last[.]dll | Triage™

Resubmissions

03/10/2026, 12:24

261003-plg7laybpg3

03/10/2026, 11:59

261003-n55lkaxfrh8

21/09/2026, 12:34

260921-prvd4szw8q8

Sharing

Copy URL Twitter E-mail

General

Target
last.dll
Size 11.3MB
Sample261003-plg7laybpg
SHA256 59b7517cb787dbdf12af830dcc61c9f9a87183cc85d201fc2b1c74fa9916827c
MD5 b813c01c72cae3a515fe9ca5b42a881b
SHA1 4ad370a286805efc0157f33ce3a07d86aef5c440
SHA512 edc61726b3c8f6aaddfbae23e08a9621e475593f18fc15de4a760f0d55e768cec64bb932d329dc59f75ffada0530d423a3b503116fdbd58973f60669a91da262
SSDEEP 196608:lrYupXteL8ccV2EzVjUv+aRF83P9P8WyCLz/3:lRXwEzVjG+4FoF8WDLz/3
TLSH
T100C6D043F382C1AAC81AE6784A5BD7367231B8560B2157CB7BC81F645D9B7E01F39B81
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
last.dll

File Explorer

last.dll

.dll 11.3MB

last.dll

IMPHASH c09426e8ca7d5fcce1b4d7df2caef1f6
SHA256 59b7517cb787dbdf12af830dcc61c9f9a87183cc85d201fc2b1c74fa9916827c
MD5 b813c01c72cae3a515fe9ca5b42a881b
SHA1 4ad370a286805efc0157f33ce3a07d86aef5c440
SHA512 edc61726b3c8f6aaddfbae23e08a9621e475593f18fc15de4a760f0d55e768cec64bb932d329dc59f75ffada0530d423a3b503116fdbd58973f60669a91da262
SSDEEP 196608:lrYupXteL8ccV2EzVjUv+aRF83P9P8WyCLz/3:lRXwEzVjG+4FoF8WDLz/3
TLSH
T100C6D043F382C1AAC81AE6784A5BD7367231B8560B2157CB7BC81F645D9B7E01F39B81
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

Major OS version

Entry point

2248192

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

dollarrelease.pdb

kernel32

AcquireSRWLockExclusive AcquireSRWLockShared AddVectoredExceptionHandler AreFileApisANSI CheckRemoteDebuggerPresent CloseHandle CompareStringW CreateDirectoryW CreateFile2 CreateFileA CreateFileMappingA CreateFileMappingW CreateFileW CreatePipe CreateProcessW CreateThread CreateToolhelp32Snapshot DecodePointer DeleteCriticalSection DeleteFileW DisableThreadLibraryCalls DuplicateHandle EncodePointer EnterCriticalSection EnumSystemLocalesW ExitProcess ExitThread FindClose FindFirstFileExW FindFirstFileW FindNextFileW FlsAlloc FlsFree FlsGetValue FlsSetValue FlushFileBuffers FlushInstructionCache FormatMessageA FreeEnvironmentStringsW FreeLibrary FreeLibraryAndExitThread GetACP GetCPInfo GetCommandLineA GetCommandLineW GetConsoleMode GetConsoleOutputCP GetCurrentProcess GetCurrentProcessId GetCurrentThread GetCurrentThreadId GetDateFormatW GetEnvironmentStringsW GetEnvironmentVariableW GetExitCodeProcess GetExitCodeThread GetFileAttributesExW GetFileInformationByHandleEx GetFileSizeEx GetFileType GetLastError GetLocalTime GetLocaleInfoA GetLocaleInfoEx GetLocaleInfoW GetLogicalProcessorInformationEx GetModuleFileNameA GetModuleFileNameW GetModuleHandleA GetModuleHandleExA GetModuleHandleExW GetModuleHandleW GetOEMCP GetProcAddress GetProcessHeap GetProcessId GetStartupInfoW GetStdHandle GetStringTypeW GetSystemTime GetSystemTimeAsFileTime GetSystemTimePreciseAsFileTime GetSystemTimes GetTempFileNameW GetTempPathW GetThreadContext GetTickCount GetTickCount64 GetTimeFormatW GetTimeZoneInformation GetUserDefaultLCID GetWindowsDirectoryW GlobalAlloc GlobalFree GlobalLock GlobalMemoryStatusEx GlobalUnlock HeapAlloc HeapFree HeapReAlloc HeapSize InitOnceBeginInitialize InitOnceComplete InitializeCriticalSectionEx InitializeSListHead InterlockedFlushSList IsDBCSLeadByte IsDebuggerPresent IsProcessorFeaturePresent IsValidCodePage IsValidLocale LCMapStringEx LCMapStringW LeaveCriticalSection LoadLibraryA LoadLibraryExA LoadLibraryExW LoadLibraryW LocalFree MapViewOfFile MoveFileExW MultiByteToWideChar OpenFileMappingW OpenProcess OpenThread OutputDebugStringA PeekNamedPipe Process32FirstW Process32NextW QueryFullProcessImageNameW QueryPerformanceCounter QueryPerformanceFrequency RaiseException ReadConsoleW ReadFile ReleaseSRWLockExclusive ReleaseSRWLockShared RemoveVectoredExceptionHandler ResumeThread RtlAddFunctionTable RtlCaptureContext RtlDeleteFunctionTable RtlLookupFunctionEntry RtlPcToFileHeader RtlUnwind RtlUnwindEx RtlVirtualUnwind SetEndOfFile SetEnvironmentVariableW SetFileInformationByHandle SetFilePointer SetFilePointerEx SetLastError SetStdHandle SetUnhandledExceptionFilter Sleep SleepConditionVariableSRW SuspendThread SwitchToThread TerminateProcess Thread32First Thread32Next TlsAlloc TlsFree TlsGetValue TlsSetValue TryAcquireSRWLockExclusive UnhandledExceptionFilter UnmapViewOfFile VirtualAlloc VirtualProtect VirtualQuery WaitForSingleObject WaitForSingleObjectEx WakeAllConditionVariable WideCharToMultiByte WriteConsoleW WriteFile

