variant[.]dll | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
variant.dll
Size 880KB
Sample220327-gfc2padhc3
SHA256 e6b0eb89ccfb20843d4868e9fdccaa2f5d3b40d8d63ef51d88645391b79b0154
MD5 621c7583068db5bbe2e745513b3bd27a
SHA1 e52d5799fdbad950e336cd1a9152b2e7fea6a3f9
SHA512 48683225140d9312b76007a794430190dccfe75ed2aeb39a5c8b5eafeea465563f1f8ffe1c63edee2d52df5eae47fdb00d965e12862868cf379c6b8ac1d85f3c
MD5 SHA1 SHA512

Score

N/A

Malware Config

Signatures

File Explorer

variant.dll

.dll 880KB

variant.dll

IMPHASH 1e8e7e5b053a6113954e3e4d9100279c
SHA256 e6b0eb89ccfb20843d4868e9fdccaa2f5d3b40d8d63ef51d88645391b79b0154
MD5 621c7583068db5bbe2e745513b3bd27a
SHA1 e52d5799fdbad950e336cd1a9152b2e7fea6a3f9
SHA512 48683225140d9312b76007a794430190dccfe75ed2aeb39a5c8b5eafeea465563f1f8ffe1c63edee2d52df5eae47fdb00d965e12862868cf379c6b8ac1d85f3c
MD5 SHA1 SHA512

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

182186

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

VirtualQuery GetSystemTimeAsFileTime GetCommandLineA HeapReAlloc SetStdHandle GetFileType TerminateProcess ExitThread CreateThread HeapSize HeapDestroy HeapCreate VirtualFree FatalAppExitA IsBadWritePtr GetTimeZoneInformation SetHandleCount GetStdHandle GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings GetSystemInfo GetEnvironmentStringsW UnhandledExceptionFilter QueryPerformanceCounter GetTickCount GetCurrentProcessId SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW IsBadReadPtr IsBadCodePtr GetTimeFormatA GetDateFormatA GetUserDefaultLCID EnumSystemLocalesA IsValidLocale IsValidCodePage SetConsoleCtrlHandler GetLocaleInfoW SetEnvironmentVariableA VirtualAlloc VirtualProtect HeapAlloc RtlUnwind HeapFree GetDiskFreeSpaceA GetTempFileNameA LocalLock LocalUnlock SetErrorMode GetCurrentDirectoryA GetFileTime GetFileAttributesA SetFileAttributesA SetFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime SystemTimeToFileTime FileTimeToSystemTime GetOEMCP GetCPInfo TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc InterlockedIncrement GlobalFlags DeleteCriticalSection InitializeCriticalSection RaiseException GetShortPathNameA CreateFileA GetFullPathNameA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile MoveFileA CreateEventA SuspendThread SetEvent WaitForSingleObject ResumeThread SetThreadPriority CloseHandle GetCurrentThread lstrcmpA GetModuleFileNameA ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA InterlockedDecrement GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA GetCurrentThreadId GlobalGetAtomNameA GlobalAddAtomA GlobalFindAtomA GlobalDeleteAtom LoadLibraryA FreeLibrary lstrcatA lstrcmpW GetModuleHandleA GetProcAddress SetLastError CopyFileA MulDiv GlobalSize GlobalAlloc FormatMessageA LocalFree GlobalLock GlobalUnlock GlobalFree FreeResource LoadResource LockResource SizeofResource FindResourceA lstrcpynA GetLastError DeleteFileA ExitProcess lstrlenA lstrcmpiA lstrcmpiW GetStringTypeExA GetStringTypeExW lstrlenW WideCharToMultiByte CompareStringA CompareStringW GetEnvironmentVariableA MultiByteToWideChar GetEnvironmentVariableW GetVersion GetThreadLocale GetLocaleInfoA GetACP GetVersionExA FreeEnvironmentStringsW InterlockedExchange

user32

LockWindowUpdate SetCapture GetSystemMenu SetParent LoadCursorA GetDialogBaseUnits InflateRect DestroyMenu UnpackDDElParam ReuseDDElParam ReleaseCapture LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA GetMessageA TranslateMessage ValidateRect ShowOwnedPopups SetCursor PostQuitMessage EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA MapVirtualKeyA GetKeyNameTextA ReleaseDC GetDC wsprintfA ScrollWindowEx ShowWindow MoveWindow SetWindowTextA IsDialogMessageA IsDlgButtonChecked SetDlgItemTextA SetDlgItemInt GetDlgItemTextA GetDlgItemInt CheckRadioButton CheckDlgButton SetMenuItemBitmaps ModifyMenuA EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions WinHelpA GetCapture CreateWindowExA SetWindowsHookExA CallNextHookEx GetClassLongA GetClassInfoExA GetClassNameA SetPropA GetPropA RemovePropA SendDlgItemMessageA SetFocus GetDCEx GetWindowTextLengthA GetWindowTextA GetForegroundWindow GetLastActivePopup DispatchMessageA BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos PeekMessageA MapWindowPoints ScrollWindow MessageBoxA TrackPopupMenuEx TrackPopupMenu GetKeyState SetScrollRange GetScrollRange SetScrollPos GetScrollPos SetForegroundWindow ShowScrollBar IsWindowVisible GetMenu PostMessageA AdjustWindowRectEx RegisterWindowMessageA CharLowerW CharLowerA CharUpperW CharUpperA EnableWindow SendMessageA InvalidateRect GetClientRect DrawFocusRect DrawStateA LoadBitmapA FillRect GetSysColorBrush ScreenToClient EqualRect DeferWindowPos GetScrollInfo SetScrollInfo GetClassInfoA RegisterClassA UnregisterClassA SetWindowPlacement GetDlgCtrlID DefWindowProcA CallWindowProcA SetWindowLongA SetWindowPos OffsetRect WindowFromPoint KillTimer SetTimer GetTabbedTextExtentA SetRect MessageBeep IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect PtInRect GetWindow GetMenuState GetMenuStringA GetMenuItemID InsertMenuA GetMenuItemCount IsClipboardFormatAvailable UnionRect IsRectEmpty DestroyIcon IsChild DeleteMenu GetSysColor GetFocus CopyRect UpdateWindow GetParent LoadIconA SetMenuItemInfoA GetMenuItemInfoA AppendMenuA GetSubMenu LoadMenuA GetCursorPos EndDialog GetNextDlgTabItem IsWindowEnabled GetDlgItem GetWindowLongA IsWindow RemoveMenu GetDesktopWindow GetActiveWindow SetActiveWindow GetSystemMetrics CreateDialogIndirectParamA DestroyWindow

