Noise+[.]dll | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
Noise+.dll
Size 7.9MB
Sample261001-zlbd6aydpc
SHA256 6be3eef8485ebf3def65b04a1d2c05215421293bdc130fe0882ee3dfb1554022
MD5 98f0f1a4fb412594a554a4306211cfa8
SHA1 15afe93cabcb6af0dc939612963901ada237075b
SHA512 07d617cee3b303512a2c2b2b4355944ddce95c6316436b11b7ae624c4842cd0ba576733dc0be221a5f13d506238fd956d96d38d571564c945dd72fd4602ec7a0
SSDEEP 196608:MN16vlSN8PB1UesnxegsE1AsOd1FaFwzobCg:c6tS2PBhsx0yO1kM0Cg
TLSH
T16C86334675CE952EC5A1C674D21510B8F20E3AC4CEB65A4B9F6B2709EEB3E31C07E742
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
Noise+.dll

File Explorer

Noise+.dll

.dll 7.9MB

Noise+.dll

IMPHASH 4dc7350fb76da3a1ce9c4116ce6e6c15
SHA256 6be3eef8485ebf3def65b04a1d2c05215421293bdc130fe0882ee3dfb1554022
MD5 98f0f1a4fb412594a554a4306211cfa8
SHA1 15afe93cabcb6af0dc939612963901ada237075b
SHA512 07d617cee3b303512a2c2b2b4355944ddce95c6316436b11b7ae624c4842cd0ba576733dc0be221a5f13d506238fd956d96d38d571564c945dd72fd4602ec7a0
SSDEEP 196608:MN16vlSN8PB1UesnxegsE1AsOd1FaFwzobCg:c6tS2PBhsx0yO1kM0Cg
TLSH
T16C86334675CE952EC5A1C674D21510B8F20E3AC4CEB65A4B9F6B2709EEB3E31C07E742
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x64 arch:x64

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

19135076

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

C:\Users\berat\Desktop\Noise_Main\Noise_Main\Noise_Main\x64\Release\Noise_Main.pdb

Name

.text

Size

Virtual Size

2.3MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

Virtual Size

2.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

Virtual Size

2.6MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

Virtual Size

84KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.detourc

Size

Virtual Size

8KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.detourd

Size

Virtual Size

24B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.fptable

Size

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.^),

Size

Virtual Size

2.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.nwf

Size

512B

Virtual Size

312B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.(^;

Size

7.9MB

Virtual Size

7.9MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rsrc

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

512B

Virtual Size

92B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Noise+.dll

crypt32

advapi32

opengl32

kernel32

user32

gdi32

shell32

gdiplus

winhttp

wininet

bcrypt

urlmon

imm32

generic