VoPackage[.]dll

Sharing

Copy URL

Twitter E-mail

General

Target

VoPackage.dll
Size

668KB
MD5

b6fcaf181a45eeb9401fcde843a3cae8
SHA1

087e24286908e67487391cab2a81dd985fe15623
SHA256

291d0004d6886da651eb1a58baf53cb8c83f6b9e163d4315eedfadfa954b55d3
SHA512

29410b8979217cc953f491454209da362b60c6c4a65d18eb67d2edfe3b642a26187a53e2214a524304b80c22a735ce3421ddb4eaaa6b9bc5de214c4c91f38e81
SSDEEP

6144:iZoPtA7Th6a9tVNWxySoXVx+4oKvMlco+/pXO0kmQinPgo/v8iZdpl:iWP2Th6a9tVwySoX/+4otDXipnJE8l

Score

N/A

Malware Config

Signatures

Files

VoPackage.dll
.dll regsvr32 windows x86

4b03eac18f92056b2c71bba9ff620987

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

LocalFree
lstrlenA
GlobalUnlock
GlobalLock
GlobalFree
WriteFile
SetFilePointer
GlobalReAlloc
ReadFile
GetFileSize
GetLastError
GetUserDefaultLCID
SetLastError
lstrcpyW
FormatMessageW
GetSystemTimeAsFileTime
QueryPerformanceCounter
ExitProcess
GetProcessHeap
HeapSize
HeapReAlloc
HeapFree
HeapAlloc
HeapDestroy
GetVersionExA
LoadLibraryExW
GetCurrentProcessId
GlobalAlloc
CloseHandle
GetModuleHandleW
GetTickCount
GetCurrentThreadId
MultiByteToWideChar
RaiseException
GetVersionExW
WideCharToMultiByte
FreeLibrary
LoadLibraryW
GetProcAddress
DisableThreadLibraryCalls
Sleep
FindResourceExW
LoadResource
LockResource
SizeofResource
FindResourceW
CreateDirectoryW
DeleteFileW
FindFirstFileW
FindNextFileW
FindClose
InterlockedIncrement
InterlockedDecrement
lstrlenW
GetModuleFileNameW
DeleteCriticalSection
EnterCriticalSection
LeaveCriticalSection
InitializeCriticalSection
GetThreadLocale
GetLocaleInfoA
GetACP
InterlockedExchange
CreateFileW

user32

BeginDeferWindowPos
DeferWindowPos
EndDeferWindowPos
SendMessageW
GetWindowThreadProcessId
GetWindowLongW
GetParent
GetForegroundWindow
RegisterWindowMessageW
SendMessageTimeoutW
SetForegroundWindow
SystemParametersInfoW
RegisterClipboardFormatW
GetCursorPos
OffsetRect
GetSystemMetrics
GetWindowRect
PtInRect
LoadStringW
GetTopWindow
DispatchMessageW
TranslateMessage
PeekMessageW
MessageBoxW
MapWindowPoints
GetClientRect
GetDesktopWindow
IsWindowVisible
IsWindow
GetWindow
EnumWindows
EnumChildWindows
GetClassNameW
WindowFromPoint
ScreenToClient
IsChild
GetFocus
IsRectEmpty
GetDoubleClickTime
SetCursor
LoadCursorW
ClientToScreen
ReleaseDC
GetDC
PostQuitMessage
MsgWaitForMultipleObjects

gdi32

GetSystemPaletteEntries
GetObjectW
GetStockObject
GetDIBits
CreateDIBitmap
CreatePalette
StretchBlt
SelectPalette
RealizePalette
SetStretchBltMode
SetDIBitsToDevice
StretchDIBits
CreateDCW
CreateCompatibleDC
GetDeviceCaps
CreateCompatibleBitmap
DeleteObject
DeleteDC
BitBlt
Rectangle
CreatePen
SetROP2
SelectObject

advapi32

RegCloseKey
RegDeleteValueW
RegSetValueExW
RegQueryValueExW
RegOpenKeyExW

ole32

CoTaskMemFree
OleSaveToStream
WriteClassStm
OleLoadFromStream
ReleaseStgMedium
CoCreateInstance
CLSIDFromProgID
StgOpenStorage
StgIsStorageFile
StgCreateDocfile
WriteClassStg
CLSIDFromString
StringFromCLSID
CoGetClassObject
StgCreateDocfileOnILockBytes
CreateILockBytesOnHGlobal

oleaut32

GetErrorInfo
SysFreeString
SysAllocString
VariantInit
VariantClear
SafeArrayDestroyDescriptor
SafeArrayAllocData
SafeArrayAllocDescriptor
SafeArrayRedim
SafeArrayPutElement
LoadRegTypeLi
LoadTypeLi
SysStringLen
SafeArrayCreate
SafeArrayGetVartype
SafeArrayGetDim
SafeArrayGetLBound
SafeArrayGetUBound
SafeArrayAccessData
SafeArrayGetElemsize
SafeArrayUnaccessData
SysReAllocStringLen
VarBstrCat
CreateErrorInfo
SetErrorInfo
VarDecCmp
SafeArrayCopy
VarCmp
RegisterTypeLi
SysAllocStringLen
VarBstrCmp
SafeArrayLock
SafeArrayGetElement
VariantChangeType
SafeArrayUnlock
SafeArrayDestroyData
SysStringByteLen
SysAllocStringByteLen
VariantCopy