gdi32

SelectPalette PlayMetaFileRecord GetObjectType EnumMetaFile PlayMetaFile CreatePen ExtCreatePen CreateSolidBrush CreateHatchBrush CreateCompatibleBitmap CreateFontIndirectA GetTextMetricsA GetStockObject CombineRgn GetMapMode DPtoLP StretchDIBits GetCharWidthA CreateFontA GetBkColor StartPage EndPage SetAbortProc AbortDoc EndDoc CreateCompatibleDC CreatePatternBrush CreateDIBPatternBrushPt DeleteDC ExtSelectClipRgn PolyBezierTo PolylineTo PolyDraw ArcTo GetCurrentPositionEx ScaleWindowExtEx SetWindowExtEx OffsetWindowOrgEx SetWindowOrgEx ScaleViewportExtEx GetPixel SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx SelectObject Escape ExtTextOutA TextOutA RectVisible PtVisible SetRectRgn GetBitmapDimensionEx BitBlt GetWindowExtEx GetViewportExtEx SelectClipPath CreateRectRgn GetClipRgn SelectClipRgn DeleteObject SetColorAdjustment SetArcDirection SetMapperFlags SetTextCharacterExtra SetTextJustification SetTextAlign MoveToEx LineTo OffsetClipRgn IntersectClipRect ExcludeClipRect SetMapMode SetStretchBltMode SetROP2 SetPolyFillMode SetBkMode RestoreDC SaveDC PatBlt CreateBitmap GetObjectA SetBkColor SetTextColor GetClipBox GetDCOrgEx CreateDCA CopyMetaFileA GetDeviceCaps GetTextExtentPoint32A CreateRectRgnIndirect StartDocA

comdlg32

PageSetupDlgA FindTextA ReplaceTextA GetOpenFileNameA CommDlgExtendedError PrintDlgA GetFileTitleA GetSaveFileNameA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter GetJobA

advapi32

SetFileSecurityA RegSetValueA RegOpenKeyA RegCreateKeyExA RegOpenKeyExA RegQueryValueExA RegSetValueExA RegDeleteValueA RegDeleteKeyA RegEnumKeyA RegQueryValueA GetFileSecurityA RegCloseKey RegCreateKeyA

shell32

SHGetFileInfoA DragFinish DragQueryFileA ExtractIconA Shell_NotifyIconA

comctl32

ImageList_Draw ord17 ord13 ImageList_Read ImageList_Write ord14 ImageList_Destroy ImageList_Create ImageList_LoadImageA ImageList_Merge ImageList_GetImageInfo

shlwapi

PathRemoveExtensionA PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

ole32

WriteClassStg OleRegGetUserType SetConvertStg CoTaskMemFree ReadFmtUserTypeStg ReadClassStg StringFromCLSID CoTreatAsClass CreateBindCtx CoTaskMemAlloc ReleaseStgMedium OleDuplicateData CoDisconnectObject CoCreateInstance StringFromGUID2 CLSIDFromString WriteFmtUserTypeStg

oleaut32

VariantClear VariantChangeType VariantInit SysAllocStringLen SysFreeString SysStringLen SysAllocStringByteLen SysStringByteLen SafeArrayUnaccessData SafeArrayAccessData SafeArrayGetUBound SafeArrayGetLBound SafeArrayGetElemsize SafeArrayGetDim SafeArrayCreate SafeArrayRedim VariantCopy SafeArrayAllocData SafeArrayAllocDescriptor SafeArrayCopy SafeArrayGetElement SafeArrayPtrOfIndex SafeArrayPutElement SafeArrayLock SafeArrayUnlock SafeArrayDestroy SafeArrayDestroyData SafeArrayDestroyDescriptor VariantTimeToSystemTime SystemTimeToVariantTime SysAllocString SysReAllocStringLen VarDateFromStr VarBstrFromDec VarDecFromStr VarCyFromStr VarBstrFromCy VarBstrFromDate

Name

.text

Size

544KB

Virtual Size

540KB

Characteristics

IMAGE_SCN_CNT_CODE IMAGE_SCN_MEM_EXECUTE IMAGE_SCN_MEM_READ

Name

.rdata

Size

88KB

Virtual Size

85KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.data

Size

16KB

Virtual Size

30KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.idata

Size

16KB

Virtual Size

15KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.didat

Size

4KB

Virtual Size

793B

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ IMAGE_SCN_MEM_WRITE

Name

.rsrc

Size

148KB

Virtual Size

146KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_READ

Name

.reloc

Size

60KB

Virtual Size

56KB

Characteristics

IMAGE_SCN_CNT_INITIALIZED_DATA IMAGE_SCN_MEM_DISCARDABLE IMAGE_SCN_MEM_READ