data[.]dll | Triage

Sharing

Copy URL

Twitter E-mail

General

Target

data.dll
Size

568KB
MD5

af31e31bf5757d81cf20626d777c71a6
SHA1

f67586fb95f9361998bd8cf5c64991c4add6afae
SHA256

bca95f8c72826187d1eddc4615ec6f99acbe9ac233ec5bb11bba7b726a2c5c02
SHA512

c58ad9d314d4f09c945b593f6763c821f21c4f535e1b1f41b847b895abfbea70ef90d73aa902c5fbf7b788b94d046ca3449e0c54e1cc8c0835b9fc829cc93bde
SSDEEP

12288:r5lPCmVhd++73OV6PT+foSUQ6/n7OWlAEdbM:rrPxhd++73OV6001nChE

Score

N/A

Malware Config

Signatures

Files

data.dll
.dll regsvr32 windows x64

49f0cc6a9b25d882f55101844acf742a

Code Sign

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

kernel32

GetThreadErrorMode
GetCurrentThreadId
GetUserDefaultUILanguage
TlsAlloc
GetCurrentProcess
GetErrorMode
GetCurrentProcessorNumber
GetThreadUILanguage
GetLargePageMinimum
UnregisterApplicationRecoveryCallback
GetEnvironmentStringsW
GetThreadLocale
UnregisterApplicationRestart
GetCurrentThread
VirtualAlloc
GetACP
IsDebuggerPresent
GetTickCount
SwitchToThread
GetSystemDefaultLangID
GetSystemDefaultUILanguage
GetLogicalDrives
GetUserDefaultLangID
RaiseException
GetLastError
InitializeCriticalSectionEx
DeleteCriticalSection
DecodePointer
MultiByteToWideChar
LoadResource
SizeofResource
IsSystemResumeAutomatic
GetModuleHandleW
GetProcAddress
LoadLibraryExW
GetModuleFileNameW
lstrcmpiW
FreeLibrary
WriteConsoleW
CreateFileW
SetStdHandle
FreeEnvironmentStringsW
GetCommandLineW
GetOEMCP
IsValidCodePage
FindNextFileW
FindFirstFileExW
ReadConsoleW
GetConsoleMode
GetConsoleCP
WriteFile
FlushFileBuffers
SetFilePointerEx
GetFileSizeEx
HeapReAlloc
HeapSize
GetFileType
GetStdHandle
EnumSystemLocalesW
GetProcessHeap
GetCommandLineA
CloseHandle
ReadFile
FindClose
GetTickCount64
FindResourceW
LoadLibraryA
GetUserDefaultLCID
IsValidLocale
RtlUnwind
GetLocaleInfoW
LCMapStringW
HeapAlloc
HeapFree
GetModuleHandleExW
ExitProcess
TerminateProcess
TlsFree
TlsSetValue
TlsGetValue
InitializeCriticalSectionAndSpinCount
SetLastError
InterlockedFlushSList
RtlPcToFileHeader
RtlUnwindEx
OutputDebugStringW
GetCPInfo
RtlCaptureContext
RtlLookupFunctionEntry
RtlVirtualUnwind
UnhandledExceptionFilter
SetUnhandledExceptionFilter
GetStartupInfoW
IsProcessorFeaturePresent
QueryPerformanceCounter
GetCurrentProcessId
GetSystemTimeAsFileTime
InitializeSListHead
WideCharToMultiByte
EnterCriticalSection
LeaveCriticalSection
EncodePointer
LCMapStringEx
GetStringTypeW

user32

GetMessageExtraInfo
GetDesktopWindow
DestroyCaret
GetMenuCheckMarkDimensions
CloseClipboard
GetCursor
GetDialogBaseUnits
GetClipboardViewer
EmptyClipboard
CountClipboardFormats
AnyPopup
SetProcessDPIAware
GetForegroundWindow
GetFocus
GetMessageTime
IsProcessDPIAware
SetCursor
GetOpenClipboardWindow
GetShellWindow
LoadCursorW
CharNextW
GetClipboardSequenceNumber

gdi32

GdiFlush

advapi32

RegQueryInfoKeyW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegDeleteValueW
RegDeleteKeyW
RegCreateKeyExW
RegOpenKeyExW

shell32

InitNetworkAddressControl

ole32

CoTaskMemRealloc
CoCreateInstance
CoTaskMemFree
CoTaskMemAlloc
CoFreeUnusedLibraries

oleaut32

VarUI4FromStr

winmm

waveInOpen

wininet

InternetQueryDataAvailable

Exports

Exports

DllGetClassObject
DllRegisterServer
PluginInit
adglamaavv
aljjklu
cbijdiosmrzsi
cduzbkbig
cejrrruvu
cqsakvegszymmzym
cxyhddgolad
czhcwlsdztko
dvnxjudse
effxwzmsbspqb
fcxehgbzevigwbsfg
fmgtrpfmzdcng
fzbavgd
godmintrxtyqobju
hbpuaipk
hnbyxfgnox
jowajuxcpqxn
ldiwfqkbpjntfdumf
lxfeiyzm
owyyvphxkzseks
pxafedjp
rayqsqbigvn
sfvkrhrfi
sgnjesxazdpr
srkkoucdrau
twtxanu
udrrugszwuvasfb
vkquyjqdormdzjzte
vywrnuylbbizem
werocwc
wqyeoizmtu
wysgcjfvta
xddtznrsmcbfelhrw
xggnbkvwooq
xnvetdjwxi
xszslidec
xyekftnodvzexnvus
xyvkixedjkx
yahlcew
ymzzpnpn
yzqulshswkqtt
zdyiulpkwtip
ziomtqwsugsrab
zneudiofekoypozms
zssrgoqacrxnw

Sections

.text
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 247KB - Virtual size: 247KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 17KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

_RDATA
Size: 512B - Virtual size: 252B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 20KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

49f0cc6a9b25d882f55101844acf742a

Code Sign

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

winmm

wininet

Exports

Exports

Sections

.text Size: 268KB - Virtual size: 267KB

.rdata Size: 247KB - Virtual size: 247KB

.data Size: 17KB - Virtual size: 22KB

.pdata Size: 12KB - Virtual size: 11KB

_RDATA Size: 512B - Virtual size: 252B

.rsrc Size: 20KB - Virtual size: 19KB

.reloc Size: 2KB - Virtual size: 2KB

.text
Size: 268KB - Virtual size: 267KB

.rdata
Size: 247KB - Virtual size: 247KB

.data
Size: 17KB - Virtual size: 22KB

.pdata
Size: 12KB - Virtual size: 11KB

_RDATA
Size: 512B - Virtual size: 252B

.rsrc
Size: 20KB - Virtual size: 19KB

.reloc
Size: 2KB - Virtual size: 2KB