silence_x64[.]dll | Triage™

General

Target
silence_x64.dll
Size 201KB
Sample260928-plndlsvvbw
SHA256 cf9b852d25d3cf03e87f511f53b991548c2ae595e020417bc498196ea0281842
MD5 87b9ce2b2e832f271638fd248f224a6f
SHA1 b6d0d3dbe81dd16cf657722c82a7cec21316acba
SHA512 c489dbd463156d7c583a61b4ced0df8becb8d133e0440046cd59a6e53f5202740386359c617c3fed1e9de0cc836b799ca4ea68606978cd0d86bb48c462c912a5
SSDEEP 3072:DMwedmRMvM8FBe4h41CqTv2Y11fXmyu6NL21ZbbXzNXyE1FZ9tE66meo2MWCls7u:l9RqMe/qiIvmU9+xrtysO5NEvzNs
TLSH
T127147D40B881C036D6BF0974457ACF664A7EBC514B60D9CBB7844DFE4E346C0AB39B5A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
silence_x64.dll

File Explorer

silence_x64.dll

.dll 201KB

silence_x64.dll

IMPHASH cf5a70e74466e181d350ef26f32e614e
SHA256 cf9b852d25d3cf03e87f511f53b991548c2ae595e020417bc498196ea0281842
MD5 87b9ce2b2e832f271638fd248f224a6f
SHA1 b6d0d3dbe81dd16cf657722c82a7cec21316acba
SHA512 c489dbd463156d7c583a61b4ced0df8becb8d133e0440046cd59a6e53f5202740386359c617c3fed1e9de0cc836b799ca4ea68606978cd0d86bb48c462c912a5
SSDEEP 3072:DMwedmRMvM8FBe4h41CqTv2Y11fXmyu6NL21ZbbXzNXyE1FZ9tE66meo2MWCls7u:l9RqMe/qiIvmU9+xrtysO5NEvzNs
TLSH
T127147D40B881C036D6BF0974457ACF664A7EBC514B60D9CBB7844DFE4E346C0AB39B5A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

39808

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

user32

RegisterClassExW BlockInput FillRect MessageBoxW ReleaseDC GetDC UpdateWindow GetSystemMetrics SetLayeredWindowAttributes ShowWindow CreateWindowExW DefWindowProcW

advapi32

RegCloseKey RegOpenKeyExW RegSetValueExW

gdi32

SelectObject CreateSolidBrush DeleteObject SetBkColor SetBkMode SetTextColor TextOutW CreateFontW

kernel32

FindFirstFileExW GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW GetProcessHeap SetStdHandle CreateFileW HeapSize WriteConsoleW SetEndOfFile LCMapStringEx GetEnvironmentVariableW CreateDirectoryW DeleteFileW FindClose FindFirstFileW FindNextFileW GetDriveTypeW RemoveDirectoryW SetFileAttributesW Sleep CreateThread DisableThreadLibraryCalls GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleW WinExec CopyFileW MoveFileExW CloseHandle GetLastError GetCurrentThreadId EnterCriticalSection LeaveCriticalSection InitializeCriticalSectionEx DeleteCriticalSection QueryPerformanceCounter GetSystemTimePreciseAsFileTime ReleaseSRWLockExclusive AcquireSRWLockExclusive TryAcquireSRWLockExclusive WakeAllConditionVariable EncodePointer DecodePointer MultiByteToWideChar WideCharToMultiByte GetStringTypeW GetCPInfo IsProcessorFeaturePresent GetCurrentProcessId GetSystemTimeAsFileTime InitializeSListHead SetUnhandledExceptionFilter GetStartupInfoW RaiseException RtlUnwind InterlockedFlushSList SetLastError FlsAlloc FlsGetValue FlsSetValue FlsFree ExitThread FreeLibrary FreeLibraryAndExitThread GetModuleHandleExW GetCurrentProcess ExitProcess TerminateProcess GetProcAddress HeapFree IsDebuggerPresent UnhandledExceptionFilter HeapAlloc VirtualProtect LoadLibraryExW LCMapStringW GetLocaleInfoW IsValidLocale GetUserDefaultLCID EnumSystemLocalesW GetStdHandle GetFileType FlushFileBuffers WriteFile GetConsoleOutputCP GetConsoleMode ReadFile GetFileSizeEx SetFilePointerEx ReadConsoleW IsValidCodePage GetACP GetOEMCP HeapReAlloc

Sharing