mini[.]dll | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
mini.dll
Size 727KB
Sample260908-sfdtrssgmc
SHA256 035e0d377260442b66157d95fcce40f1b5177c9f199710bd9365084a5a70e3b1
MD5 5ed800dd6bd2d2b4991074d60b335c26
SHA1 860adafbf25659589cd2e330aa67a3eceae71334
SHA512 a584d8c02f94ba74673ce12adb47e989aab2d792be78d133c57af2e796d8902f82f278489e294c6ce48222045e5147fbaf5f6334266ab241e4a669d2aa931502
SSDEEP 12288:TkXJlLy60kSo18gHMhYBtFDzvrI2EgLAzrQxiC6n9oGo08:oXJxskSS8IU2zvrI2RuyiVn9+08
TLSH
T1F5F49E85F7F401A8F07B9238D5A6A62BF672B8151B3096CF1394016D6F737E046B7B22
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
mini.dll

File Explorer

mini.dll

.dll 727KB

mini.dll

IMPHASH 97f43c0a7e8efa5a9e9985749516d16d
SHA256 035e0d377260442b66157d95fcce40f1b5177c9f199710bd9365084a5a70e3b1
MD5 5ed800dd6bd2d2b4991074d60b335c26
SHA1 860adafbf25659589cd2e330aa67a3eceae71334
SHA512 a584d8c02f94ba74673ce12adb47e989aab2d792be78d133c57af2e796d8902f82f278489e294c6ce48222045e5147fbaf5f6334266ab241e4a669d2aa931502
SSDEEP 12288:TkXJlLy60kSo18gHMhYBtFDzvrI2EgLAzrQxiC6n9oGo08:oXJxskSS8IU2zvrI2RuyiVn9+08
TLSH
T1F5F49E85F7F401A8F07B9238D5A6A62BF672B8151B3096CF1394016D6F737E046B7B22
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

357520

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

user32

CallWindowProcW UnregisterClassA RegisterClassExA CreateWindowExA DestroyWindow GetKeyNameTextA GetClientRect LoadCursorW ScreenToClient ClientToScreen GetCursorPos SetCursor SetCursorPos GetForegroundWindow IsWindowUnicode ReleaseCapture SetCapture GetCapture GetKeyState DefWindowProcW GetMessageExtraInfo TrackMouseEvent GetKeyboardLayout EmptyClipboard GetClipboardData SetClipboardData CloseClipboard OpenClipboard SetWindowLongPtrW DefWindowProcA

d3d11

D3D11CreateDeviceAndSwapChain

d3dcompiler_47

D3DCompile

kernel32

GetCommandLineA GetCPInfo GetOEMCP GetACP IsValidCodePage FindNextFileW FindFirstFileExW FindClose GetTimeZoneInformation GetFileSizeEx SetFilePointerEx ReadConsoleW GetConsoleMode GetConsoleOutputCP FlushFileBuffers OutputDebugStringW WriteFile LCMapStringW GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW CompareStringW GetProcessHeap SetStdHandle LoadLibraryExW Sleep CreateThread DisableThreadLibraryCalls GetModuleHandleA GetModuleHandleW GetProcAddress AllocConsole CreateFileW GetSystemInfo VirtualAlloc VirtualFree VirtualQuery CloseHandle GetLastError HeapCreate HeapDestroy HeapAlloc HeapReAlloc HeapFree GetCurrentProcess GetCurrentProcessId GetCurrentThreadId OpenThread SuspendThread ResumeThread GetThreadContext SetThreadContext FlushInstructionCache VirtualProtect CreateToolhelp32Snapshot Thread32First Thread32Next OutputDebugStringA GlobalAlloc GlobalUnlock GlobalLock GlobalFree MultiByteToWideChar WideCharToMultiByte QueryPerformanceCounter QueryPerformanceFrequency LoadLibraryA GetLocaleInfoA IsDBCSLeadByte ReleaseSRWLockExclusive AcquireSRWLockExclusive WakeAllConditionVariable SleepConditionVariableSRW GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind GetStringTypeW HeapSize SetEndOfFile SetConsoleTitleA FreeLibrary RtlLookupFunctionEntry RtlUnwindEx InterlockedFlushSList SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree EncodePointer RaiseException EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection RtlPcToFileHeader GetStdHandle GetFileType GetModuleFileNameW GetModuleHandleExW WriteConsoleW ReadFile ExitProcess TerminateProcess IsProcessorFeaturePresent RtlCaptureContext

shell32

ShellExecuteW

imm32

ImmGetContext ImmReleaseContext ImmSetCompositionWindow ImmSetCandidateWindow

Name

.text

Size

512KB

Virtual Size

512KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

180KB

Virtual Size

180KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4KB

Virtual Size

7KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

26KB

Virtual Size

25KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.reloc

Size

2KB

Virtual Size

2KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

File Explorer

mini.dll

user32

d3d11

d3dcompiler_47

kernel32

shell32

imm32

generic