IFITnG[.]dll | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
IFITnG.dll
Size 520KB
Sample220202-jvd9eahgd6
SHA256 894d1b78b0edde55ac98759f1bade1f2e5d15e41fa7f9dbd0ff68af7ade62ecb
MD5 48c176cdcac54179994808950c8dc160
SHA1 356655da01edd9ef31a8e9abe4dc88f7cdc3000e
SHA512 18b9bb36f0fb37aca0b97432b27f3d538252d5d55df554e10c936e39e98284cf52511e319bfa06c5d90c1c1dfc797518baee42bd0dc735cda58b4dd12369c0d8
SSDEEP 12288:fGsy6sTuYND0D/SAzblQC1O1/1Q1/1s1c1P1T1V19Z1g1t1o1Z1nidamdRr5fIR:fFy6iND0D/nl/1O1/1Q1/1s1c1P1T1V
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

IFITnG.dll

.dll 520KB

IFITnG.dll

IMPHASH 4f614d8b5d6db43e16a7179103e38ad8
SHA256 894d1b78b0edde55ac98759f1bade1f2e5d15e41fa7f9dbd0ff68af7ade62ecb
MD5 48c176cdcac54179994808950c8dc160
SHA1 356655da01edd9ef31a8e9abe4dc88f7cdc3000e
SHA512 18b9bb36f0fb37aca0b97432b27f3d538252d5d55df554e10c936e39e98284cf52511e319bfa06c5d90c1c1dfc797518baee42bd0dc735cda58b4dd12369c0d8
SSDEEP 12288:fGsy6sTuYND0D/SAzblQC1O1/1Q1/1s1c1P1T1V19Z1g1t1o1Z1nidamdRr5fIR:fFy6iND0D/nl/1O1/1Q1/1s1c1P1T1V
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

137953

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths

setupapi

SetupDiGetClassDevsA SetupDiGetDeviceRegistryPropertyA SetupDiEnumDeviceInterfaces SetupDiGetDeviceInterfaceDetailA SetupDiDestroyDeviceInfoList

kernel32

GetOEMCP FileTimeToLocalFileTime GetFileAttributesA GetFileSizeEx GetFileTime GetTickCount RtlUnwind RaiseException GetCommandLineA GetSystemInfo HeapReAlloc Sleep ExitProcess HeapSize GetACP IsValidCodePage TerminateProcess UnhandledExceptionFilter SetUnhandledExceptionFilter IsDebuggerPresent GetCPInfo HeapDestroy GetStdHandle SetHandleCount GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW QueryPerformanceCounter GetSystemTimeAsFileTime InitializeCriticalSectionAndSpinCount GetStringTypeA GetStringTypeW GetTimeZoneInformation LCMapStringA LCMapStringW GetConsoleCP GetConsoleMode SetStdHandle WriteConsoleA GetConsoleOutputCP WriteConsoleW CompareStringW SetEnvironmentVariableA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile GlobalFlags WritePrivateProfileStringA FileTimeToSystemTime GetThreadLocale InterlockedIncrement TlsFree DeleteCriticalSection LocalReAlloc TlsSetValue TlsAlloc InitializeCriticalSection GlobalHandle GlobalReAlloc EnterCriticalSection TlsGetValue LeaveCriticalSection LocalAlloc InterlockedDecrement GlobalGetAtomNameA GlobalFindAtomA lstrcmpW FreeResource GetCurrentProcessId GlobalAddAtomA GlobalDeleteAtom GetCurrentThread GetCurrentThreadId ConvertDefaultLocale EnumResourceLanguagesA GetModuleFileNameA GetLocaleInfoA CompareStringA InterlockedExchange lstrcmpA GetModuleHandleA GlobalFree GlobalAlloc GlobalLock GlobalUnlock FormatMessageA LocalFree MultiByteToWideChar MulDiv lstrlenA OutputDebugStringA FindResourceW GetModuleHandleW HeapAlloc GetProcessHeap HeapFree FreeLibrary GetProcAddress LoadLibraryA IsBadReadPtr VirtualProtect SetLastError VirtualAlloc VirtualFree VirtualQuery GetVersionExA CreateFileA CloseHandle GetLastError WideCharToMultiByte FindResourceA LoadResource LockResource SizeofResource HeapCreate

