LrunLogger[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

LrunLogger.dll
Size

176KB
MD5

ab4d6f7f56285aff182e23e855074f22
SHA1

57fedb648dfe75b1d557d99ad9be9ae1b13762fb
SHA256

7eb6916dc906e9b9f99701e567f4936a82289a090187824a51d71d6e0dec1edc
SHA512

5a3cb5f98ebbc93fbfe4b0aec9abaf7f2aa1bcce29d6f4a92d8f82031ce039f31109f3f3e9f03801511021fe4364d2cf3364640650bef5e648f2e3b484ec4d5b
SSDEEP

3072:HX9ae1G+R+XoJVn2yEpLVanDXQPqV2Gbvao5kJZmyDD3GsSNn65DU:3A+R+XoJV+wxl5EFSpNn65D

Score

N/A

Malware Config

Signatures

Files

LrunLogger.dll
.dll regsvr32 windows x86

235fd582c804000c08d3b46999c209b3

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

WideCharToMultiByte
ReadFile
GlobalReAlloc
SetFilePointer
WriteFile
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
ExitProcess
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
GlobalFree
GlobalLock
GlobalUnlock
CreateFileW
CloseHandle
GlobalAlloc
GetTickCount
GetCurrentThreadId
CreateDirectoryW
lstrlenA
GetTempPathW
GetModuleFileNameW
FreeLibrary
LoadLibraryW
GetProcAddress
LocalFree
MultiByteToWideChar
lstrlenW
InterlockedDecrement
InterlockedIncrement
Sleep
DisableThreadLibraryCalls
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
GetVersionExW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetFileSize

user32

GetSystemMetrics
LoadStringW
GetDoubleClickTime
IsRectEmpty
SetCursor
LoadCursorW
ClientToScreen
GetClientRect
GetWindowRect
ReleaseDC
GetDC

gdi32

GetObjectW
GetStockObject
DeleteObject
DeleteDC
BitBlt
SelectObject
CreateCompatibleBitmap
GetDeviceCaps
CreateCompatibleDC
CreateDCW
StretchDIBits
SetDIBitsToDevice
SetStretchBltMode
RealizePalette
SelectPalette
StretchBlt
CreatePalette
CreateDIBitmap
GetSystemPaletteEntries
GetDIBits

advapi32

RegOpenKeyExW
RegSetValueExW
RegQueryValueExW
RegCloseKey
RegDeleteValueW

ole32

CoTaskMemFree
OleSaveToStream
WriteClassStm
OleLoadFromStream
StringFromCLSID
CoCreateInstance
CLSIDFromProgID

oleaut32

SafeArrayCreate
SafeArrayGetVartype
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayUnaccessData
SysReAllocStringLen
SafeArrayCopy
VarDecCmp
SafeArrayAllocDescriptor
SafeArrayAllocData
SafeArrayDestroyData
SafeArrayDestroyDescriptor
SafeArrayPutElement
SafeArrayGetElement
SafeArrayUnlock
SafeArrayLock
VarCmp
VariantChangeType
VariantCopy
VariantClear
VariantInit
VarBstrCmp
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
SysStringLen
LoadTypeLi
LoadRegTypeLi
RegisterTypeLi
SysFreeString
SysAllocString
GetErrorInfo
SafeArrayRedim
SafeArrayGetUBound

atl71

ord61
ord23
ord56
ord32
ord15
ord55
ord64
ord22
ord18
ord58
ord31
ord30
ord49

msvcp71

??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?_Nomemory@std@@YAXXZ

msvcr71

swprintf
_strdup
wcscpy
wcsrchr
free
_CxxThrowException
_except_handler3
printf
longjmp
fprintf
_iob
_access
_callnewh
__security_error_handler
??1type_info@@UAE@XZ
?terminate@@YAXXZ
__dllonexit
_onexit
_initterm
_adjust_fdiv
__CppXcptFilter
_wcsicmp
??3@YAXPAX@Z
??0exception@@QAE@ABV0@@Z
__CxxFrameHandler
_purecall
??_V@YAXPAX@Z
wcscat
malloc
_resetstkoflw
??1exception@@UAE@XZ
??0exception@@QAE@XZ
wcscmp
wcslen
memmove
wcsncpy
_waccess
realloc
strncpy
strncmp
wcschr
wcsstr
vswprintf
iswdigit
_wtoi
wcstol
fflush
fwrite
sprintf
_setjmp3
_wfopen
fclose
time
gmtime
memset
calloc

