SmoothFlow_Advanced[.]dll

Sharing

Copy URL Twitter E-mail

General

Target
SmoothFlow_Advanced.dll
Size 29KB
Sample261102-mkfk9sswe1
SHA256 5e287e7e884504b524dc4610bebe79e013f0bc6f87fe788dd1f5562b70a6dd65
MD5 be6ff0ec680921380c04331351a1ca2f
SHA1 164a58758bd929d3f61f5193494dc4ea188c34c2
SHA512 8603d539b08c32a9777eb5749ea9707a26a025dee72e8b44a34bc7e5270d8d88004a3dc0625986b4814402a3891ce32d815a27c6ec7e0079638a36b68d13890a
SSDEEP 384:nc90mSCFApy80kzj63iZgbFIYiVLpMNOZiPxh8E9VF0NyeCg:nc93ky80wjSyYidpMN3PxWE4N
TLSH
T10FD23B329A541C46DD3387B4A8834B32D572FB411362C3FB221D82590E657C6F6BA7ED
MD5 SHA1 SHA512 SSDEEP TLSH

Score

1^/10

Malware Config

Signatures

File Explorer

SmoothFlow_Advanced.dll

.dll 29KB

SmoothFlow_Advanced.dll

IMPHASH 7440e95e42dfa3161f3f615982b812a9
SHA256 5e287e7e884504b524dc4610bebe79e013f0bc6f87fe788dd1f5562b70a6dd65
MD5 be6ff0ec680921380c04331351a1ca2f
SHA1 164a58758bd929d3f61f5193494dc4ea188c34c2
SHA512 8603d539b08c32a9777eb5749ea9707a26a025dee72e8b44a34bc7e5270d8d88004a3dc0625986b4814402a3891ce32d815a27c6ec7e0079638a36b68d13890a
SSDEEP 384:nc90mSCFApy80kzj63iZgbFIYiVLpMNOZiPxh8E9VF0NyeCg:nc93ky80wjSyYidpMN3PxWE4N
TLSH
T10FD23B329A541C46DD3387B4A8834B32D572FB411362C3FB221D82590E657C6F6BA7ED
MD5 SHA1 SHA512 SSDEEP TLSH

Digest

6c:01:71:92:41:b6:14:10:d7:4a:a5:e9:9b:ef:21:ba:2d:21:dd:67:5e:52:bc:0b:36:9a:44:92:93:f3:21:59

Digest Algorithm

sha256

PE Digests Matches

Trusted

Signing Certificate

SERIALNUMBER=4559077,CN=Now.gg\, INC,O=Now.gg\, INC,L=Campbell,ST=California,C=US,2.5.4.15=#131450726976617465204f7267616e697a6174696f6e,1.3.6.1.4.1.311.60.2.1.2=#130844656c6177617265,1.3.6.1.4.1.311.60.2.1.3=#13025553

Chains

Mar 24, 2023

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Subject

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Serial Number

08:ad:40:b2:60:d2:9c:4c:9f:5e:cd:a9:bd:93:ae:d9

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Apr 29, 2021 - Apr 28, 2036

Subject

Serial Number

04:f9:d5:0a:6c:79:2c:9f:d3:9d:47:2e:98:37:b5:ff

Issuer

CN=DigiCert Trusted G4 Code Signing RSA4096 SHA384 2021 CA1,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageCodeSigning

