General

Malware Config

Signatures

Files

• colorui.dll

  .dll regsvr32 windows x86

  819bafeed839d2c395e6015fe119e65b

  
  

  Headers

  DLL Characteristics

  IMAGE_DLLCHARACTERISTICS_NX_COMPAT

  File Characteristics

  IMAGE_FILE_EXECUTABLE_IMAGE

  IMAGE_FILE_32BIT_MACHINE

  Imports

  msvcrt

  free

  memcpy_s

  wcsncpy_s

  ??_U@YAPAXI@Z

  memset

  ??3@YAXPAX@Z

  _wcsicmp

  _vsnwprintf

  _ltow_s

  ??2@YAPAXI@Z

  ??_V@YAXPAX@Z

  _purecall

  malloc

  _onexit

  _lock

  __dllonexit

  _unlock

  _errno

  realloc

  _except_handler4_common

  _amsg_exit

  _initterm

  _XcptFilter

  kernel32

  RaiseException

  EnterCriticalSection

  LeaveCriticalSection

  InitializeCriticalSection

  DeleteCriticalSection

  DisableThreadLibraryCalls

  LocalFree

  CloseHandle

  ReleaseMutex

  WaitForSingleObject

  GetLastError

  CreateMutexW

  GetCommandLineW

  lstrlenW

  InterlockedIncrement

  InterlockedDecrement

  LoadLibraryW

  GetModuleHandleW

  lstrcmpiW

  FreeLibrary

  MultiByteToWideChar

  SizeofResource

  DeactivateActCtx

  FindResourceW

  LoadLibraryExW

  GetModuleFileNameW

  SetFileAttributesW

  GetFileAttributesW

  lstrcmpW

  GetCurrentProcessId

  SetLastError

  FormatMessageW

  GetDateFormatW

  GetCurrentProcess

  GetVersionExA

  InterlockedExchange

  Sleep

  InterlockedCompareExchange

  QueryPerformanceCounter

  GetTickCount

  GetCurrentThreadId

  GetSystemTimeAsFileTime

  TerminateProcess

  UnhandledExceptionFilter

  SetUnhandledExceptionFilter

  OutputDebugStringA

  CreateActCtxW

  ReleaseActCtx

  LoadResource

  ActivateActCtx

  GetProcAddress

  shell32

  ShellExecuteW

  CommandLineToArgvW

  ShellExecuteExW

  ord258

  SHGetDesktopFolder

  winspool.drv

  EnumPrintersW

  OpenPrinterW

  ClosePrinter

  user32

  TrackPopupMenuEx

  RemoveMenu

  GetSubMenu

  GetWindowRect

  EnableWindow

  SendMessageW

  GetMonitorInfoW

  EnumDisplayMonitors

  GetParent

  SetWindowTextW

  EnumDisplayDevicesW

  SetFocus

  GetSystemMetrics

  PostMessageW

  RegisterClipboardFormatW

  EndDialog

  PostQuitMessage

  UnregisterClassA

  CharPrevW

  LoadCursorW

  RegisterClassW

  UpdateWindow

  SetTimer

  DestroyWindow

  GetWindowTextW

  GetClientRect

  BeginPaint

  EndPaint

  GetDC

  SetWindowRgn

  ReleaseDC

  DefWindowProcW

  LoadMenuW

  LoadIconW

  GetWindowLongW

  SetWindowLongW

  GetDlgItem

  GetWindowPlacement

  SetWindowPlacement

  ShowWindow

  SetDlgItemTextW

  ChangeWindowMessageFilterEx

  OpenIcon

  SetForegroundWindow

  SetWindowPos

  CallWindowProcW

  CharNextW

  RegisterWindowMessageW

  FindWindowW

  GetWindowThreadProcessId

  AllowSetForegroundWindow

  SendMessageTimeoutW

  CreateWindowExW

  DialogBoxParamW

  LoadStringW

  RedrawWindow

  ole32

  HWND_UserFree

  HWND_UserUnmarshal

  HWND_UserMarshal

  HWND_UserSize

  CoInitializeEx

  CoTaskMemAlloc

  CoTaskMemRealloc

  CoCreateInstance

  CoTaskMemFree

  CoGetObject

  StringFromGUID2

  ReleaseStgMedium