atl71

ord49
ord56
ord61
ord23
ord18
ord30
ord31
ord55
ord22
ord64
ord15
ord32
ord58

shlwapi

PathIsRelativeW

msvcr71

fclose
__CppXcptFilter
_adjust_fdiv
_initterm
??1type_info@@UAE@XZ
_onexit
__dllonexit
?terminate@@YAXXZ
__security_error_handler
calloc
wcstol
_wtoi
??3@YAXPAX@Z
??_V@YAXPAX@Z
memset
__CxxFrameHandler
free
_CxxThrowException
_purecall
??0exception@@QAE@ABV0@@Z
??1exception@@UAE@XZ
??0exception@@QAE@XZ
??_U@YAPAXI@Z
memcmp
??2@YAPAXI@Z
memmove
wcsstr
wcslen
_waccess
memcpy
swprintf
wcscpy
wcsrchr
wcscat
_except_handler3
wcscmp
realloc
iswspace
wcschr
_access
_wcsicmp
_wcslwr
wcsncpy
malloc
_resetstkoflw
_wtol
strncpy
strncmp
gmtime
time
_strdup
_wfopen
_setjmp3
vswprintf
sprintf
fwrite
fflush
printf
longjmp
fprintf
_iob
iswdigit

msvcp71

??1?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@XZ
?c_str@?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QBEPBDXZ
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@ABV01@@Z
??0?$basic_string@DU?$char_traits@D@std@@V?$allocator@D@2@@std@@QAE@PBD@Z

micpackvariant

?PackVariant@@YAJUtagVARIANT@@PAPAXPAK@Z
?UnpackVariant@@YAJPBXPAUtagVARIANT@@PAK@Z

zlibu

ord6
ord7
ord10
ord3
ord4

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer
png_IDAT
png_IEND
png_IHDR
png_PLTE
png_bKGD
png_cHRM
png_check_sig
png_chunk_error
png_chunk_warning
png_convert_from_struct_tm
png_convert_from_time_t
png_convert_to_rfc1123
png_create_info_struct
png_create_write_struct
png_destroy_info_struct
png_destroy_write_struct
png_error
png_free
png_free_data
png_gAMA
png_get_copyright
png_get_error_ptr
png_get_header_ver
png_get_header_version
png_get_io_ptr
png_get_libpng_ver
png_get_user_transform_ptr
png_hIST
png_iCCP
png_iTXt
png_init_io
png_malloc
png_memcpy_check
png_memset_check
png_oFFs
png_pCAL
png_pHYs
png_permit_empty_plte
png_sBIT
png_sCAL
png_sPLT
png_sRGB
png_set_IHDR
png_set_PLTE
png_set_bKGD
png_set_bgr
png_set_cHRM
png_set_cHRM_fixed
png_set_compression_level
png_set_compression_mem_level
png_set_compression_method
png_set_compression_strategy
png_set_compression_window_bits
png_set_error_fn
png_set_filler
png_set_filter
png_set_filter_heuristics
png_set_flush
png_set_gAMA
png_set_gAMA_fixed
png_set_hIST
png_set_iCCP
png_set_interlace_handling
png_set_invert_alpha
png_set_invert_mono
png_set_keep_unknown_chunks
png_set_oFFs
png_set_pCAL
png_set_pHYs
png_set_packing
png_set_packswap
png_set_read_user_chunk_fn
png_set_rows
png_set_sBIT
png_set_sCAL
png_set_sPLT
png_set_sRGB
png_set_sRGB_gAMA_and_cHRM
png_set_shift
png_set_sig_bytes
png_set_swap
png_set_swap_alpha
png_set_tIME
png_set_tRNS
png_set_text
png_set_unknown_chunks
png_set_user_transform_info
png_set_write_fn
png_set_write_status_fn
png_set_write_user_transform_fn
png_sig_bytes
png_sig_cmp
png_tEXt
png_tIME
png_tRNS
png_warning
png_write_chunk
png_write_chunk_data
png_write_chunk_end
png_write_chunk_start
png_write_end
png_write_flush
png_write_image
png_write_info
png_write_info_before_PLTE
png_write_png
png_write_row
png_write_rows
png_zTXt

Sections

.text
Size: 428KB - Virtual size: 424KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 104KB - Virtual size: 102KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 4KB - Virtual size: 4KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 80KB - Virtual size: 79KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 48KB - Virtual size: 44KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

4b03eac18f92056b2c71bba9ff620987

Headers

File Characteristics

Imports

kernel32

user32

gdi32

advapi32

ole32

oleaut32

atl71

shlwapi

msvcr71

msvcp71

micpackvariant

zlibu

Exports

Exports

Sections

.text Size: 428KB - Virtual size: 424KB

.rdata Size: 104KB - Virtual size: 102KB

.data Size: 4KB - Virtual size: 4KB

.rsrc Size: 80KB - Virtual size: 79KB

.reloc Size: 48KB - Virtual size: 44KB

.text
Size: 428KB - Virtual size: 424KB

.rdata
Size: 104KB - Virtual size: 102KB

.data
Size: 4KB - Virtual size: 4KB

.rsrc
Size: 80KB - Virtual size: 79KB

.reloc
Size: 48KB - Virtual size: 44KB