blister | 7cd03b30cfeea07b5ea4c8976e6456cb65e09f6b8e7dcc68884379925681b1c4[.]dll

Resubmissions

07-07-2022 11:52

220707-n1ty9sfhgm 10

12-05-2022 04:07

220512-epmldadbdp 1

Sharing

Copy URL

Twitter E-mail

General

Target

7cd03b30cfeea07b5ea4c8976e6456cb65e09f6b8e7dcc68884379925681b1c4.dll
Size

603KB
MD5

f3e60f43ffae0656488bbea2861b0e31
SHA1

a3574879c1e0f8543571e22bf4f08ac784f69f54
SHA256

7cd03b30cfeea07b5ea4c8976e6456cb65e09f6b8e7dcc68884379925681b1c4
SHA512

397b4f0dbd720f4e62ccafd7e143f34e6d61f7fc131004aef64d1b769f712fe7b3cb10d657c9663e542098389b415ab834ce4a2bbe30c8bba655ce2c2c222615
SSDEEP

6144:o8ATpR2nC2z5mMFeKt5Secqr1LGYoKNU9Ne2xIAVmJbLSsT0pUj9:opDCiqcqrNZE1x5m5SsT0Wj9

Score

10^/10

loader blister

Malware Config

Signatures

Blister family
blister

Detect Blister loader x32 1 IoCs

loader

resource	yara_rule
sample	family_blister_x32

Files

7cd03b30cfeea07b5ea4c8976e6456cb65e09f6b8e7dcc68884379925681b1c4.dll
.dll regsvr32 windows x86

29f80928ee7828bb85147b1262d71265

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

msvcrt

_unlock
??_V@YAXPAX@Z
__CxxFrameHandler3
_purecall
memmove
realloc
free
??_U@YAPAXI@Z
memcpy
??2@YAPAXI@Z
_ftol2
_vsnwprintf
_wtoi
memset
malloc
_XcptFilter
_initterm
_except_handler4_common
_vsnprintf
??1type_info@@UAE@XZ
_onexit
_lock
__dllonexit
??3@YAXPAX@Z
?terminate@@YAXXZ
_amsg_exit

atl

ord15
ord23
ord22
ord18
ord21
ord16
ord32
ord30

advapi32

RegQueryValueExW
RegOpenKeyExA
RegQueryValueExA
RegOpenKeyW
RegCreateKeyExW
RegSetValueExW
RegEnumKeyExW
RegCloseKey
RegOpenKeyExW
RegDeleteKeyW
RegFlushKey

kernel32

Sleep
InterlockedCompareExchange
OutputDebugStringA
GetLocalTime
SetLastError
QueryPerformanceFrequency
QueryPerformanceCounter
GetTickCount
GetCurrentProcessId
GetSystemTimeAsFileTime
lstrcmpW
FreeLibrary
RegisterWaitForSingleObject
InitializeCriticalSectionAndSpinCount
DeleteFileW
CreateFileW
UnregisterWaitEx
TerminateProcess
UnhandledExceptionFilter
SetUnhandledExceptionFilter
InitializeCriticalSection
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
ReleaseSemaphore
CloseHandle
CreateSemaphoreW
WaitForSingleObject
GetLastError
CreateThread
InterlockedDecrement
WaitForMultipleObjects
SetThreadPriority
GetCurrentThread
GetSystemInfo
DuplicateHandle
GetCurrentProcess
ResetEvent
QueueUserAPC
SetEvent
CreateEventW
GetProcAddress
GetModuleHandleW
GetCurrentThreadId
DisableThreadLibraryCalls
InterlockedExchange

ole32

StringFromIID
CoCreateInstance
CoCreateFreeThreadedMarshaler
CLSIDFromString
CoTaskMemFree
StringFromCLSID
StringFromGUID2
CoTaskMemAlloc
CoUninitialize
CoInitializeEx
CoFreeUnusedLibraries
CoInitialize
CreateStreamOnHGlobal

oleaut32

SafeArrayPutElement
SetErrorInfo
LoadRegTypeLi
SafeArrayGetUBound
SafeArrayGetLBound
SafeArrayGetDim
SafeArrayGetElement
VariantCopy
VariantInit
SafeArrayCreate
SafeArrayDestroy
SysStringLen
SysFreeString
SysAllocString
VariantClear

rtutils

TraceRegisterExW
TraceVprintfExA
TraceDeregisterW

user32

DestroyWindow
DispatchMessageW
TranslateMessage
PeekMessageW
UnregisterDeviceNotification
MsgWaitForMultipleObjectsEx
RegisterDeviceNotificationW
RegisterClassW
SetWindowLongW
UnregisterClassW
DefWindowProcW
CreateWindowExW
LoadStringW
GetWindowLongW

winmm

timeGetTime

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 305KB - Virtual size: 305KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.data
Size: 5KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 273KB - Virtual size: 272KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 18KB - Virtual size: 18KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Resubmissions

Sharing

General

Malware Config

Signatures

Files

29f80928ee7828bb85147b1262d71265

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

atl

advapi32

kernel32

ole32

oleaut32

rtutils

user32

winmm

Exports

Exports

Sections

.text Size: 305KB - Virtual size: 305KB

.data Size: 5KB - Virtual size: 4KB

.rsrc Size: 273KB - Virtual size: 272KB

.reloc Size: 18KB - Virtual size: 18KB

.text
Size: 305KB - Virtual size: 305KB

.data
Size: 5KB - Virtual size: 4KB

.rsrc
Size: 273KB - Virtual size: 272KB

.reloc
Size: 18KB - Virtual size: 18KB