sample[.]dll | Triage™

General

Target
sample.dll
Size 132KB
Sample261020-vh84sscd92
SHA256 1c8fc5bf2fae80793a0c68eeb1025d27c8f6bdbb5788d91250bf37b4ba52d71a
MD5 12f411ab5ba4829fac44cfdea56ddd67
SHA1 a9ed62aac8a9b83bd49ddef8501afb2f61b14b6b
SHA512 7d3b2181284d60e150dccf3dd1bedc09af31191cebaccaa045575d236967fdd755932bcad87a9da81d694a3751b5ca29fbd0d3f26409ec5c220292f721e1a62d
SSDEEP 3072:sTAzqrtE3s2WqsLo6rQZE3hvKRCmmF+v4vBmKqO:IAzqa3sAsLoYQZc92PGBrD
TLSH
T1F8D37C017581C072D9BD583D1864CB729B3FB970DFA09DDB67841ABA6E302D0AF35E62
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
sample.dll

File Explorer

sample.dll

.dll 132KB

sample.dll

IMPHASH a25b8dc6b1b6833b3d09342aaa8bec4a
SHA256 1c8fc5bf2fae80793a0c68eeb1025d27c8f6bdbb5788d91250bf37b4ba52d71a
MD5 12f411ab5ba4829fac44cfdea56ddd67
SHA1 a9ed62aac8a9b83bd49ddef8501afb2f61b14b6b
SHA512 7d3b2181284d60e150dccf3dd1bedc09af31191cebaccaa045575d236967fdd755932bcad87a9da81d694a3751b5ca29fbd0d3f26409ec5c220292f721e1a62d
SSDEEP 3072:sTAzqrtE3s2WqsLo6rQZE3hvKRCmmF+v4vBmKqO:IAzqa3sAsLoYQZc92PGBrD
TLSH
T1F8D37C017581C072D9BD583D1864CB729B3FB970DFA09DDB67841ABA6E302D0AF35E62
MD5 SHA1 SHA512 SSDEEP TLSH

windows:6 windows x86 arch:x86

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

17643

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DLL

PDB paths

winhttp

WinHttpOpen WinHttpCloseHandle WinHttpConnect WinHttpQueryHeaders WinHttpReceiveResponse WinHttpSendRequest WinHttpOpenRequest WinHttpSetTimeouts WinHttpSetOption WinHttpQueryDataAvailable WinHttpReadData WinHttpCrackUrl

ws2_32

inet_ntop

kernel32

GetModuleHandleExW CreateFileW CloseHandle DecodePointer GetConsoleMode GetConsoleOutputCP WriteFile FlushFileBuffers HeapReAlloc HeapSize SetStdHandle SetFilePointerEx DebugBreak OutputDebugStringA GetLastError lstrlenW MultiByteToWideChar WideCharToMultiByte UnhandledExceptionFilter SetUnhandledExceptionFilter GetCurrentProcess TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetCurrentProcessId GetCurrentThreadId GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent GetStartupInfoW GetModuleHandleW RaiseException RtlUnwind InterlockedFlushSList SetLastError EncodePointer EnterCriticalSection LeaveCriticalSection DeleteCriticalSection InitializeCriticalSectionAndSpinCount TlsAlloc TlsGetValue TlsSetValue TlsFree FreeLibrary GetProcAddress LoadLibraryExW ExitProcess WriteConsoleW GetModuleFileNameW HeapFree HeapAlloc GetStdHandle GetFileType FindClose FindFirstFileExW FindNextFileW IsValidCodePage GetACP GetOEMCP GetCPInfo GetCommandLineA GetCommandLineW GetEnvironmentStringsW FreeEnvironmentStringsW FlsAlloc FlsGetValue FlsSetValue FlsFree InitializeCriticalSectionEx VirtualProtect LCMapStringW GetProcessHeap GetStringTypeW

Sharing