Revocation Status

Not revoked

Timespan

Mar 14, 2023 - Apr 5, 2025

Subject

CN=DigiCert Timestamp 2022 - 2,O=DigiCert,C=US

Serial Number

0c:4d:69:72:4b:94:fa:3c:2a:4a:3d:29:07:80:3d:5a

Issuer

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Key Usages

KeyUsageDigitalSignature

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Sep 21, 2022 - Nov 21, 2033

Subject

CN=DigiCert Trusted G4 RSA4096 SHA256 TimeStamping CA,O=DigiCert\, Inc.,C=US

Serial Number

07:36:37:b7:24:54:7c:d8:47:ac:fd:28:66:2a:5e:5b

Issuer

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Ext Key Usages

ExtKeyUsageTimeStamping

Revocation Status

Not revoked

Timespan

Mar 23, 2022 - Mar 22, 2037

Subject

CN=DigiCert Trusted Root G4,OU=www.digicert.com,O=DigiCert Inc,C=US

Serial Number

0e:9b:18:8e:f9:d0:2d:e7:ef:db:50:e2:08:40:18:5a

Issuer

CN=DigiCert Assured ID Root CA,OU=www.digicert.com,O=DigiCert Inc,C=US

Key Usages

KeyUsageDigitalSignature, KeyUsageCertSign, KeyUsageCRLSign

Revocation Status

Not revoked

Timespan

Aug 1, 2022 - Nov 9, 2031

Minor OS version

Major OS version

Entry point

6368

Magic Number

523

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_CUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LARGE_ADDRESS_AWARE IMAGE_FILE_DLL

PDB paths

D:\workspace\app-player\ggl\external\angle\build\Release_x64\libEGL.pdb

libglesv2

?DestroySync@egl@@YAIPEAX0@Z ?ClientWaitSync@egl@@YAHPEAX0H_K@Z ?GetSyncAttrib@egl@@YAIPEAX0HPEA_J@Z ?CreateImage@egl@@YAPEAXPEAX0I0PEB_J@Z ?DestroyImage@egl@@YAIPEAX0@Z ?GetPlatformDisplay@egl@@YAPEAXIPEAXPEB_J@Z ?CreatePlatformWindowSurface@egl@@YAPEAXPEAX00PEB_J@Z ?CreatePlatformPixmapSurface@egl@@YAPEAXPEAX00PEB_J@Z ?WaitSync@egl@@YAIPEAX0H@Z ?QuerySurfacePointerANGLE@egl@@YAIPEAX0HPEAPEAX@Z ?PostSubBufferNV@egl@@YAIPEAX0HHHH@Z ?GetPlatformDisplayEXT@egl@@YAPEAXIPEAXPEBH@Z ?QueryDisplayAttribEXT@egl@@YAIPEAXHPEA_J@Z ?QueryDeviceAttribEXT@egl@@YAIPEAXHPEA_J@Z ?Initialize@egl@@YAIPEAXPEAH1@Z ?CreateSync@egl@@YAPEAXPEAXIPEB_J@Z ?DestroyImageKHR@egl@@YAIPEAX0@Z ?CreateDeviceANGLE@egl@@YAPEAXHPEAXPEB_J@Z ?ReleaseDeviceANGLE@egl@@YAIPEAX@Z ?CreateStreamKHR@egl@@YAPEAXPEAXPEBH@Z ?DestroyStreamKHR@egl@@YAIPEAX0@Z ?StreamAttribKHR@egl@@YAIPEAX0IH@Z ?QueryStreamKHR@egl@@YAIPEAX0IPEAH@Z ?QueryStreamu64KHR@egl@@YAIPEAX0IPEA_K@Z ?StreamConsumerGLTextureExternalKHR@egl@@YAIPEAX0@Z ?StreamConsumerAcquireKHR@egl@@YAIPEAX0@Z ?StreamConsumerReleaseKHR@egl@@YAIPEAX0@Z ?StreamConsumerGLTextureExternalAttribsNV@egl@@YAIPEAX0PEB_J@Z ?CreateStreamProducerD3DTextureNV12ANGLE@egl@@YAIPEAX0PEB_J@Z ?StreamPostD3DTextureNV12ANGLE@egl@@YAIPEAX00PEB_J@Z ?GetProcAddress@egl@@YAP6AXXZPEBD@Z ?GetCurrentContext@egl@@YAPEAXXZ ?WaitClient@egl@@YAIXZ ?ReleaseThread@egl@@YAIXZ ?CreatePbufferFromClientBuffer@egl@@YAPEAXPEAXI00PEBH@Z ?QueryAPI@egl@@YAIXZ ?BindAPI@egl@@YAII@Z ?SwapInterval@egl@@YAIPEAXH@Z ?SurfaceAttrib@egl@@YAIPEAX0HH@Z ?ReleaseTexImage@egl@@YAIPEAX0H@Z ?BindTexImage@egl@@YAIPEAX0H@Z ?WaitNative@egl@@YAIH@Z ?WaitGL@egl@@YAIXZ ?Terminate@egl@@YAIPEAX@Z ?SwapBuffers@egl@@YAIPEAX0@Z ?QuerySurface@egl@@YAIPEAX0HPEAH@Z ?QueryString@egl@@YAPEBDPEAXH@Z ?QueryContext@egl@@YAIPEAX0HPEAH@Z ?CreateImageKHR@egl@@YAPEAXPEAX0I0PEBH@Z ?MakeCurrent@egl@@YAIPEAX000@Z ?GetError@egl@@YAHXZ ?GetDisplay@egl@@YAPEAXPEAUHDC__@@@Z ?GetCurrentSurface@egl@@YAPEAXH@Z ?GetCurrentDisplay@egl@@YAPEAXXZ ?GetConfigs@egl@@YAIPEAXPEAPEAXHPEAH@Z ?GetConfigAttrib@egl@@YAIPEAX0HPEAH@Z ?DestroySurface@egl@@YAIPEAX0@Z ?DestroyContext@egl@@YAIPEAX0@Z ?CreateWindowSurface@egl@@YAPEAXPEAX0PEAUHWND__@@PEBH@Z ?CreatePixmapSurface@egl@@YAPEAXPEAX0PEAUHBITMAP__@@PEBH@Z ?CreatePbufferSurface@egl@@YAPEAXPEAX0PEBH@Z ?CreateContext@egl@@YAPEAXPEAX00PEBH@Z ?CopyBuffers@egl@@YAIPEAX0PEAUHBITMAP__@@@Z ?QueryDeviceStringEXT@egl@@YAPEBDPEAXH@Z ?ChooseConfig@egl@@YAIPEAXPEBHPEAPEAXHPEAH@Z

