__FineObjUsed
Static task
static1
Behavioral task
behavioral1
Sample
Barcode.dll
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
Barcode.dll
Resource
win10v2004-20221111-en
General
-
Target
Barcode.dll
-
Size
440KB
-
MD5
68339933c0a88d65026c1ee1c4d710a9
-
SHA1
addc484af5139c5e914304776999e10031c2b41e
-
SHA256
fc5b1f14f4891d122f85eabea4ab7d4f03c89de1f719af81f8ea8ce054e464ee
-
SHA512
5af9502b8a44256ecbf536da32a9cbc8867e3a2db10a83f1f031ceaa3edb6b9341e50e48e4117fb0fe84612be66cc9c4409cfa6e04957f0a801da55bd695e1b6
-
SSDEEP
6144:WMnQPLPvMhjYSNsEwMpcSPxbgeINZAGz:WMnQTknNslxaxkeQ
Malware Config
Signatures
Files
-
Barcode.dll.dll windows x86
f6f2fcd5055244d132711ab5068d9423
Headers
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE
Imports
kernel32
FreeLibrary
CompareStringA
GetModuleHandleA
GetModuleFileNameA
GetWindowsDirectoryA
InterlockedDecrement
LoadLibraryA
InterlockedExchange
GetLastError
SetLastError
InterlockedIncrement
GetSystemDirectoryA
QueryPerformanceCounter
GetSystemTimeAsFileTime
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
MulDiv
ExitProcess
fineobj
?CenterPoint@CRect@FObj@@QBE?AVCPoint@2@XZ
?GetDrivePath@FileSystem@FObj@@YA?AVCUnicodeString@2@ABV32@@Z
?GetFineObjectsVersion@FObj@@YAHXZ
?RemoveResourceModule@FObj@@YAXPAUHINSTANCE__@@@Z
?AddResourceModule@FObj@@YAXPAUHINSTANCE__@@@Z
?GetModuleFileNameW@FileSystem@FObj@@YA?AVCUnicodeString@2@PAUHINSTANCE__@@@Z
?RegisterModule@FObj@@YAXPAUHINSTANCE__@@P6AXXZ1@Z
?EndStaticPart@FObj@@YAXXZ
?GetErrorFlag@FObj@@YA_NXZ
?BeginStaticPart@FObj@@YAXXZ
?UnregisterModule@FObj@@YAXPAUHINSTANCE__@@@Z
?Warning@FObj@@YAXPAVCException@1@@Z
?Delete@CException@FObj@@QAEXXZ
?GenerateInternalError@FObj@@YA_NW4TInternalErrorType@1@PB_W11JK@Z
??0CUnicodeString@FObj@@QAE@XZ
??1CUnicodeString@FObj@@QAE@XZ
??4CUnicodeString@FObj@@QAEAAV01@PB_W@Z
??0CUnicodeString@FObj@@QAE@ABV01@@Z
??4CUnicodeString@FObj@@QAEAAV01@ABV01@@Z
??0CUnicodeString@FObj@@AAE@PAVCUnicodeStringBody@1@@Z
?concatStr@CUnicodeString@FObj@@CAPAVCUnicodeStringBody@2@PB_WH0H@Z
?safeStr@CUnicodeString@FObj@@CAPB_WPB_W@Z
?safeStrLen@CUnicodeString@FObj@@CAHPB_W@Z
?Ptr@CUnicodeString@FObj@@QBEPB_WXZ
?Length@CUnicodeString@FObj@@QBEHXZ
??2@YAPAXI@Z
??3@YAXPAX@Z
??4CUnicodeString@FObj@@QAEAAV01@_W@Z
??0rational@FObj@@QAE@HH@Z
??0CUnicodeString@FObj@@QAE@PB_W@Z
?UnregisterCreateObjectFunction@FObj@@YAXABVtype_info@@@Z
?getWritePtr@CArchive@FObj@@AAEPAXH@Z
?getReadPtr@CArchive@FObj@@AAEPBXH@Z
?Format@FObj@@YA?AVCUnicodeString@1@PB_WZZ
?Read@CArchive@FObj@@QAEXPAXH@Z
?DoCreateObject@FObj@@YA?AV?$CPtr@VIObject@FObj@@@1@ABVCUnicodeString@1@@Z
?IsLoading@CArchive@FObj@@QBE_NXZ
?RegisterCreateObjectFunction@FObj@@YAXP6A?AV?$CPtr@VIObject@FObj@@@1@XZABVtype_info@@ABVCUnicodeString@1@@Z
?IsRegisteredClassName@FObj@@YA_NABVCUnicodeString@1@@Z
?ReadSmallValue@CArchive@FObj@@QAEHXZ
?IsEmpty@CUnicodeString@FObj@@QBE_NXZ
??5FObj@@YAAAVCArchive@0@AAV10@AAVCUnicodeString@0@@Z
