TreeObjCtrl[.]dll

Sharing

Copy URL Twitter E-mail

General

Target

TreeObjCtrl.dll
Size

272KB
MD5

563ebeb4cd92243c119e12937d8cdb11
SHA1

4d68af09d1876eb838c31589e0a50723a4dfa758
SHA256

8aab450f1d868a80dc32556eaccdbd5702647f83fe2401f55744b3de65677f99
SHA512

603d19269495ed562b8d83c46d57b05fe007c8b6ce1e177f97e1360e643aad2104f5d4c4c430ad1b71efffc79de37a9dd7a27809f6b2c39d092430d1a9e2423e
SSDEEP

6144:7Sb06cn6zzkRlyeE5T4IHUTsYoqW68UCGPE7:7Sb0/ncziTEt4hst

Score

N/A

Malware Config

Signatures

Files

TreeObjCtrl.dll
.dll regsvr32 windows x86

1280201c126091ccf26cb6537318bf52

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_Destroy
ImageList_GetImageCount
ImageList_ReplaceIcon
ImageList_Create
ImageList_SetBkColor

kernel32

InitializeCriticalSection
DeleteCriticalSection
DisableThreadLibraryCalls
GetModuleFileNameW
Sleep
GetProcAddress
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
LoadLibraryW
ReadFile
GlobalReAlloc
SetFilePointer
WriteFile
GlobalFree
GetSystemTimeAsFileTime
GetCurrentProcessId
QueryPerformanceCounter
ExitProcess
HeapSize
HeapReAlloc
HeapDestroy
GetVersionExA
EnterCriticalSection
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
GlobalUnlock
GlobalLock
GlobalAlloc
GetLastError
MulDiv
lstrcpynW
lstrlenA
MultiByteToWideChar
HeapAlloc
GetProcessHeap
FreeLibrary
lstrlenW
lstrcpyW
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
GetCurrentThreadId
WideCharToMultiByte
LocalFree
HeapFree
CreateFileW
CloseHandle
GetTickCount
RaiseException
GetFileSize
SetLastError
GetCurrentProcess
FlushInstructionCache
GetVersionExW

user32

GetWindowRect
GetSysColor
GetWindow
GetKeyState
PtInRect
UnionRect
MapDialogRect
SendMessageW
SetWindowPos
LoadImageW
SetWindowContextHelpId
GetDlgItem
EnumChildWindows
IsRectEmpty
GetDoubleClickTime
SetCursor
LoadCursorW
ClientToScreen
GetClientRect
SystemParametersInfoW
InvalidateRect
IntersectRect
EqualRect
OffsetRect
SetWindowRgn
DestroyWindow
SetWindowLongW
SendDlgItemMessageW
CreateWindowExW
SetFocus
IsWindow
GetDC
ReleaseDC
GetDialogBaseUnits
IsChild
GetNextDlgTabItem
ShowWindow
IsDialogMessageW
CopyAcceleratorTableW
GetParent
GetFocus
DrawTextW

gdi32

SetWindowExtEx
LPtoDP
SetMapMode
SetViewportOrgEx
DeleteDC
CreateMetaFileW
SaveDC
SetWindowOrgEx
RestoreDC
CloseMetaFile
DeleteMetaFile
CreateRectRgnIndirect
GetDeviceCaps
CreateFontIndirectW
GetTextMetricsW
GetTextExtentPointW
GetObjectW
SetBkColor
GetStockObject
SelectObject
Rectangle
SetTextColor
SetBkMode
CreateSolidBrush
DeleteObject
BitBlt
CreateCompatibleBitmap
CreateCompatibleDC
CreateDCW
StretchDIBits
SetDIBitsToDevice
SetStretchBltMode
RealizePalette
SelectPalette
GetSystemPaletteEntries
GetDIBits
CreateDIBitmap
CreatePalette
StretchBlt

advapi32

RegQueryValueExW
RegOpenKeyExW
RegDeleteValueW
RegSetValueExW
RegCloseKey

ole32

OleLoadFromStream
CreateOleAdviseHolder
CoTaskMemAlloc
CreateDataAdviseHolder
OleSaveToStream
WriteClassStm
StringFromCLSID
OleRegGetMiscStatus
OleRegGetUserType
OleRegEnumVerbs
CreateStreamOnHGlobal
CoCreateInstance
CLSIDFromProgID
CoTaskMemFree

oleaut32

VarDecCmp
VarBstrCmp
VariantCopy
VarCmp
SysReAllocStringLen
OleCreatePropertyFrame
LoadTypeLi
LoadRegTypeLi
OleTranslateColor
RegisterTypeLi
SafeArrayUnlock
SafeArrayLock
SafeArrayPutElement
SafeArrayGetElement
SafeArrayCopy
SafeArrayRedim
SafeArrayDestroyData
SafeArrayAllocDescriptor
SafeArrayAllocData
SysStringLen
SysAllocStringLen
SysStringByteLen
SysAllocStringByteLen
VariantChangeType
SysAllocString
VariantClear
VariantInit
SysFreeString
SafeArrayCreate
SafeArrayGetVartype
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayUnaccessData
SafeArrayDestroyDescriptor

