clarity[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

clarity.dll
Size

2.2MB
MD5

56e8fb5f3f5749dd972b5ce72175f659
SHA1

c7b2d02c3ce8eb0ea4f97bde8da68bb77656ea99
SHA256

702dd8608a023cf0b7063a52a7c9e8c3c6333d91f1b305f40bc1459d610d41c8
SHA512

b56e52fca0a7ca98587205ea6e63133f414c7971d287bd4ba7822e1bdc0f8f4145dc96a31aeb103918b3a34c438c57aff9125e4ca2265bedfc6950aba387e2df
SSDEEP

49152:wBkzBo+WhUoOOGuLZz01P6X6qlKFpKiXASN2kCq8hrCyrWedA:wOoZhOOtLZz01P6X6ubw2fqU2K

Score

N/A

Malware Config

Signatures

Files

clarity.dll
.dll windows x86

9eda0cec56814cab27584e1af1e286b3

Headers

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE
IMAGE_DLLCHARACTERISTICS_NX_COMPAT

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

SizeofResource
SetConsoleTitleA
FindResourceA
LoadLibraryA
LockResource
CreateThread
LoadResource
GetProcAddress
GetModuleHandleW
AllocConsole
SetUnhandledExceptionFilter
GetCurrentProcess
TerminateProcess
IsProcessorFeaturePresent
IsDebuggerPresent
QueryPerformanceCounter
GetCurrentProcessId
GetCurrentThreadId
UnhandledExceptionFilter
GetSystemTimeAsFileTime
InitializeSListHead

shell32

ShellExecuteW

msvcp140

?_Xlength_error@std@@YAXPBD@Z

vcruntime140

__current_exception_context
__std_terminate
memcpy
__std_exception_destroy
memmove
__CxxFrameHandler3
__std_type_info_destroy_list
memset
_CxxThrowException
__std_exception_copy
_except_handler4_common
__current_exception

api-ms-win-crt-stdio-l1-1-0

freopen
__acrt_iob_func
__stdio_common_vfprintf

api-ms-win-crt-runtime-l1-1-0

_initterm_e
_cexit
_invalid_parameter_noinfo_noreturn
_execute_onexit_table
_register_onexit_function
_initialize_onexit_table
_initialize_narrow_environment
_configure_narrow_argv
_seh_filter_dll
terminate
_initterm
_crt_atexit

api-ms-win-crt-heap-l1-1-0

_callnewh
malloc
free

Sections

.text
Size: 19KB - Virtual size: 19KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 9KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 512B - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 2KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

9eda0cec56814cab27584e1af1e286b3

Headers

DLL Characteristics

File Characteristics

Imports

kernel32

shell32

msvcp140

vcruntime140

api-ms-win-crt-stdio-l1-1-0

api-ms-win-crt-runtime-l1-1-0

api-ms-win-crt-heap-l1-1-0

Sections

.text Size: 19KB - Virtual size: 19KB

.rdata Size: 9KB - Virtual size: 9KB

.data Size: 512B - Virtual size: 1KB

.rsrc Size: 2.2MB - Virtual size: 2.2MB

.reloc Size: 2KB - Virtual size: 1KB

.text
Size: 19KB - Virtual size: 19KB

.rdata
Size: 9KB - Virtual size: 9KB

.data
Size: 512B - Virtual size: 1KB

.rsrc
Size: 2.2MB - Virtual size: 2.2MB

.reloc
Size: 2KB - Virtual size: 1KB