bat[.]dll | Triage™

Sharing

Copy URL Twitter E-mail

General

Target
bat.dll
Size 640KB
Sample220401-g3q7tsbfal
SHA256 5ae31883de2fa4af8cfdfd73d3a198e0beaf0bffb0ceacf3cdf0e39f4f2956a1
MD5 d9fea44e26333f59d383c74a81a4b770
SHA1 df2f03a244d0f869d76e356617c46e7a0ccea6b9
SHA512 8aa0e5cb758ce8fb625ba9a013638aac45aec40fa3e093a57f1ce2584451039fb542fccae3cb5c5a9a8d3cb64ded3cb4a385998e6c445a44827d02b4d6dadf40
SSDEEP 6144:/6ZMFXzqfoSHr/mvcQYbi2HN8C8BgifO7y7ycuVqrWLWN7Ypsi6Ih9vH0/oUHahE:/8MFX47ivcQMNsrDjKJjO69cI
MD5 SHA1 SHA512 SSDEEP

Score

N/A

Malware Config

Signatures

File Explorer

bat.dll

.dll 640KB

bat.dll

IMPHASH d63ab94f4bb6b5d2f0f6092bf07e00ac
SHA256 5ae31883de2fa4af8cfdfd73d3a198e0beaf0bffb0ceacf3cdf0e39f4f2956a1
MD5 d9fea44e26333f59d383c74a81a4b770
SHA1 df2f03a244d0f869d76e356617c46e7a0ccea6b9
SHA512 8aa0e5cb758ce8fb625ba9a013638aac45aec40fa3e093a57f1ce2584451039fb542fccae3cb5c5a9a8d3cb64ded3cb4a385998e6c445a44827d02b4d6dadf40
SSDEEP 6144:/6ZMFXzqfoSHr/mvcQYbi2HN8C8BgifO7y7ycuVqrWLWN7Ypsi6Ih9vH0/oUHahE:/8MFX47ivcQMNsrDjKJjO69cI
MD5 SHA1 SHA512 SSDEEP

regsvr32 windows x86

Minor OS version

Major OS version

Entry point

70428

Magic Number

267

Subsystem

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE

PDB paths

kernel32

RtlUnwind GetSystemTimeAsFileTime GetCommandLineA TerminateProcess HeapReAlloc HeapSize HeapDestroy HeapCreate VirtualFree IsBadWritePtr SetHandleCount GetStdHandle GetFileType GetStartupInfoA FreeEnvironmentStringsA GetEnvironmentStrings FreeEnvironmentStringsW GetEnvironmentStringsW VirtualQuery QueryPerformanceCounter GetCurrentProcessId SetUnhandledExceptionFilter LCMapStringA LCMapStringW GetStringTypeA GetStringTypeW GetTimeZoneInformation IsBadReadPtr IsBadCodePtr SetStdHandle SetEnvironmentVariableA GetSystemInfo VirtualAlloc VirtualProtect HeapFree HeapAlloc GetTickCount SystemTimeToFileTime LocalFileTimeToFileTime FileTimeToLocalFileTime FileTimeToSystemTime GetOEMCP GetCPInfo GetShortPathNameA CreateFileA GetVolumeInformationA FindFirstFileA FindClose GetCurrentProcess DuplicateHandle GetFileSize SetEndOfFile UnlockFile LockFile FlushFileBuffers SetFilePointer WriteFile ReadFile DeleteFileA MoveFileA GetCurrentDirectoryA GlobalFlags TlsFree LocalReAlloc TlsSetValue TlsAlloc TlsGetValue EnterCriticalSection GlobalHandle GlobalReAlloc LeaveCriticalSection LocalAlloc InterlockedIncrement InterlockedDecrement DeleteCriticalSection InitializeCriticalSection RaiseException GetDiskFreeSpaceA GetFullPathNameA GetTempFileNameA GetFileTime SetFileTime GetFileAttributesA GlobalGetAtomNameA GlobalFindAtomA lstrcatA lstrcmpW GetPrivateProfileStringA WritePrivateProfileStringA GetPrivateProfileIntA CloseHandle GlobalAddAtomA GetCurrentThread GetCurrentThreadId FreeLibrary GlobalDeleteAtom lstrcmpA GetModuleFileNameA GetModuleHandleA GetProcAddress ConvertDefaultLocale EnumResourceLanguagesA lstrcpyA LoadLibraryA FreeResource SetLastError GlobalFree FindResourceA LoadResource LockResource SizeofResource MulDiv GlobalAlloc GlobalLock GlobalUnlock FormatMessageA lstrcpynA LocalFree ExitProcess GetStringTypeExA CompareStringW CompareStringA lstrlenA lstrcmpiA GetVersion GetLastError WideCharToMultiByte MultiByteToWideChar GetVersionExA GetThreadLocale GetLocaleInfoA GetACP UnhandledExceptionFilter InterlockedExchange

