VigorSinaUpdate.dll?ex=670c9392&is=670b4212&hm=34a01dbc68ac67677038eefba24593001752a7efc6faa020445474b71a5e778a&
First submission 2024-10-13 17:06:02
| File type: |
PE32+ executable (DLL) (GUI) x86-64, for MS Windows |
| Mime type: |
application/x-dosexec |
| File size: |
562.0 KB (575488 bytes) |
| Compile time: |
2024-10-11 20:10:22 |
| MD5: |
cdd0e707baa41cfc93c769dfc25361af |
| SHA1: |
4514c4cf5b100671f7d0fb38ed39163c830bf394 |
| SHA256: |
3342efab0dc7070c624982a3576513bb8d1d4710c86da009e381505b4dcc81d2 |
| Import Hash : |
52b7415ab69ef079f75883c0cf056278 |
| Sections 5 |
.text
.rdata
.data
.pdata
.reloc
|
| Directories 3 |
import
tls
relocation
|
URLs, FQDN and IP indicators 1
| URL |
Host (FQDN/IP) |
Date Added |
hXXps://cdn.discordapp.com/attachments/1292284075834343475/1294687100691812352/VigorSinaUpdate.dll?ex=670c9392&is=670b4212&hm=34a01dbc68ac67677038eefba24593001752a7efc6faa020445474b71a5e778a&  |
cdn.discordapp.com |
2024-10-13 17:06:02 |
| Name |
VAddress |
VSize |
Size |
SHA1 |
MD5 |
Suspicious |
| .text |
0x1000 |
0x32f08 |
208896 |
cb3fe2329b62e448074480a8ad774484a1b5aae7 |
94ffc4c67396ab3b8b1434957f7930fc |
|
| .rdata |
0x34000 |
0x537d6 |
342016 |
109ca089fc9ebfe756519e9a8a57e2df8de6fd0d |
001d14d42c50f2255323fd9cbfc39d95 |
|
| .data |
0x88000 |
0x49d0 |
12800 |
5e96e2fc8a88de5b18706aeb3ab3eec8efc8dd6f |
e745a2ad01b6fed5b47ff7cb5e375d79 |
|
| .pdata |
0x8d000 |
0x2130 |
8704 |
6e0525375831eaf3c1c003f849536c6311ca6599 |
f8425c92e35aa1b6a22109223c4d8b55 |
|
| .reloc |
0x90000 |
0x6d8 |
2048 |
67be84f5bc315cfe03b312afea9d2c2815512033 |
8d24fbc1496d0b715f2b30e3dedc4c59 |
|
| GetLastError |
| IsDebuggerPresent |
| IsProcessorFeaturePresent |
| RaiseException |
| TerminateProcess |
| UnhandledExceptionFilter |
Strings analysis - File found
| Library |
| mscoree.dll |
| ntdll.dll |
| USER32.dll |
| KERNEL32.dll |