msvfw32 - copia[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

msvfw32 - copia.dll
Size

148KB
MD5

f3354260c4b1383c586da9affde33d6b
SHA1

2b911b3c59cc975fa081b88d4de21d345841dfb5
SHA256

7e09b985d0ce2e6cab125bfb88ea3f3f85e9de065bcf2c140c7ba6ca82ad5dc0
SHA512

9adf858c6d5f1601600294fb4c982ef0aa95cd386a98e17fb674619b2d38d330bcf46a27005e51ed0a967ec64e60bc86c3c3c40edaf8770fe8e2efdab83eda0e
SSDEEP

3072:myAoMfEgYZciuGjmtyOpDHn4RO9rK47Xx+9O3QIPf64gDyyJ:Sbf8u67074Rerv7Xx+9OAIcDy

Score

N/A

Malware Config

Signatures

Files

msvfw32 - copia.dll
.dll windows x64

1dedc92d79544da58a4f0c418f4ac57a

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_HIGH_ENTROPY_VA
IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT
IMAGE_DLLCHARACTERISTICS_GUARD_CF

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LARGE_ADDRESS_AWARE

Imports

msvcrt

_initterm
malloc
free
_amsg_exit
_vsnprintf
wcstol
__C_specific_handler
wcstombs
memmove
_vsnwprintf
_XcptFilter
memcmp
memcpy
memset

api-ms-win-core-synch-l1-1-0

EnterCriticalSection
LeaveCriticalSection
DeleteCriticalSection
InitializeCriticalSection

api-ms-win-core-libraryloader-l1-2-0

DisableThreadLibraryCalls
LoadStringW
GetModuleHandleW
GetProcAddress
GetModuleHandleA
GetModuleFileNameW
FreeLibrary

api-ms-win-core-registry-l1-1-0

RegOpenKeyExW
RegQueryValueExW
RegCloseKey
RegDeleteValueW
RegSetValueExW
RegQueryValueExA
RegCreateKeyExW
RegEnumValueW

api-ms-win-core-registry-l2-1-0

RegOpenKeyW
RegCreateKeyW
RegOpenKeyA

api-ms-win-core-string-obsolete-l1-1-0

lstrcmpiW
lstrlenW
lstrlenA

api-ms-win-core-atoms-l1-1-0

FindAtomA
DeleteAtom
AddAtomA
FindAtomW
AddAtomW

api-ms-win-core-localization-l1-2-0

GetACP

api-ms-win-core-string-l1-1-0

WideCharToMultiByte
MultiByteToWideChar

api-ms-win-core-heap-obsolete-l1-1-0

GlobalLock
GlobalUnlock
GlobalHandle
GlobalReAlloc

api-ms-win-core-privateprofile-l1-1-0

GetProfileStringW
GetPrivateProfileStringW
WritePrivateProfileStringW

api-ms-win-core-stringansi-l1-1-0

CharLowerA
CharLowerBuffA
CharUpperBuffA

api-ms-win-security-base-l1-1-0

FreeSid
CheckTokenMembership
AllocateAndInitializeSid

api-ms-win-core-errorhandling-l1-1-0

SetUnhandledExceptionFilter
UnhandledExceptionFilter

api-ms-win-core-processthreads-l1-1-0

TerminateProcess
GetCurrentThreadId
GetCurrentProcessId
GetCurrentProcess

api-ms-win-core-heap-l2-1-0

LocalFree
GlobalAlloc
LocalAlloc
GlobalFree

api-ms-win-core-libraryloader-l1-2-1

LoadLibraryA
LoadLibraryW

api-ms-win-core-heap-l1-1-0

GetProcessHeap
HeapAlloc

api-ms-win-core-largeinteger-l1-1-0

MulDiv

api-ms-win-core-string-l2-1-0

CharPrevW
CharLowerW
CharNextW
CharUpperBuffW

api-ms-win-core-sysinfo-l1-1-0

GetSystemTimeAsFileTime
GetSystemDirectoryW
GetTickCount

api-ms-win-core-file-l1-1-0

GetFullPathNameW

api-ms-win-core-synch-l1-2-0

Sleep

api-ms-win-core-rtlsupport-l1-1-0

RtlLookupFunctionEntry
RtlCaptureContext
RtlVirtualUnwind

api-ms-win-core-profile-l1-1-0

QueryPerformanceCounter

comctl32

ord17
CreateToolbarEx

gdi32

GetTextExtentPointW
CreateDIBitmap
CreateFontW
SetWindowOrgEx
SetWindowExtEx
CreatePatternBrush
SetTextColor
ExcludeClipRect
RestoreDC
DeleteMetaFile
CreateMetaFileW
CreateFontIndirectW
GetNearestColor
SetDIBits
GetDIBits
CreateSolidBrush
PatBlt
GetBitmapBits
GetPixel
SetBkColor
ExtTextOutW
Escape
CreateCompatibleBitmap
SelectObject
SaveDC
SetDIBColorTable
CreateCompatibleDC
GetDCOrgEx
GdiFlush
GetPaletteEntries
RealizePalette
StretchDIBits
GetStockObject
GetNearestPaletteIndex
GetClipBox
AnimatePalette
GetSystemPaletteEntries
DeleteDC
SetBitmapBits
SelectPalette
SetPaletteEntries
SetDIBitsToDevice
CreatePalette
GetObjectW
ResizePalette
SetStretchBltMode
LPtoDP
DeleteObject
UnrealizeObject
IntersectClipRect
GetDeviceCaps
CloseMetaFile
CreateDIBSection
StretchBlt

