MSRRecorder[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

MSRRecorder.dll
Size

568KB
MD5

18dfa0c8d847c9db567ec4064ac99502
SHA1

7b813c25e36586874e5d5fa831c99dcffdd7da4d
SHA256

0bebd2473ed82f923755c74cf0f6f5ea326bac881452086e7b2e5f193106ee61
SHA512

ef2a945fc3b65bc549fc10cc677cf6dca5329a4792862c5f87fa07911616ad371a7d15b0955bc4958f439d19b9f6c150104979be1001a9fa8b6ce4259de44c44
SSDEEP

6144:jj4FfOGpSmmbP8d/UkRHoZv5w+6bTcxyLe4TWldQ5TSS4RCVxbrzoum5xFlEH6AE:YFfOGp5mbNUah94TWluStnDzAeA30

Score

N/A

Malware Config

Signatures

Files

MSRRecorder.dll
.dll regsvr32 windows x86

44fe1c779b0c970f46f6298598164b44

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

version

GetFileVersionInfoA
GetFileVersionInfoSizeA
VerQueryValueA

winmm

timeBeginPeriod
timeGetDevCaps
timeEndPeriod
timeSetEvent
waveInUnprepareHeader
waveInAddBuffer
waveInStop
waveInReset
waveInStart
mmioAscend
mmioRead
mmioDescend
mmioGetInfo
mmioCreateChunk
waveInOpen
waveInClose
mmioOpenA
waveInPrepareHeader
mmioClose
mmioWrite
mmioAdvance
mmioSetInfo
mmioSeek

kernel32

HeapFree
GetProcessHeap
FreeLibrary
GetProcAddress
LoadLibraryA
lstrcmpiA
GetModuleHandleA
DeleteFileA
lstrcpynA
IsDBCSLeadByte
GlobalUnlock
GlobalLock
GlobalAlloc
MulDiv
GetSystemTime
WaitForSingleObject
CreateProcessA
CreateThread
FlushInstructionCache
GetCurrentProcess
HeapAlloc
GetCurrentThreadId
CompareStringA
CompareStringW
CreateWaitableTimerA
CreateEventA
QueryPerformanceFrequency
CloseHandle
SetEvent
GetTickCount
QueryPerformanceCounter
WaitForMultipleObjects
SetWaitableTimer
ExitThread
ResetEvent
SetThreadPriority
GetCurrentThread
HeapCreate
HeapReAlloc
SetFilePointer
CreateFileA
FindResourceExA
ReadFile
FlushFileBuffers
GetOverlappedResult
InterlockedCompareExchange
SetEndOfFile
Sleep
HeapCompact
PulseEvent
GetExitCodeProcess
GetWindowsDirectoryA
GetTempPathA
IsBadReadPtr
OpenProcess
GetCurrentProcessId
MoveFileA
FindFirstFileA
GetTimeZoneInformation
GetSystemInfo
FindClose
FileTimeToDosDateTime
FileTimeToLocalFileTime
FindResourceA
LoadResource
LockResource
SizeofResource
GetEnvironmentVariableA
SetEnvironmentVariableA
InterlockedDecrement
InterlockedIncrement
lstrcatA
GetModuleFileNameA
lstrlenA
lstrcpyA
GetLastError
HeapDestroy
HeapSize
VirtualProtect
VirtualAlloc
VirtualQuery
RtlUnwind
ExitProcess
TerminateProcess
GetLocalTime
GetCommandLineA
VirtualFree
IsBadWritePtr
GetSystemTimeAsFileTime
DeleteCriticalSection
InitializeCriticalSection
LeaveCriticalSection
EnterCriticalSection
RaiseException
lstrlenW
WideCharToMultiByte
MultiByteToWideChar
GetVersionExA
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
SetLastError
TlsFree
TlsSetValue
TlsGetValue
GetOEMCP
SetUnhandledExceptionFilter
TlsAlloc
GetCPInfo
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
LCMapStringA
LCMapStringW
FreeEnvironmentStringsA
GetEnvironmentStrings
FreeEnvironmentStringsW
GetEnvironmentStringsW
UnhandledExceptionFilter
IsBadCodePtr
GetStringTypeA
GetStringTypeW
SetStdHandle
WriteFile

