clip[.]dll | Triage™

General

Target
clip.dll
Size 117KB
Sample261017-arma6scc99
SHA256 9aa69d1b5fd4690a152b14482c9ebac60e0d7088e00f4e6c9279b646d0bee016
MD5 08caf6ceba693764df413e62024b525a
SHA1 a35a0ee2620b99d74a43bacfc545620b616ef8e9
SHA512 9fd5fcb64c490366617946be64a7d9f0eafb6615015fe3f6628d04b4a333ffac7021c53c9437cf2f3518392e8234ad28292eabc6c4672202495d233659d3862c
SSDEEP 3072:k/cAK+BGInDZsJRu9VDXf0E3bqSG79MRFRyJo1Ihco5RmN89Y:QBZXQWqSa2qLhTq89Y
TLSH
T164C349213467C071D99D997E0CA4BBF047AD6520DFB14DE33B841A2B9E246D3AD38D3A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
clip.dll

File Explorer

clip.dll

.dll 117KB

clip.dll

IMPHASH 41a061f19f2a7afce4f3586f40ee23ad
SHA256 9aa69d1b5fd4690a152b14482c9ebac60e0d7088e00f4e6c9279b646d0bee016
MD5 08caf6ceba693764df413e62024b525a
SHA1 a35a0ee2620b99d74a43bacfc545620b616ef8e9
SHA512 9fd5fcb64c490366617946be64a7d9f0eafb6615015fe3f6628d04b4a333ffac7021c53c9437cf2f3518392e8234ad28292eabc6c4672202495d233659d3862c
SSDEEP 3072:k/cAK+BGInDZsJRu9VDXf0E3bqSG79MRFRyJo1Ihco5RmN89Y:QBZXQWqSa2qLhTq89Y
TLSH
T164C349213467C071D99D997E0CA4BBF047AD6520DFB14DE33B841A2B9E246D3AD38D3A
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

29808

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

kernel32

Sleep GlobalAlloc GlobalUnlock GlobalLock WideCharToMultiByte WriteConsoleW CloseHandle CreateFileW SetFilePointerEx GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers SetStdHandle HeapReAlloc HeapSize UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent IsDebuggerPresent GetStartupInfoW GetModuleHandleW QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead RaiseException InterlockedFlushSList GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection RtlUnwind InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess GetModuleHandleExW GetModuleFileNameW HeapAlloc HeapFree FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar GetEnvironmentStringsW FreeEnvironmentStringsW LCMapStringW GetProcessHeap GetStdHandle GetFileType GetStringTypeW DecodePointer

user32

CloseClipboard SetClipboardData GetClipboardData EmptyClipboard OpenClipboard

wininet

InternetCloseHandle InternetConnectA InternetReadFile HttpOpenRequestA HttpSendRequestA InternetOpenW

Sharing