shell32

DragAcceptFiles
DragQueryFileW
DragFinish

user32

ReleaseDC
GetDC
EnableWindow
InvalidateRect
UpdateWindow
RegisterClipboardFormatW
GetKeyState
CallWindowProcW
PostMessageW
GetWindow
DestroyWindow
InflateRect
MessageBoxW
SetActiveWindow
DialogBoxParamW
CreateWindowExW
UnregisterClassW
SetWindowTextW
CreatePopupMenu
DrawIcon
SetDlgItemInt
SetScrollPos
TrackPopupMenu
GetClassInfoW
OpenClipboard
DestroyIcon
ClientToScreen
CloseClipboard
EmptyClipboard
PeekMessageW
RegisterClassW
GetDlgItemTextW
GetSysColor
CheckDlgButton
DefMDIChildProcW
DestroyMenu
IsRectEmpty
LoadIconW
GetClassNameW
SetClipboardData
GetDlgItem
SetWindowLongW
CheckMenuItem
IsZoomed
AppendMenuW
SetRect
GetDesktopWindow
GetSysColorBrush
GetClientRect
IsWindowUnicode
GetParent
PtInRect
IsIconic
GetCursorPos
SetScrollRange
BeginPaint
EndPaint
GetPropW
FillRect
RemovePropW
OffsetRect
SetTimer
SendDlgItemMessageW
GetDlgItemInt
SetPropW
SetRectEmpty
DrawTextW
KillTimer
SystemParametersInfoW
GetSystemMetrics
GetActiveWindow
WindowFromDC
GetWindowLongW
DefWindowProcW
SetCursor
GetWindowRect
GetMenu
SetWindowPos
SetWindowLongPtrW
LoadCursorW
IsDlgButtonChecked
ScreenToClient
AdjustWindowRect
SendMessageW
EndDialog
GetWindowLongPtrW
MoveWindow
GetScrollPos
ShowWindow
SetDlgItemTextW
SetWindowTextA

winmm

mciSendStringW
OpenDriver
GetDriverModuleHandle
mciGetErrorStringW
mciSendStringA
mciSendCommandW
CloseDriver
mciGetErrorStringA

Exports

Exports

DrawDibBegin
DrawDibChangePalette
DrawDibClose
DrawDibDraw
DrawDibEnd
DrawDibGetBuffer
DrawDibGetPalette
DrawDibOpen
DrawDibProfileDisplay
DrawDibRealize
DrawDibSetPalette
DrawDibStart
DrawDibStop
DrawDibTime
GetOpenFileNamePreview
GetOpenFileNamePreviewA
GetOpenFileNamePreviewW
GetSaveFileNamePreviewA
GetSaveFileNamePreviewW
ICClose
ICCompress
ICCompressorChoose
ICCompressorFree
ICDecompress
ICDraw
ICDrawBegin
ICGetDisplayFormat
ICGetInfo
ICImageCompress
ICImageDecompress
ICInfo
ICInstall
ICLocate
ICMThunk32
ICOpen
ICOpenFunction
ICRemove
ICSendMessage
ICSeqCompressFrame
ICSeqCompressFrameEnd
ICSeqCompressFrameStart
MCIWndCreate
MCIWndCreateA
MCIWndCreateW
MCIWndRegisterClass
StretchDIB
VideoForWindowsVersion

Sections

.text
Size: 94KB - Virtual size: 94KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 18KB - Virtual size: 17KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 27KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.pdata
Size: 2KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.rsrc
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 512B - Virtual size: 40B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1dedc92d79544da58a4f0c418f4ac57a

Headers

DLL Characteristics

File Characteristics

Imports

msvcrt

api-ms-win-core-synch-l1-1-0

api-ms-win-core-libraryloader-l1-2-0

api-ms-win-core-registry-l1-1-0

api-ms-win-core-registry-l2-1-0

api-ms-win-core-string-obsolete-l1-1-0

api-ms-win-core-atoms-l1-1-0

api-ms-win-core-localization-l1-2-0

api-ms-win-core-string-l1-1-0

api-ms-win-core-heap-obsolete-l1-1-0

api-ms-win-core-privateprofile-l1-1-0

api-ms-win-core-stringansi-l1-1-0

api-ms-win-security-base-l1-1-0

api-ms-win-core-errorhandling-l1-1-0

api-ms-win-core-processthreads-l1-1-0

api-ms-win-core-heap-l2-1-0

api-ms-win-core-libraryloader-l1-2-1

api-ms-win-core-heap-l1-1-0

api-ms-win-core-largeinteger-l1-1-0

api-ms-win-core-string-l2-1-0

api-ms-win-core-sysinfo-l1-1-0

api-ms-win-core-file-l1-1-0

api-ms-win-core-synch-l1-2-0

api-ms-win-core-rtlsupport-l1-1-0

api-ms-win-core-profile-l1-1-0

comctl32

gdi32

shell32

user32

winmm

Exports

Exports

Sections

.text Size: 94KB - Virtual size: 94KB

.rdata Size: 18KB - Virtual size: 17KB

.data Size: 27KB - Virtual size: 33KB

.pdata Size: 2KB - Virtual size: 2KB

.rsrc Size: 4KB - Virtual size: 4KB

.reloc Size: 512B - Virtual size: 40B

.text
Size: 94KB - Virtual size: 94KB

.rdata
Size: 18KB - Virtual size: 17KB

.data
Size: 27KB - Virtual size: 33KB

.pdata
Size: 2KB - Virtual size: 2KB

.rsrc
Size: 4KB - Virtual size: 4KB

.reloc
Size: 512B - Virtual size: 40B