vcruntime140

__C_specific_handler __current_exception __current_exception_context memset __std_type_info_destroy_list

api-ms-win-crt-runtime-l1-1-0

_initialize_narrow_environment _execute_onexit_table _seh_filter_dll _initterm_e _initterm _initialize_onexit_table _register_onexit_function _crt_atexit _crt_at_quick_exit _cexit _configure_narrow_argv terminate

kernel32

IsProcessorFeaturePresent GetStartupInfoW SetUnhandledExceptionFilter UnhandledExceptionFilter IsDebuggerPresent RtlVirtualUnwind RtlLookupFunctionEntry RtlCaptureContext InitializeSListHead DisableThreadLibraryCalls GetSystemTimeAsFileTime GetCurrentThreadId GetCurrentProcessId QueryPerformanceCounter GetModuleHandleW

eglBindAPI eglBindTexImage eglChooseConfig eglClientWaitSync eglCopyBuffers eglCreateContext eglCreateDeviceANGLE eglCreateImage eglCreateImageKHR eglCreatePbufferFromClientBuffer eglCreatePbufferSurface eglCreatePixmapSurface eglCreatePlatformPixmapSurface eglCreatePlatformWindowSurface eglCreateStreamKHR eglCreateStreamProducerD3DTextureNV12ANGLE eglCreateSync eglCreateWindowSurface eglDestroyContext eglDestroyImage eglDestroyImageKHR eglDestroyStreamKHR eglDestroySurface eglDestroySync eglGetConfigAttrib eglGetConfigs eglGetCurrentContext eglGetCurrentDisplay eglGetCurrentSurface eglGetDisplay eglGetError eglGetPlatformDisplay eglGetPlatformDisplayEXT eglGetProcAddress eglGetSyncAttrib eglInitialize eglMakeCurrent eglPostSubBufferNV eglQueryAPI eglQueryContext eglQueryDeviceAttribEXT eglQueryDeviceStringEXT eglQueryDisplayAttribEXT eglQueryStreamKHR eglQueryStreamu64KHR eglQueryString eglQuerySurface eglQuerySurfacePointerANGLE eglReleaseDeviceANGLE eglReleaseTexImage eglReleaseThread eglStreamAttribKHR eglStreamConsumerAcquireKHR eglStreamConsumerGLTextureExternalAttribsNV eglStreamConsumerGLTextureExternalKHR eglStreamConsumerReleaseKHR eglStreamPostD3DTextureNV12ANGLE eglSurfaceAttrib eglSwapBuffers eglSwapInterval eglTerminate eglWaitClient eglWaitGL eglWaitNative eglWaitSync

Sharing

General

Malware Config

Signatures

File Explorer

SmoothFlow_Advanced.dll

libglesv2

vcruntime140

api-ms-win-crt-runtime-l1-1-0

kernel32

generic