user[.]dat[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

user.dat.dll
Size

516KB
MD5

e351d66cd0103864d9fdb439a451b253
SHA1

d1d9c420c4b06e33f4bd8b84f740be04db035fc4
SHA256

ac99b1d6fa6746b9a2e89f404e88a7fc249daf9cda5bb1f1639371cd36379237
SHA512

002c853352a06868d0a9b0201ee7dfc5e83b201c48d85bb7914f3e314012256129a752d8b05829074ee3364656a2c239f5eae0105c3597a432f89961b6d7bb62
SSDEEP

12288:+ihnctArBgRprvbiIIAuz19n26pmpmlCO:HnqAyprvbiIIAuRUmxf

Score

N/A

Malware Config

Signatures

Files

user.dat.dll
.dll windows x86

d0ce5a8d5d0f4fa36cbdd8035bad1ebc

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
DebugBreak
GetCommandLineA
GetVersion
RtlUnwind
HeapFree
GetLastError
CloseHandle
WriteFile
ReadFile
ExitProcess
TerminateProcess
GetCurrentProcess
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
HeapAlloc
GetProcAddress
GetModuleHandleA
GetModuleFileNameA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
FreeEnvironmentStringsA
FreeEnvironmentStringsW
WideCharToMultiByte
GetEnvironmentStrings
GetEnvironmentStringsW
MultiByteToWideChar
GetStringTypeA
GetStringTypeW
VirtualAlloc
HeapReAlloc
IsBadWritePtr
SetStdHandle
FlushFileBuffers
SetFilePointer
CreateFileA
GetCPInfo
GetACP
GetOEMCP
LoadLibraryA
SetEndOfFile
LCMapStringA
LCMapStringW
GlobalMemoryStatus
GetTickCount
FindFirstFileA
OpenFile
lstrcpynA
GetDriveTypeA
IsDBCSLeadByte
lstrlenA
GetFileAttributesA
_lclose
_llseek
_lread
_lwrite
DeleteFileA
FreeLibrary
GetDiskFreeSpaceA
GetTempFileNameA
GetTempPathA
lstrcatA
lstrcpyA
FindClose
CompareStringA
FileTimeToSystemTime
FileTimeToLocalFileTime
FindNextFileA
CreateDirectoryA
RemoveDirectoryA
SetEnvironmentVariableA
CompareStringW
IsDBCSLeadByteEx
MoveFileA
GetTimeZoneInformation
GetSystemTime
GetLocalTime
HeapCompact
RaiseException
GetCurrentProcessId
SetUnhandledExceptionFilter
IsBadReadPtr
IsBadCodePtr

user32

MessageBoxA
CharUpperBuffA
CharToOemBuffA
OemToCharBuffA
GetActiveWindow

mpr

WNetEnumResourceA
WNetCloseEnum
WNetGetConnectionA
WNetOpenEnumA
WNetAddConnection2A

Exports

Exports

TDFAddDocJavaScript
TDFAddTemplate
TDFClose
TDFCreate
TDFEmbedAndClose
TDFEnumValues
TDFExtractAppendSaves
TDFExtractAttachment
TDFGetAP
TDFGetEncoding
TDFGetFDFVersion
TDFGetFile
TDFGetFlags
TDFGetID
TDFGetNthValue
TDFGetOpt
TDFGetStatus
TDFGetValue
TDFGetVersion
TDFNextFieldName
TDFOpen
TDFOpenFromEmbedded
TDFRemoveItem
TDFSave
TDFSetAP
TDFSetAPRef
TDFSetAS
TDFSetEncoding
TDFSetFDFVersion
TDFSetFile
TDFSetFileEx
TDFSetFlags
TDFSetGoToAction
TDFSetGoToRAction
TDFSetHideAction
TDFSetID
TDFSetIF
TDFSetImportDataAction
TDFSetJavaScriptAction
TDFSetNamedAction
TDFSetOnImportJavaScript
TDFSetOpt
TDFSetResetByNameAction
TDFSetResetFormAction
TDFSetStateAction
TDFSetStatus
TDFSetSubmitByNameAction
TDFSetSubmitFormAction
TDFSetTargetFrame
TDFSetURIAction
TDFSetValue
Updt

Sections

.text
Size: 324KB - Virtual size: 323KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 20KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 36KB - Virtual size: 47KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 124KB - Virtual size: 123KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

d0ce5a8d5d0f4fa36cbdd8035bad1ebc

Headers

File Characteristics

Imports

kernel32

user32

mpr

Exports

Exports

Sections

.text Size: 324KB - Virtual size: 323KB

.rdata Size: 24KB - Virtual size: 20KB

.data Size: 36KB - Virtual size: 47KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 124KB - Virtual size: 123KB

.text
Size: 324KB - Virtual size: 323KB

.rdata
Size: 24KB - Virtual size: 20KB

.data
Size: 36KB - Virtual size: 47KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 124KB - Virtual size: 123KB