user32

ClientToScreen CloseClipboard CreateWindowExA DefWindowProcA DefWindowProcW DestroyWindow EmptyClipboard GetAsyncKeyState GetCapture GetClientRect GetClipboardData GetCursorPos GetForegroundWindow GetKeyNameTextW GetKeyState GetKeyboardLayout GetLastInputInfo GetMessageExtraInfo GetSystemMetrics GetWindowLongPtrW GetWindowThreadProcessId IsWindowUnicode LoadCursorW MapVirtualKeyW MessageBoxA OpenClipboard RegisterClassExA ReleaseCapture ScreenToClient SetCapture SetClipboardData SetCursor SetCursorPos TrackMouseEvent UnregisterClassA

shell32

SHGetFolderPathW ShellExecuteA ShellExecuteW

ole32

CoCreateInstance CoInitializeEx CoUninitialize CreateStreamOnHGlobal

api-ms-win-core-synch-l1-2-0

WaitOnAddress

imm32

ImmGetContext ImmReleaseContext ImmSetCandidateWindow ImmSetCompositionWindow

d3dcompiler_47

D3DCompile

bcrypt

BCryptCloseAlgorithmProvider BCryptCreateHash BCryptDestroyHash BCryptFinishHash BCryptGetProperty BCryptHash BCryptHashData BCryptOpenAlgorithmProvider

pdh

PdhAddEnglishCounterW PdhCloseQuery PdhCollectQueryData PdhGetFormattedCounterArrayW PdhGetFormattedCounterValue PdhOpenQueryW

winhttp

WinHttpCloseHandle WinHttpConnect WinHttpOpen WinHttpOpenRequest WinHttpQueryHeaders WinHttpReadData WinHttpReceiveResponse WinHttpSendRequest WinHttpSetTimeouts

d3d11

D3D11CreateDeviceAndSwapChain

Name

.text

Size

3.6MB

Virtual Size

3.6MB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

3.0MB

Virtual Size

3.0MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

4.5MB

Virtual Size

6.7MB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.pdata

Size

82KB

Virtual Size

81KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.fptable

Size

512B

Virtual Size

256B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

_RDATA

Size

1KB

Virtual Size

1KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.rsrc

Size

512B

Virtual Size

232B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

19KB

Virtual Size

18KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

File Explorer

last.dll

kernel32

user32

shell32

ole32

api-ms-win-core-synch-l1-2-0

imm32

d3dcompiler_47

bcrypt

pdh

winhttp

d3d11

generic