micpackvariant

?UnpackVariant@@YAJPBXPAUtagVARIANT@@PAK@Z
?PackVariant@@YAJUtagVARIANT@@PAPAXPAK@Z

zlibu

ord6
ord3
ord10
ord7
ord4

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
Setup_SS_create
png_IDAT
png_IEND
png_IHDR
png_PLTE
png_bKGD
png_cHRM
png_check_sig
png_chunk_error
png_chunk_warning
png_convert_from_struct_tm
png_convert_from_time_t
png_convert_to_rfc1123
png_create_info_struct
png_create_write_struct
png_destroy_info_struct
png_destroy_write_struct
png_error
png_free
png_free_data
png_gAMA
png_get_copyright
png_get_error_ptr
png_get_header_ver
png_get_header_version
png_get_io_ptr
png_get_libpng_ver
png_get_user_transform_ptr
png_hIST
png_iCCP
png_iTXt
png_init_io
png_malloc
png_memcpy_check
png_memset_check
png_oFFs
png_pCAL
png_pHYs
png_permit_empty_plte
png_sBIT
png_sCAL
png_sPLT
png_sRGB
png_set_IHDR
png_set_PLTE
png_set_bKGD
png_set_bgr
png_set_cHRM
png_set_cHRM_fixed
png_set_compression_level
png_set_compression_mem_level
png_set_compression_method
png_set_compression_strategy
png_set_compression_window_bits
png_set_error_fn
png_set_filler
png_set_filter
png_set_filter_heuristics
png_set_flush
png_set_gAMA
png_set_gAMA_fixed
png_set_hIST
png_set_iCCP
png_set_interlace_handling
png_set_invert_alpha
png_set_invert_mono
png_set_keep_unknown_chunks
png_set_oFFs
png_set_pCAL
png_set_pHYs
png_set_packing
png_set_packswap
png_set_read_user_chunk_fn
png_set_rows
png_set_sBIT
png_set_sCAL
png_set_sPLT
png_set_sRGB
png_set_sRGB_gAMA_and_cHRM
png_set_shift
png_set_sig_bytes
png_set_swap
png_set_swap_alpha
png_set_tIME
png_set_tRNS
png_set_text
png_set_unknown_chunks
png_set_user_transform_info
png_set_write_fn
png_set_write_status_fn
png_set_write_user_transform_fn
png_sig_bytes
png_sig_cmp
png_tEXt
png_tIME
png_tRNS
png_warning
png_write_chunk
png_write_chunk_data
png_write_chunk_end
png_write_chunk_start
png_write_end
png_write_flush
png_write_image
png_write_info
png_write_info_before_PLTE
png_write_png
png_write_row
png_write_rows
png_zTXt

Sections

.text
Size: 108KB - Virtual size: 104KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 24KB - Virtual size: 23KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

235fd582c804000c08d3b46999c209b3

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

atl71

msvcp71

msvcr71

micpackvariant

zlibu

Exports

Exports

Sections

.text Size: 108KB - Virtual size: 104KB

.rdata Size: 28KB - Virtual size: 25KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 8KB - Virtual size: 6KB

.reloc Size: 24KB - Virtual size: 23KB

.text
Size: 108KB - Virtual size: 104KB

.rdata
Size: 28KB - Virtual size: 25KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 8KB - Virtual size: 6KB

.reloc
Size: 24KB - Virtual size: 23KB