msslac[.]dll | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
msslac.dll
Size 204KB
Sample261002-g7flwsba62
SHA256 7420929e197d7328c047b8cb9075258367ac58935a8da197f0a8a8c856292633
MD5 5e3bc49297f0765c486693790157273f
SHA1 7cfd2a0465b27c7201c5f096495201d16f5771eb
SHA512 6f7e2948c72398422b160d735e8d133eb95f91567820ac9c8853aa75cf2b1f9712242f538950bf969b9a0933fe659cda0cdf2db77b34ff22a99a875fb392d612
SSDEEP 3072:gPTXczuCIcS5TqD4ejPXptBacZEvDkFOS94NtP6p6TQceOM:mszGT5TqEer9a6Evw26pK
TLSH
T137147D1131D1C072E2BF02394997972A27B6BC509FB6D28B7F90BE8DAE305858F35752
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
msslac.dll

File Explorer

msslac.dll

.dll 204KB

msslac.dll

IMPHASH b1e3b77e6ee2bb8512103708bf49aa34
SHA256 7420929e197d7328c047b8cb9075258367ac58935a8da197f0a8a8c856292633
MD5 5e3bc49297f0765c486693790157273f
SHA1 7cfd2a0465b27c7201c5f096495201d16f5771eb
SHA512 6f7e2948c72398422b160d735e8d133eb95f91567820ac9c8853aa75cf2b1f9712242f538950bf969b9a0933fe659cda0cdf2db77b34ff22a99a875fb392d612
SSDEEP 3072:gPTXczuCIcS5TqD4ejPXptBacZEvDkFOS94NtP6p6TQceOM:mszGT5TqEer9a6Evw26pK
TLSH
T137147D1131D1C072E2BF02394997972A27B6BC509FB6D28B7F90BE8DAE305858F35752
MD5 SHA1 SHA512 SSDEEP TLSH

windows:4 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

56386

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

e:\vc\ver270读取账号密码并上传\read_name_pass_dll\release\read_name_pass_dll.pdb

kernel32

CreateFileA GetCPInfo GetOEMCP HeapFree HeapAlloc VirtualAlloc HeapReAlloc GetCommandLineA GetProcessHeap RtlUnwind ExitProcess RaiseException HeapSize TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent Sleep GetConsoleCP GetConsoleMode HeapCreate VirtualFree GetStdHandle SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetTickCount GetSystemTimeAsFileTime GetACP WriteConsoleA GetConsoleOutputCP WriteConsoleW SetStdHandle LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetCurrentProcess SetEndOfFile FlushFileBuffers SetFilePointer WriteFile ReadFile GlobalFindAtomA lstrcmpW GetVersionExA GetThreadLocale GlobalGetAtomNameA InterlockedIncrement GlobalFlags WritePrivateProfileStringA SetErrorMode TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedDecrement GetModuleFileNameW GetCurrentProcessId GlobalAddAtomA CloseHandle SetLastError GlobalFree GlobalUnlock FormatMessageA LocalFree GetCurrentThread GetCurrentThreadId ConvertDefaultLocale GetModuleFileNameA EnumResourceLanguagesA GetLocaleInfoA LoadLibraryA GlobalLock lstrcmpA GlobalAlloc FreeLibrary GlobalDeleteAtom GetModuleHandleA GetProcAddress GetVersion CompareStringA GetLastError InterlockedExchange MultiByteToWideChar lstrlenA GetTempPathA VirtualProtect FindResourceA LoadResource LockResource SizeofResource HeapDestroy WideCharToMultiByte

user32

ShowWindow RegisterWindowMessageA LoadIconA WinHelpA GetCapture GetClassLongA SetPropA GetPropA RemovePropA IsWindow GetForegroundWindow GetDlgItem GetTopWindow DestroyWindow GetMessageTime GetMessagePos MapWindowPoints SetForegroundWindow GetClientRect GetMenu CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA AdjustWindowRectEx CopyRect DefWindowProcA CallWindowProcA SetWindowLongA SetWindowPos SystemParametersInfoA IsIconic GetWindowPlacement LoadCursorA GetSystemMetrics GetSysColorBrush GetSysColor ReleaseDC GetDC GrayStringA DrawTextExA DrawTextA TabbedTextOutA ClientToScreen GetWindow GetDlgCtrlID PostQuitMessage PostMessageA GetWindowRect GetClassNameA PtInRect GetWindowTextA SetWindowTextA UnregisterClassA UnhookWindowsHookEx GetWindowThreadProcessId GetWindowLongA GetLastActivePopup IsWindowEnabled EnableWindow DestroyMenu GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState CheckMenuItem EnableMenuItem ModifyMenuA SendMessageA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps ValidateRect MessageBoxA SetCursor SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage DispatchMessageA GetActiveWindow IsWindowVisible GetKeyState PeekMessageA GetCursorPos

gdi32

ScaleWindowExtEx DeleteDC GetStockObject SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible GetDeviceCaps GetClipBox SetMapMode SetTextColor SetBkColor RestoreDC SaveDC DeleteObject CreateBitmap PtVisible

winspool.drv

ClosePrinter DocumentPropertiesA OpenPrinterA

advapi32

RegSetValueExA RegCreateKeyExA RegQueryValueA RegEnumKeyA RegDeleteKeyA RegOpenKeyA RegOpenKeyExA RegQueryValueExA RegCloseKey

shlwapi

PathFindExtensionA PathFindFileNameA

oleaut32

VariantClear VariantChangeType VariantInit