user32

RegisterClipboardFormatA PostThreadMessageA SetRect IsRectEmpty CopyAcceleratorTableA CharNextA CharUpperA ReleaseCapture SetCapture LoadCursorA GetSysColorBrush EndPaint BeginPaint GetWindowDC ReleaseDC GetDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA DestroyMenu ShowWindow MoveWindow SetWindowTextA IsDialogMessageA RegisterWindowMessageA SendDlgItemMessageA WinHelpA IsChild GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA GetWindowTextA GetForegroundWindow GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos MapWindowPoints SetMenu SetForegroundWindow UpdateWindow CreateWindowExA GetClassInfoExA GetClassInfoA RegisterClassA GetSysColor AdjustWindowRectEx EqualRect CopyRect PtInRect GetDlgCtrlID DefWindowProcA CallWindowProcA GetMenu SetWindowLongA OffsetRect IntersectRect SystemParametersInfoA DrawIcon AppendMenuA SendMessageA GetSystemMenu GetWindowPlacement GetWindowRect GetWindow SetWindowContextHelpId MapDialogRect SetWindowPos GetDesktopWindow SetActiveWindow CreateDialogIndirectParamA DestroyWindow IsWindow GetDlgItem GetNextDlgTabItem EndDialog GetWindowThreadProcessId GetWindowLongA MessageBeep GetNextDlgGroupItem InvalidateRgn SetFocus InvalidateRect IsIconic GetClientRect EnableWindow LoadIconA GetSystemMetrics GetSubMenu GetMenuItemCount GetMenuItemID GetMenuState PostQuitMessage PostMessageA CheckMenuItem EnableMenuItem ModifyMenuA GetParent GetFocus LoadBitmapA GetMenuCheckMarkDimensions SetMenuItemBitmaps ValidateRect GetCursorPos PeekMessageA GetKeyState IsWindowVisible GetActiveWindow DispatchMessageA TranslateMessage GetMessageA CallNextHookEx SetWindowsHookExA SetCursor MessageBoxA IsWindowEnabled GetLastActivePopup GetCapture

gdi32

ExtSelectClipRgn DeleteDC GetStockObject GetBkColor GetTextColor CreateRectRgnIndirect GetRgnBox GetMapMode ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx GetClipBox CreateBitmap GetDeviceCaps Escape TextOutA RectVisible PtVisible GetWindowExtEx GetViewportExtEx DeleteObject SetMapMode RestoreDC SaveDC ExtTextOutA GetObjectA SetBkColor SetTextColor SelectObject

comdlg32

GetFileTitleA

winspool.drv

DocumentPropertiesA ClosePrinter OpenPrinterA

advapi32

RegOpenKeyA RegSetValueExA RegCreateKeyExA RegQueryValueA RegCloseKey RegEnumKeyA RegDeleteKeyA RegEnumKeyExA RegOpenKeyExA RegQueryValueExA

comctl32

ord17

shlwapi

PathFindFileNameA PathStripToRootA PathIsUNCA PathFindExtensionA

oledlg

ord8

ole32

CoRevokeClassObject OleInitialize CoFreeUnusedLibraries OleUninitialize CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject OleIsCurrentClipboard CLSIDFromString CLSIDFromProgID CoTaskMemAlloc CoTaskMemFree OleFlushClipboard CoRegisterMessageFilter

oleaut32

SysStringLen SysFreeString SysAllocStringByteLen SysAllocString SysAllocStringLen VariantClear VariantChangeType VariantInit VariantCopy SafeArrayDestroy VariantTimeToSystemTime SystemTimeToVariantTime OleCreateFontIndirect