MicExternCall[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

MicExternCall.dll
Size

100KB
MD5

41a8c2f7b522144ca69725a86404e438
SHA1

8405ab25a638a7f2884a45e7c26649ba3b01ee1f
SHA256

d34924e066d5854ef98a025178ff2d625a4a3978097b137feb6f979bb30433ab
SHA512

d316eb1128c95a8af599c1d6e837b485710b199e5d0d0196199d43579a0df3849930695060b920cb77c7d55cd6d50233ce3de4c9ccb65fe9231681142287f7a1
SSDEEP

1536:AgBRYOnhDLwp4XHgczhbqXB2nxMkCh6FKHX61q89CT1HaGpaeTZXuwFC:Tv1nhDLwpONqXkn+X60HT1LXJrF

Score

N/A

Malware Config

Signatures

Files

MicExternCall.dll
.dll regsvr32 windows x86

529718a655c71ef16c0bb047838338f9

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

lstrlenA
lstrlenW
MultiByteToWideChar
WideCharToMultiByte
GetModuleFileNameW
LeaveCriticalSection
EnterCriticalSection
Sleep
DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
GetModuleHandleW
InterlockedDecrement
GetLastError
SizeofResource
LoadResource
FindResourceW
LoadLibraryExW
lstrcmpiW
lstrcpynW
lstrcatW
RaiseException
GetCurrentProcessId
GetCurrentThreadId
GetTickCount
InterlockedIncrement
LoadLibraryW
FreeLibrary
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetVersionExW
lstrcpyW
GetProcAddress
QueryPerformanceCounter
ExitProcess
LocalFree
GetVersionExA
GetSystemTimeAsFileTime

user32

CharNextW

advapi32

RegEnumKeyExW
RegCreateKeyExW
RegDeleteKeyW
RegQueryValueExW
RegSetValueExW
RegDeleteValueW
RegOpenKeyExW
RegCloseKey
RegQueryInfoKeyW

ole32

StringFromCLSID
CoTaskMemFree
CoTaskMemRealloc
CoTaskMemAlloc
StringFromGUID2
CoCreateInstance

oleaut32

UnRegisterTypeLi
VarUI4FromStr
RegisterTypeLi
LoadTypeLi
LoadRegTypeLi
SysStringByteLen
SysAllocStringByteLen
VarBstrCmp
VariantClear
VariantChangeType
VariantCopy
VariantInit
SysStringLen
SysAllocString
SafeArrayAccessData
SafeArrayUnaccessData
SysFreeString
SysAllocStringLen
CreateDispTypeInfo

msvcr71

__security_error_handler
__CppXcptFilter
_adjust_fdiv
_initterm
_onexit
wcslen
__dllonexit
?terminate@@YAXXZ
??1type_info@@UAE@XZ
malloc
realloc
wcsncpy
_purecall
_except_handler3
wcscat
strcpy
memcpy
strlen
_CxxThrowException
??_V@YAXPAX@Z
??_U@YAPAXI@Z
__CxxFrameHandler
??3@YAXPAX@Z
??2@YAPAXI@Z
wcscpy
memset
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@XZ
memcmp
free
wcsrchr
swprintf

shlwapi

PathFindExtensionW

msvcp71

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
_DynaCall@24
_SearchProcAddress@12

Sections

.text
Size: 64KB - Virtual size: 60KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 12KB - Virtual size: 11KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 760B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 12KB - Virtual size: 9KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 4KB - Virtual size: 3KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

529718a655c71ef16c0bb047838338f9

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

msvcr71

shlwapi

msvcp71

Exports

Exports

Sections

.text Size: 64KB - Virtual size: 60KB

.rdata Size: 12KB - Virtual size: 11KB

.data Size: 4KB - Virtual size: 760B

.rsrc Size: 12KB - Virtual size: 9KB

.reloc Size: 4KB - Virtual size: 3KB

.text
Size: 64KB - Virtual size: 60KB

.rdata
Size: 12KB - Virtual size: 11KB

.data
Size: 4KB - Virtual size: 760B

.rsrc
Size: 12KB - Virtual size: 9KB

.reloc
Size: 4KB - Virtual size: 3KB