user32

GetCursorInfo
GetIconInfo
GetCursorPos
CallNextHookEx
GetWindowThreadProcessId
GetDCEx
GetWindow
EnumDisplaySettingsA
EnumDisplayDevicesA
ChangeDisplaySettingsExA
MessageBeep
GetDesktopWindow
GetClassInfoExA
SystemParametersInfoA
wsprintfA
RegisterClassExA
CreateWindowExA
LoadStringA
BeginPaint
SetTimer
EndPaint
GetParent
GetSystemMetrics
EnumWindows
SetWindowsHookExA
KillTimer
UnhookWindowsHookEx
GetFocus
IsChild
SetFocus
ShowWindow
InvalidateRect
GetKeyState
CallWindowProcA
GetWindowLongA
SetWindowLongA
GetDC
ReleaseDC
IntersectRect
EqualRect
OffsetRect
LoadCursorA
SetCursorPos
SetWindowPos
UnionRect
PtInRect
CharNextA
DefWindowProcA
DestroyWindow
IsWindow
IsWindowVisible
GetWindowRect
MessageBoxA
LoadBitmapA
UnregisterClassA
GetClientRect
SetWindowRgn

gdi32

CombineRgn
GetDIBits
SetDIBits
GdiGetBatchLimit
DrawEscape
GetViewportExtEx
GetWindowExtEx
SetPixel
GetPixel
GdiSetBatchLimit
GdiFlush
CreateSolidBrush
FillRgn
LPtoDP
SetMapMode
SetViewportOrgEx
CloseMetaFile
RestoreDC
SetWindowExtEx
SetWindowOrgEx
GetDeviceCaps
CreateMetaFileA
DeleteObject
SaveDC
BitBlt
DeleteDC
CreateDIBSection
CreateCompatibleDC
CreateDCA
GetObjectA
Rectangle
StretchBlt
SelectClipRgn
CreateRectRgn
GetClipRgn
CreateRectRgnIndirect
DeleteMetaFile
SelectObject

advapi32

InitializeSecurityDescriptor
SetSecurityDescriptorDacl
RegEnumKeyExA
AllocateAndInitializeSid
FreeSid
RegSetValueExA
RegCreateKeyExA
RegQueryInfoKeyA
RegOpenKeyExA
RegCloseKey
RegDeleteKeyA

shell32

SHGetFileInfoA

ole32

StringFromGUID2
CoCreateInstance
CoTaskMemFree
StringFromCLSID
OleRegEnumVerbs
OleRegGetUserType
OleRegGetMiscStatus
CoTaskMemAlloc
CreateDataAdviseHolder
CreateOleAdviseHolder
OleLoadFromStream
WriteClassStm
OleSaveToStream
CoInitialize
CoUninitialize

oleaut32

SysFreeString
SysAllocString
LoadTypeLi
UnRegisterTypeLi
RegisterTypeLi
SetErrorInfo
VariantInit
SysAllocStringLen
VarUI4FromStr
VariantClear
VariantChangeType
SysStringByteLen
SysAllocStringByteLen
OleCreatePropertyFrame
LoadRegTypeLi
SysStringLen
CreateErrorInfo

shlwapi

PathFindExtensionA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllMain
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 268KB - Virtual size: 267KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 56KB - Virtual size: 53KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 12KB - Virtual size: 88KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 200KB - Virtual size: 197KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 24KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

44fe1c779b0c970f46f6298598164b44

Headers

File Characteristics

Imports

version

winmm

kernel32

user32

gdi32

advapi32

shell32

ole32

oleaut32

shlwapi

Exports

Exports

Sections

.text Size: 268KB - Virtual size: 267KB

.rdata Size: 56KB - Virtual size: 53KB

.data Size: 12KB - Virtual size: 88KB

.rsrc Size: 200KB - Virtual size: 197KB

.reloc Size: 28KB - Virtual size: 24KB

.text
Size: 268KB - Virtual size: 267KB

.rdata
Size: 56KB - Virtual size: 53KB

.data
Size: 12KB - Virtual size: 88KB

.rsrc
Size: 200KB - Virtual size: 197KB

.reloc
Size: 28KB - Virtual size: 24KB