paste[.]dll | Triage™

General

Target
paste.dll
Size 1.8MB
Sample261027-hjq86ach49
SHA256 67afddf19538975d4f5fe4714af630b8143682b8ded51890cc26a36949b68851
MD5 293568c0fa9405ff212b9a5a31fcbf08
SHA1 70764684411bce9eca0908414909170c1f9df143
SHA512 2d466f36bada57b20c60ebb81a84b3209fd4c98133d6851797b879210705a099f063cde1032f3929880e91e4c18bb578c6b9daffc3447ead15c1275d83509726
SSDEEP 24576:WblOXp59WR/616ObYWWJtBEwTOPTOPTgWbYC0oH5eDpjzpH0BZGKU0p6ydGw:B7MR/61bYvDaJWd0k0jFH6q0p6yAw
TLSH
T1FD95AF11BBA2066DCBDA8239459B5927E631F8800372C7FB33A845655FA63F06F7E710
MD5 SHA1 SHA512 SSDEEP TLSH

Score

3^/10

Malware Config

Signatures

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
paste.dll

File Explorer

paste.dll

.dll 1.8MB

paste.dll

IMPHASH 13e01ec92247e25e1fc5ad1f76f4f743
SHA256 67afddf19538975d4f5fe4714af630b8143682b8ded51890cc26a36949b68851
MD5 293568c0fa9405ff212b9a5a31fcbf08
SHA1 70764684411bce9eca0908414909170c1f9df143
SHA512 2d466f36bada57b20c60ebb81a84b3209fd4c98133d6851797b879210705a099f063cde1032f3929880e91e4c18bb578c6b9daffc3447ead15c1275d83509726
SSDEEP 24576:WblOXp59WR/616ObYWWJtBEwTOPTOPTgWbYC0oH5eDpjzpH0BZGKU0p6ydGw:B7MR/61bYvDaJWd0k0jFH6q0p6yAw
TLSH
T1FD95AF11BBA2066DCBDA8239459B5927E631F8800372C7FB33A845655FA63F06F7E710
MD5 SHA1 SHA512 SSDEEP TLSH

Unsigned PE

Checks for missing Authenticode signature.

Minor OS version

0

Major OS version

6

Entry point

14216

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

kernel32

VirtualProtect GetModuleHandleA Sleep CloseHandle CreateThread AllocConsole VirtualFree VirtualAlloc GetSystemInfo VirtualQuery HeapCreate HeapFree GetCurrentProcess Thread32Next Thread32First GetCurrentThreadId SuspendThread ResumeThread CreateToolhelp32Snapshot GetLastError HeapReAlloc HeapAlloc GetThreadContext GetProcAddress GetCurrentProcessId GetModuleHandleW FlushInstructionCache SetThreadContext OpenThread RtlLookupFunctionEntry RtlVirtualUnwind UnhandledExceptionFilter SetUnhandledExceptionFilter TerminateProcess IsProcessorFeaturePresent QueryPerformanceCounter GetSystemTimeAsFileTime InitializeSListHead IsDebuggerPresent RtlCaptureContext

msvcp140

?_Xlength_error@std@@YAXPEBD@Z

vcruntime140_1

__CxxFrameHandler4

vcruntime140

memcpy memset _CxxThrowException __std_exception_copy __std_type_info_destroy_list __std_exception_destroy __C_specific_handler memmove

api-ms-win-crt-runtime-l1-1-0

_cexit _configure_narrow_argv _initterm _execute_onexit_table _initialize_onexit_table _seh_filter_dll _invalid_parameter_noinfo_noreturn _initialize_narrow_environment _initterm_e

api-ms-win-crt-heap-l1-1-0

malloc free _callnewh

api-ms-win-crt-stdio-l1-1-0

freopen_s __stdio_common_vfprintf __acrt_iob_func

Sharing