atl71

ord22
ord18
ord26
ord27
ord48
ord11
ord10
ord54
ord44
ord42
ord65
ord43
ord37
ord51
ord50
ord47
ord58
ord28
ord32
ord49
ord55
ord15
ord64
ord61
ord23
ord56
ord31
ord30
ord66
ord60

msvcr71

??3@YAXPAX@Z
??_V@YAXPAX@Z
memset
__CxxFrameHandler
free
_CxxThrowException
wcscpy
wcslen
_wtol
wcstok
??_U@YAPAXI@Z
memcpy
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@XZ
memmove
wcsrchr
swprintf
wcscat
memcmp
??2@YAPAXI@Z
_except_handler3
_purecall
_resetstkoflw
wcsncpy
realloc
malloc
wcschr
vswprintf
iswdigit
_wtoi
wcsstr
wcscmp
strncpy
strncmp
_access
__security_error_handler
?terminate@@YAXXZ
__dllonexit
_onexit
??1type_info@@UAE@XZ
_initterm
_adjust_fdiv
__CppXcptFilter
gmtime
time
fclose
_wfopen
_setjmp3
sprintf
fwrite
fflush
printf
longjmp
fprintf
_iob
wcstol
calloc
_strdup

msvcp71

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ

micpackvariant

?PackVariant@@YAJUtagVARIANT@@PAPAXPAK@Z
?UnpackVariant@@YAJPBXPAUtagVARIANT@@PAK@Z

zlibu

ord7
ord3
ord6
ord4
ord10

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
png_IDAT
png_IEND
png_IHDR
png_PLTE
png_bKGD
png_cHRM
png_check_sig
png_chunk_error
png_chunk_warning
png_convert_from_struct_tm
png_convert_from_time_t
png_convert_to_rfc1123
png_create_info_struct
png_create_write_struct
png_destroy_info_struct
png_destroy_write_struct
png_error
png_free
png_free_data
png_gAMA
png_get_copyright
png_get_error_ptr
png_get_header_ver
png_get_header_version
png_get_io_ptr
png_get_libpng_ver
png_get_user_transform_ptr
png_hIST
png_iCCP
png_iTXt
png_init_io
png_malloc
png_memcpy_check
png_memset_check
png_oFFs
png_pCAL
png_pHYs
png_permit_empty_plte
png_sBIT
png_sCAL
png_sPLT
png_sRGB
png_set_IHDR
png_set_PLTE
png_set_bKGD
png_set_bgr
png_set_cHRM
png_set_cHRM_fixed
png_set_compression_level
png_set_compression_mem_level
png_set_compression_method
png_set_compression_strategy
png_set_compression_window_bits
png_set_error_fn
png_set_filler
png_set_filter
png_set_filter_heuristics
png_set_flush
png_set_gAMA
png_set_gAMA_fixed
png_set_hIST
png_set_iCCP
png_set_interlace_handling
png_set_invert_alpha
png_set_invert_mono
png_set_keep_unknown_chunks
png_set_oFFs
png_set_pCAL
png_set_pHYs
png_set_packing
png_set_packswap
png_set_read_user_chunk_fn
png_set_rows
png_set_sBIT
png_set_sCAL
png_set_sPLT
png_set_sRGB
png_set_sRGB_gAMA_and_cHRM
png_set_shift
png_set_sig_bytes
png_set_swap
png_set_swap_alpha
png_set_tIME
png_set_tRNS
png_set_text
png_set_unknown_chunks
png_set_user_transform_info
png_set_write_fn
png_set_write_status_fn
png_set_write_user_transform_fn
png_sig_bytes
png_sig_cmp
png_tEXt
png_tIME
png_tRNS
png_warning
png_write_chunk
png_write_chunk_data
png_write_chunk_end
png_write_chunk_start
png_write_end
png_write_flush
png_write_image
png_write_info
png_write_info_before_PLTE
png_write_png
png_write_row
png_write_rows
png_zTXt

Sections

.text
Size: 168KB - Virtual size: 164KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 2KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 32KB - Virtual size: 28KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

1280201c126091ccf26cb6537318bf52

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

advapi32

ole32

oleaut32

atl71

msvcr71

msvcp71

micpackvariant

zlibu

Exports

Exports

Sections

.text Size: 168KB - Virtual size: 164KB

.rdata Size: 36KB - Virtual size: 33KB

.data Size: 4KB - Virtual size: 2KB

.rsrc Size: 32KB - Virtual size: 28KB

.reloc Size: 28KB - Virtual size: 25KB

.text
Size: 168KB - Virtual size: 164KB

.rdata
Size: 36KB - Virtual size: 33KB

.data
Size: 4KB - Virtual size: 2KB

.rsrc
Size: 32KB - Virtual size: 28KB

.reloc
Size: 28KB - Virtual size: 25KB