user[.]dat[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

user.dat.dll
Size

516KB
MD5

fd3495c03fd956548c722fa5943ca9f9
SHA1

1c58b5ea59cdad291f8183414391af7b0d5119a7
SHA256

26975798246161199b20263f3793e1c6d56299c0a881c6dfcd4bc9b753b75212
SHA512

d813f4ac641c0a106396d76a1acd82f0e585545612df8d07d4b34842a93fb82076a695b922f03f5bc4795b82d75ea8a05602b7014bbde0ca14f342fc2f51bcf4
SSDEEP

12288:+ihnctArBgRprvbiIIAuz19n26pmpmlCO:HnqAyprvbiIIAuRUmxf

Score

N/A

Malware Config

Signatures

Files

user.dat.dll
.dll windows x86

d0ce5a8d5d0f4fa36cbdd8035bad1ebc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DebugBreak
GetCommandLineA
GetVersion
RtlUnwind
HeapFree
GetLastError
CloseHandle
WriteFile
ReadFile
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
LCMapStringA
LCMapStringW
GlobalMemoryStatus
GetTickCount
FindFirstFileA
OpenFile
lstrcpynA
GetDriveTypeA
IsDBCSLeadByte
lstrlenA
GetFileAttributesA
_lclose
_llseek
_lread
_lwrite
DeleteFileA
FreeLibrary
GetDiskFreeSpaceA
GetTempFileNameA
GetTempPathA
lstrcatA
lstrcpyA
FindClose
CompareStringA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileA
CreateDirectoryA
RemoveDirectoryA
SetEnvironmentVariableA
CompareStringW
IsDBCSLeadByteEx
MoveFileA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapCompact
RaiseException
GetCurrentProcessId
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr

user32

MessageBoxA
CharUpperBuffA
CharToOemBuffA
OemToCharBuffA
GetActiveWindow

mpr

WNetEnumResourceA
WNetCloseEnum
WNetGetConnectionA
WNetOpenEnumA
WNetAddConnection2A

Exports

Exports

TDFAddDocJavaScript
TDFAddTemplate
TDFClose
TDFCreate
TDFEmbedAndClose
TDFEnumValues
TDFExtractAppendSaves
TDFExtractAttachment
TDFGetAP
TDFGetEncoding
TDFGetFDFVersion
TDFGetFile
TDFGetFlags
TDFGetID
TDFGetNthValue
TDFGetOpt
TDFGetStatus
TDFGetValue
TDFGetVersion
TDFNextFieldName
TDFOpen
TDFOpenFromEmbedded
TDFRemoveItem
TDFSave
TDFSetAP
TDFSetAPRef
TDFSetAS
TDFSetEncoding
TDFSetFDFVersion
TDFSetFile
TDFSetFileEx
TDFSetFlags
TDFSetGoToAction
TDFSetGoToRAction
TDFSetHideAction
TDFSetID
TDFSetIF
TDFSetImportDataAction
TDFSetJavaScriptAction
TDFSetNamedAction
TDFSetOnImportJavaScript
TDFSetOpt
TDFSetResetByNameAction
TDFSetResetFormAction
TDFSetStateAction
TDFSetStatus
TDFSetSubmitByNameAction
TDFSetSubmitFormAction
TDFSetTargetFrame
TDFSetURIAction
TDFSetValue
Updt

Sections

.text
Size: 324KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d0ce5a8d5d0f4fa36cbdd8035bad1ebc

Headers

File Characteristics

Imports

kernel32

user32

mpr

Exports

Exports

Sections

.text Size: 324KB - Virtual size: 323KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 36KB - Virtual size: 47KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 124KB - Virtual size: 123KB

.text
Size: 324KB - Virtual size: 323KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 36KB - Virtual size: 47KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 124KB - Virtual size: 123KB