit@std@@QEAA@H@Z ?always_noconv@codecvt_base@std@@QEBA_NXZ ?_Throw_Cpp_error@std@@YAXH@Z ?_Xinvalid_argument@std@@YAXPEBD@Z ?_Xout_of_range@std@@YAXPEBD@Z _Mtx_unlock ?_Xlength_error@std@@YAXPEBD@Z ?out@?$codecvt@DDU_Mbstatet@@@std@@QEBAHAEAU_Mbstatet@@PEBD1AEAPEBDPEAD3AEAPEAD@Z _Mtx_lock

api-ms-win-crt-convert-l1-1-0

strtoul strtol strtof

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _initialize_onexit_table _register_onexit_function _execute_onexit_table _crt_atexit _cexit _initterm _initterm_e _seh_filter_dll _invoke_watson abort _errno _configure_narrow_argv _invalid_parameter_noinfo

api-ms-win-crt-string-l1-1-0

isalpha _wcsnicmp _wcsicmp strncmp isdigit tolower iswspace

api-ms-win-crt-stdio-l1-1-0

__stdio_common_vfwprintf fclose _wfopen_s fputc _get_stream_buffer_pointers _fseeki64 fread fsetpos ungetc setvbuf fgetpos __stdio_common_vswprintf fwrite __stdio_common_vswprintf_s fgetc fflush

api-ms-win-crt-math-l1-1-0

floorf ceilf ceil exp2f round roundf pow

api-ms-win-crt-heap-l1-1-0

_aligned_malloc _callnewh malloc _aligned_free free

api-ms-win-crt-filesystem-l1-1-0

_lock_file _unlock_file

ole32

CoUninitialize CoCreateFreeThreadedMarshaler CoInitializeEx

api-ms-win-core-winrt-error-l1-1-1

RoOriginateLanguageException

api-ms-win-core-winrt-l1-1-0

RoGetActivationFactory