b13befdd6f8a0353d8681949d3a9ce91e319d007eb457e8cc9c9df013217d0d3[.]dll

General

Target
b13befdd6f8a0353d8681949d3a9ce91e319d007eb457e8cc9c9df013217d0d3.dll
Size 92KB
Sample261017-tzcaqaav7x
SHA256 b13befdd6f8a0353d8681949d3a9ce91e319d007eb457e8cc9c9df013217d0d3
MD5 721cf92ef1c2069b72ede40792157a8f
SHA1 7efa87e0de06f7679fc9883aaf6f2260c07974b4
SHA512 beb951c03af0d5389d419c3c3d9aef2d7a5ed6e4a7d6f2665466c290ff7ca6f149bde9e3007bd5fd87b53a5756129e6ca375402f7d919c6a073d611bbef0d696
SSDEEP 1536:3lAZO13pmnYH68osCiXI79Eipb3Gifmz8/r5AXmZ54dJ0bScx+025lzsWUwwrwcU:HmYH6JsCiYrpsz8/raWZF+sll1N4X
TLSH
T113934A5075D1C4B1E5BF293A4574CAA14B3FB921DEA0AD5B3745023A0FB11C1EE3AE2B
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
b13befdd6f8a0353d8681949d3a9ce91e319d007eb457e8cc9c9df013217d0d3.dll

File Explorer

b13befdd6f8a0353d8681949d3a9ce91e319d007eb457e8cc9c9df013217d0d3.dll

.dll 92KB

b13befdd6f8a0353d8681949d3a9ce91e319d007eb457e8cc9c9df013217d0d3.dll

IMPHASH bc39f07033663470c8b9af26da35813b
SHA256 b13befdd6f8a0353d8681949d3a9ce91e319d007eb457e8cc9c9df013217d0d3
MD5 721cf92ef1c2069b72ede40792157a8f
SHA1 7efa87e0de06f7679fc9883aaf6f2260c07974b4
SHA512 beb951c03af0d5389d419c3c3d9aef2d7a5ed6e4a7d6f2665466c290ff7ca6f149bde9e3007bd5fd87b53a5756129e6ca375402f7d919c6a073d611bbef0d696
SSDEEP 1536:3lAZO13pmnYH68osCiXI79Eipb3Gifmz8/r5AXmZ54dJ0bScx+025lzsWUwwrwcU:HmYH6JsCiYrpsz8/raWZF+sll1N4X
TLSH
T113934A5075D1C4B1E5BF293A4574CAA14B3FB921DEA0AD5B3745023A0FB11C1EE3AE2B
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

5495

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

D:\源码\DLL源码\Release\DLL.pdb

kernel32

Process32First CreateToolhelp32Snapshot Sleep Process32Next WinExec WriteConsoleW SetEndOfFile HeapReAlloc HeapSize GetStringTypeW UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW InterlockedFlushSList RtlUnwind GetLastError SetLastError EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW RaiseException ExitProcess GetModuleHandleExW GetModuleFileNameW HeapFree CloseHandle WaitForSingleObject GetExitCodeProcess CreateProcessW GetFileAttributesExW WriteFile GetConsoleCP GetConsoleMode GetFileSizeEx SetFilePointerEx HeapAlloc FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW MultiByteToWideChar WideCharToMultiByte GetEnvironmentStringsW FreeEnvironmentStringsW SetEnvironmentVariableW GetStdHandle GetFileType CompareStringW LCMapStringW GetProcessHeap CreateFileW SetStdHandle FlushFileBuffers ReadFile ReadConsoleW DecodePointer

wininet

InternetOpenA InternetOpenUrlA InternetCloseHandle InternetReadFile

Sharing