user32

KillTimer WindowFromPoint GetDCEx LockWindowUpdate RegisterClipboardFormatA PostThreadMessageA SetRect CharNextA DestroyIcon EndPaint BeginPaint GetWindowDC ClientToScreen GrayStringA DrawTextExA DrawTextA TabbedTextOutA FillRect LoadCursorA GetSysColorBrush SetParent GetSystemMenu DeleteMenu IsRectEmpty IsZoomed GetDC ReleaseDC LoadMenuA DestroyMenu UnpackDDElParam ReuseDDElParam ReleaseCapture LoadAcceleratorsA InsertMenuItemA CreatePopupMenu SetRectEmpty BringWindowToTop SetMenu TranslateAcceleratorA InvalidateRect RegisterWindowMessageA WinHelpA GetCapture CreateWindowExA GetClassLongA GetClassNameA SetPropA GetPropA RemovePropA IsChild GetForegroundWindow BeginDeferWindowPos EndDeferWindowPos GetTopWindow UnhookWindowsHookEx GetMessageTime GetMessagePos LoadIconA MapWindowPoints TrackPopupMenu SetForegroundWindow SetTimer GetClientRect GetMenu GetSysColor AdjustWindowRectEx ScreenToClient EqualRect DeferWindowPos GetClassInfoA RegisterClassA UnregisterClassA DefWindowProcA CallWindowProcA OffsetRect IntersectRect SystemParametersInfoA IsIconic GetWindowPlacement GetWindowRect CopyRect PtInRect GetWindow SetWindowContextHelpId MapDialogRect wsprintfA GetWindowTextLengthA GetWindowTextA SetWindowPos CharUpperA UpdateWindow EnableWindow SendMessageA GetClassInfoExA GetSubMenu GetMenuItemCount InsertMenuA GetMenuItemID AppendMenuA SetFocus ShowWindow MoveWindow SetWindowLongA GetDlgCtrlID SetWindowTextA IsDialogMessageA SendDlgItemMessageA GetMenuItemInfoA InflateRect SetMenuItemBitmaps GetFocus ModifyMenuA EnableMenuItem CheckMenuItem GetMenuCheckMarkDimensions LoadBitmapA SetWindowsHookExA CallNextHookEx GetMessageA TranslateMessage MessageBeep GetNextDlgGroupItem SetCapture InvalidateRgn CopyAcceleratorTableA GetMenuStringA GetMenuState EndDialog GetNextDlgTabItem GetParent IsWindowEnabled GetDlgItem GetWindowLongA IsWindow DestroyWindow CreateDialogIndirectParamA GetSystemMetrics SetActiveWindow GetActiveWindow GetDesktopWindow PostQuitMessage PostMessageA SetCursor ShowOwnedPopups GetLastActivePopup MessageBoxA ValidateRect GetCursorPos PeekMessageA GetKeyState IsWindowVisible DispatchMessageA

gdi32

CreateSolidBrush CreateFontIndirectA GetBkColor GetTextColor GetStockObject GetRgnBox PatBlt SetRectRgn CombineRgn GetMapMode CreatePatternBrush ExtSelectClipRgn ScaleWindowExtEx SetWindowExtEx ScaleViewportExtEx SetViewportExtEx OffsetViewportOrgEx SetViewportOrgEx Escape ExtTextOutA TextOutA RectVisible PtVisible GetPixel BitBlt GetWindowExtEx CreateRectRgnIndirect GetDeviceCaps CreateRectRgn SelectClipRgn IntersectClipRect ExcludeClipRect SetMapMode SetBkMode RestoreDC SaveDC GetTextExtentPoint32A GetTextMetricsA CreateFontA GetCharWidthA DeleteObject SelectObject StretchDIBits DeleteDC CreateCompatibleDC CreateCompatibleBitmap GetObjectA SetBkColor SetTextColor GetClipBox CreateBitmap GetViewportExtEx

comdlg32

GetSaveFileNameA GetFileTitleA GetOpenFileNameA

winspool.drv

OpenPrinterA DocumentPropertiesA ClosePrinter

advapi32

GetFileSecurityA RegSetValueA RegOpenKeyA RegQueryValueExA RegOpenKeyExA RegDeleteKeyA RegEnumKeyA RegQueryValueA RegCreateKeyExA RegSetValueExA RegDeleteValueA RegCreateKeyA RegCloseKey SetFileSecurityA

shell32

DragQueryFileA ExtractIconA SHGetFileInfoA DragFinish

comctl32

ord17 ImageList_Draw ImageList_GetImageInfo ImageList_Destroy

shlwapi

PathFindFileNameA PathStripToRootA PathFindExtensionA PathIsUNCA

oledlg

ord8

ole32

CreateILockBytesOnHGlobal StgCreateDocfileOnILockBytes StgOpenStorageOnILockBytes CoGetClassObject CLSIDFromString CLSIDFromProgID CoTaskMemFree OleUninitialize CoFreeUnusedLibraries CoRegisterMessageFilter OleFlushClipboard OleIsCurrentClipboard CoRevokeClassObject CoTaskMemAlloc OleInitialize

oleaut32

SysAllocStringLen VariantClear VariantChangeType VariantInit SysStringLen SysAllocStringByteLen OleCreateFontIndirect SystemTimeToVariantTime SafeArrayDestroy SysAllocString VariantCopy SysFreeString