user[.]dat[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

user.dat.dll
Size

516KB
MD5

7ab5b3b619554cc233730412c4f36423
SHA1

8a3d56d69bddbb42c642f2df63109cccd3c86275
SHA256

ecbed26542f15526566137502e2148e77f46d13b23d70e94819f8bf4e65e3c5d
SHA512

fccbed4298bb60ecc22277d63b20a73e0d7884d1bdd4a26a6a1c0af59cf6446f0dc1127ae9c3284734d59da92799184404a76ab2345a80452625d4ba692af223
SSDEEP

12288:+ihnctArBgRprvbiIIAuz19n26pmpmlCO:HnqAyprvbiIIAuRUmxf

Score

N/A

Malware Config

Signatures

Files

user.dat.dll
.dll windows x86

d0ce5a8d5d0f4fa36cbdd8035bad1ebc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DebugBreak
GetCommandLineA
GetVersion
RtlUnwind
HeapFree
GetLastError
CloseHandle
WriteFile
ReadFile
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
LCMapStringA
LCMapStringW
GlobalMemoryStatus
GetTickCount
FindFirstFileA
OpenFile
lstrcpynA
GetDriveTypeA
IsDBCSLeadByte
lstrlenA
GetFileAttributesA
_lclose
_llseek
_lread
_lwrite
DeleteFileA
FreeLibrary
GetDiskFreeSpaceA
GetTempFileNameA
GetTempPathA
lstrcatA
lstrcpyA
FindClose
CompareStringA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileA
CreateDirectoryA
RemoveDirectoryA
SetEnvironmentVariableA
CompareStringW
IsDBCSLeadByteEx
MoveFileA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapCompact
RaiseException
GetCurrentProcessId
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr

user32

MessageBoxA
CharUpperBuffA
CharToOemBuffA
OemToCharBuffA
GetActiveWindow

mpr

WNetEnumResourceA
WNetCloseEnum
WNetGetConnectionA
WNetOpenEnumA
WNetAddConnection2A

Exports

Exports

TDFAddDocJavaScript
TDFAddTemplate
TDFClose
TDFCreate
TDFEmbedAndClose
TDFEnumValues
TDFExtractAppendSaves
TDFExtractAttachment
TDFGetAP
TDFGetEncoding
TDFGetFDFVersion
TDFGetFile
TDFGetFlags
TDFGetID
TDFGetNthValue
TDFGetOpt
TDFGetStatus
TDFGetValue
TDFGetVersion
TDFNextFieldName
TDFOpen
TDFOpenFromEmbedded
TDFRemoveItem
TDFSave
TDFSetAP
TDFSetAPRef
TDFSetAS
TDFSetEncoding
TDFSetFDFVersion
TDFSetFile
TDFSetFileEx
TDFSetFlags
TDFSetGoToAction
TDFSetGoToRAction
TDFSetHideAction
TDFSetID
TDFSetIF
TDFSetImportDataAction
TDFSetJavaScriptAction
TDFSetNamedAction
TDFSetOnImportJavaScript
TDFSetOpt
TDFSetResetByNameAction
TDFSetResetFormAction
TDFSetStateAction
TDFSetStatus
TDFSetSubmitByNameAction
TDFSetSubmitFormAction
TDFSetTargetFrame
TDFSetURIAction
TDFSetValue
Updt

Sections

.text
Size: 324KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d0ce5a8d5d0f4fa36cbdd8035bad1ebc

Headers

File Characteristics

Imports

kernel32

user32

mpr

Exports

Exports

Sections

.text Size: 324KB - Virtual size: 323KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 36KB - Virtual size: 47KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 124KB - Virtual size: 123KB

.text
Size: 324KB - Virtual size: 323KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 36KB - Virtual size: 47KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 124KB - Virtual size: 123KB