?SerializeVersion@CArchive@FObj@@QAEHH@Z
?IsStoring@CArchive@FObj@@QBE_NXZ
??1CHeapManager@FObj@@UAE@XZ
?Destroy@CHeapManager@FObj@@QAEX_N@Z
??0CRect@FObj@@QAE@XZ
??1CMemoryManagerSwitcher@FObj@@QAE@XZ
??0CMemoryManagerSwitcher@FObj@@QAE@PAVIMemoryManager@1@@Z
?Create@CHeapManager@FObj@@QAEXXZ
??0CHeapManager@FObj@@QAE@XZ
?Width@CRect@FObj@@QBEHXZ
?Height@CRect@FObj@@QBEHXZ
?CurrentManager@CMemoryManagerSwitcher@FObj@@SAPAVIMemoryManager@2@XZ
??YCUnicodeString@FObj@@QAEAAV01@_W@Z
??ACUnicodeString@FObj@@QBE_WH@Z
?GetLength@CUnicodeString@FObj@@QBEHXZ
?Has@CUnicodeSet@FObj@@QBE_N_W@Z
?make@rational@FObj@@CA?AV12@_J0@Z
?StrDel@CUnicodeString@FObj@@QAEXH@Z
?StrDel@CUnicodeString@FObj@@QAEXHH@Z
??_4CRect@FObj@@QAEXABUtagRECT@@@Z
?InflateRect@CRect@FObj@@QAEXHH@Z
??0CRect@FObj@@QAE@HHHH@Z
?Empty@CUnicodeString@FObj@@QAEXXZ
??0CUnicodeSet@FObj@@QAE@PB_W@Z
??1CUnicodeSet@FObj@@QAE@XZ
??0CPoint@FObj@@QAE@XZ
?BottomRight@CRect@FObj@@QBE?AVCPoint@2@XZ
?BottomLeft@CRect@FObj@@QBE?AVCPoint@2@XZ
?TopRight@CRect@FObj@@QBE?AVCPoint@2@XZ
?TopLeft@CRect@FObj@@QBE?AVCPoint@2@XZ
??_V@YAXPAX@Z
??0rational@FObj@@QAE@H@Z
?IsRectEmpty@CRect@FObj@@QBE_NXZ
?safeMake@rational@FObj@@CA?AV12@_J0@Z
??8CRect@FObj@@QBE_NABUtagRECT@@@Z
?IntersectRect@CRect@FObj@@QAE_NABUtagRECT@@0@Z
??Grational@FObj@@QBE?AV01@XZ
??0rational@FObj@@QAE@XZ
?DeflateRect@CRect@FObj@@QAEXHH@Z
??0CSetupBase@FObj@@IAE@ABVCUnicodeString@1@0W4TSetupType@1@@Z
??1CSetupBase@FObj@@MAE@XZ
?GetString@CSetupBase@FObj@@QBE?AVCUnicodeString@2@XZ
?SetString@CSetupBase@FObj@@QAEXABVCUnicodeString@2@@Z
?Value@CUnicodeString@FObj@@QBE_NAA_N@Z
?UnicodeStr@FObj@@YA?AVCUnicodeString@1@_N@Z
??1CCriticalSectionLock@FObj@@QAE@XZ
??0CCriticalSectionLock@FObj@@QAE@PAVCCriticalSection@1@_N@Z
?cacheSetupSection@FObj@@3VCCriticalSection@1@A
?SetRectEmpty@CRect@FObj@@QAEXXZ
??Yrational@FObj@@QAEXH@Z
??Yrational@FObj@@QAEXV01@@Z
??Zrational@FObj@@QAEXV01@@Z
??_U@YAPAXI@Z
?LoadModule@FObj@@YAPAUHINSTANCE__@@PB_W@Z
??BCUnicodeString@FObj@@QBEPB_WXZ
?Merge@FileSystem@FObj@@YA?AVCUnicodeString@2@ABV32@0@Z
??0CPoint@FObj@@QAE@HH@Z
??0CSize@FObj@@QAE@HH@Z
msvcr71
__security_error_handler
memmove
_purecall
__CppXcptFilter
_adjust_fdiv
malloc
_initterm
free
_except_handler3
?terminate@@YAXXZ
_onexit
__dllonexit
??1type_info@@UAE@XZ
ceil
floor
bsearch
qsort
__CxxFrameHandler
langinfo
?TranslateToUnicode@LangInfo@@SI?AVCUnicodeString@FObj@@PBDHH@Z
?GetCodePage@LangInfo@@SIHPBD@Z
user32
MessageBoxA
Exports
Exports
Sections
.text Size: 180KB - Virtual size: 179KB
IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ
.rdata Size: 28KB - Virtual size: 27KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.data Size: 208KB - Virtual size: 208KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE
.rsrc Size: 4KB - Virtual size: 1KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
.reloc Size: 16KB - Virtual size: 13KB
IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