  CoUninitialize

  gdi32

  PatBlt

  SelectObject

  GetTextExtentPointW

  SetTextColor

  CreateFontIndirectW

  PathToRegion

  StrokePath

  DeleteObject

  CreatePen

  EndPath

  TextOutW

  SetBkMode

  BeginPath

  advapi32

  RegEnumKeyExW

  RegQueryInfoKeyW

  RegSetValueExW

  GetTokenInformation

  GetFileSecurityW

  OpenProcessToken

  DuplicateToken

  AccessCheck

  RegQueryValueExW

  RegCloseKey

  RegDeleteValueW

  RegCreateKeyExW

  RegOpenKeyExW

  shlwapi

  StrRetToStrW

  PathFindFileNameW

  mscms

  InternalRefreshCalibration

  InternalGetDeviceConfig

  WcsGetUsePerUserProfiles

  ColorCplSetUsePerUserProfiles

  WcsGetDefaultColorProfile

  ColorCplHasSystemWideAssociationListChanged

  ColorCplResetSystemWideAssociationListChangedWarning

  ColorCplMergeAssociationLists

  ColorCplOverwritePerUserAssociationList

  ColorCplSaveAssociationList

  ColorCplGetDefaultProfileScope

  ColorCplGetDefaultRenderingIntentScope

  ColorCplReleaseProfileProperties

  WcsGetCalibrationManagementState

  GetColorDirectoryW

  WcsEnumColorProfilesSize

  WcsEnumColorProfiles

  InstallColorProfileW

  UninstallColorProfileW

  InternalWcsAssociateColorProfileWithDevice

  WcsDisassociateColorProfileFromDevice

  WcsSetDefaultColorProfile

  WcsSetDefaultRenderingIntent

  InternalSetDeviceConfig

  ColorCplLoadAssociationList

  WcsSetCalibrationManagementState

  ColorCplUninitialize

  WcsGetDefaultRenderingIntent

  WcsGpCanInstallOrUninstallProfiles

  ColorCplGetProfileProperties

  ColorCplInitialize

  oleaut32

  SysStringLen

  SysAllocString

  VarUI4FromStr

  SysFreeString

  rpcrt4

  IUnknown_AddRef_Proxy

  IUnknown_QueryInterface_Proxy

  NdrOleFree

  CStdStubBuffer_QueryInterface

  NdrOleAllocate

  CStdStubBuffer_AddRef

  CStdStubBuffer_Connect

  CStdStubBuffer_Disconnect

  CStdStubBuffer_Invoke

  CStdStubBuffer_IsIIDSupported

  CStdStubBuffer_CountRefs

  NdrDllGetClassObject

  NdrDllCanUnloadNow

  NdrCStdStubBuffer_Release

  NdrDllRegisterProxy

  NdrDllUnregisterProxy

  IUnknown_Release_Proxy

  CStdStubBuffer_DebugServerQueryInterface

  CStdStubBuffer_DebugServerRelease

  setupapi

  SetupDiEnumDeviceInfo

  SetupDiGetDeviceRegistryPropertyW

  SetupDiGetClassDevsW

  SetupDiDestroyDeviceInfoList

  SetupDiGetDevicePropertyW

  ntdll

  WinSqmAddToStream

  Exports

  Exports

  DllCanUnloadNow

  DllGetClassObject

  DllMain

  DllRegisterServer

  DllUnregisterServer

  LaunchColorCpl

  Sections

  .orpc

  Size: 512B - Virtual size: 51B

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .text

  Size: 64KB - Virtual size: 63KB

  IMAGE_SCN_CNT_CODE

  IMAGE_SCN_MEM_EXECUTE

  IMAGE_SCN_MEM_READ

  .data

  Size: 1024B - Virtual size: 2KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  IMAGE_SCN_MEM_WRITE

  .rsrc

  Size: 807KB - Virtual size: 806KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_READ

  .reloc

  Size: 6KB - Virtual size: 5KB

  IMAGE_SCN_CNT_INITIALIZED_DATA

  IMAGE_SCN_MEM_DISCARDABLE

  IMAGE_SCN_MEM_READ