tagsdb[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

tagsdb.dll
Size

616KB
MD5

9849d1139ed162a65d78f84a9d71f032
SHA1

c2ba3fe220e93b08ee2eb4ca7e16baea5d564816
SHA256

0a968be86c3a32916cec6f7f3cf35ef9d98eb2091459ec3df916e2454db83c54
SHA512

9ac62132631288d1f1d4f3e529a91a5f6d22fc1418d142333755c77674641385f935f9b97e2a771e5e832937c4a184e1c1b5c943a9f0ba1cf0cfeec9c187ecef
SSDEEP

12288:ubLEZtxLhTNjbsyL1hIt6TdBgbEEj4sJe1a7TxY+UzXzbfDcUe2/XOVUhNkNr:ubLEZtxLvjbsSsxY+UzDr4UBXOVUhNM

Score

N/A

Malware Config

Signatures

Files

tagsdb.dll
.dll windows x86

fd7ba04186eb16df8a86ad788c059d52

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

vsapi

ord379
ord221
ord227
ord220
ord10
ord121
ord124
ord122
ord217
ord311
ord109
ord230
ord23
ord113
ord63
ord96
ord94
ord12
ord64
ord110
ord231
ord2
ord268
ord39
ord42
ord36
ord35
ord120
ord274
ord81
ord80
ord24
ord21
ord172
ord378
ord266
ord78
ord20
ord32
ord7
ord367
ord129
ord19
ord359
ord15
ord16
ord516
ord554
ord86
ord156
ord264
ord3
ord4
ord265
ord27
ord28
ord522
ord87
ord6
ord368
ord17
ord34
ord18
ord320
ord127
ord119
ord5
ord31
ord29
ord85
ord552
ord503
ord514
ord515
ord504
ord523
ord524
ord267
ord520
ord512
ord513
ord553

kernel32

SetEnvironmentVariableA
CompareStringW
CompareStringA
SetStdHandle
GetOEMCP
GetACP
GetCPInfo
GetStringTypeW
IsBadCodePtr
IsBadReadPtr
SetUnhandledExceptionFilter
GetModuleHandleA
IsBadWritePtr
VirtualAlloc
GetEnvironmentStringsW
GetEnvironmentStrings
FreeEnvironmentStringsW
FreeEnvironmentStringsA
GetStartupInfoA
GetFileType
SetHandleCount
VirtualFree
HeapCreate
HeapDestroy
HeapSize
GetCurrentProcess
TerminateProcess
ExitProcess
LCMapStringW
LCMapStringA
MultiByteToWideChar
WideCharToMultiByte
GetLocalTime
GetSystemTime
GetTimeZoneInformation
HeapReAlloc
HeapFree
HeapAlloc
GetCommandLineA
RtlUnwind
FindNextFileW
FindNextFileA
FileTimeToLocalFileTime
FileTimeToSystemTime
Sleep
GetCurrentProcessId
GetStdHandle
SetFilePointer
SetEndOfFile
WriteFile
FlushFileBuffers
ReadFile
CreateFileW
CreateFileA
FindFirstFileW
FindFirstFileA
FindClose
CloseHandle
GetVolumeInformationA
GetVersion
CreateDirectoryW
CreateDirectoryA
RemoveDirectoryW
RemoveDirectoryA
GetModuleFileNameA
GetCurrentDirectoryA
GetCurrentDirectoryW
SetCurrentDirectoryA
SetCurrentDirectoryW
GetLastError
IsDBCSLeadByte
lstrlenA
lstrcpyA
GetShortPathNameA
GetProcAddress
LoadLibraryA
lstrcatA
GetSystemDirectoryA
LoadLibraryW
FreeLibrary
GetStringTypeA
DeleteFileA
DeleteFileW
SetFileTime
LocalFileTimeToFileTime
SetFileAttributesW
MoveFileA
MoveFileW
SetFileAttributesA
SystemTimeToFileTime

user32

CharLowerBuffA
CharUpperBuffA
GetSystemMetrics

advapi32

RegOpenKeyExA
RegQueryValueExA
GetUserNameA

Exports

Exports

tag_check_access_level
tag_check_context
tag_check_context_flags
tag_check_for_define
tag_check_for_enum
tag_check_for_package
tag_check_for_template
tag_check_for_typedef
tag_clear_context
tag_clear_embedded
tag_clear_locals
tag_clear_matches
tag_close_all_db
tag_close_db
tag_context_fix_vb_ifs
tag_context_fix_vb_trys
tag_context_match_tags
tag_create_db
tag_current_context
tag_current_db
tag_current_local
tag_current_version
tag_end_context
tag_filter_type
tag_find_class
tag_find_closest
tag_find_context
tag_find_equal
tag_find_ext_callback
tag_find_extension
tag_find_file
tag_find_global
tag_find_in_class
tag_find_in_file
tag_find_include_file
tag_find_included_by
tag_find_local
tag_find_occurrence
tag_find_prefix
tag_find_refer_by
tag_find_refer_to
tag_find_regex
tag_find_tag
tag_find_type
tag_flush_db
tag_get_class
tag_get_context
tag_get_current_context
tag_get_date
tag_get_db_comment
tag_get_db_flags
tag_get_detail
tag_get_detail2
tag_get_embedded
tag_get_extension
tag_get_file
tag_get_info
tag_get_inheritance
tag_get_instance_info
tag_get_local
tag_get_local2
tag_get_match
tag_get_num_of_context
tag_get_num_of_embedded
tag_get_num_of_locals
tag_get_num_of_matches
tag_get_occurrence
tag_get_type
tag_insert_context
tag_insert_embedded
tag_insert_file_end
tag_insert_file_start
tag_insert_instance
tag_insert_local
tag_insert_local2
tag_insert_match
tag_insert_match2
tag_insert_match_fast
tag_insert_occurrence
tag_insert_reference
tag_insert_simple
tag_insert_tag
tag_is_parent_class
tag_join_class_name
tag_list_any_symbols
tag_list_class_context
tag_list_class_locals
tag_list_class_tags
tag_list_context_globals
tag_list_context_imports
tag_list_context_packages
tag_list_duplicate_tags
tag_list_file_occurrences
tag_list_globals_of_type
tag_list_in_class
tag_list_in_file
tag_list_insert_tag
tag_list_occurrences
tag_match
tag_match_instance
tag_match_occurrences_in_file
tag_match_symbol_in_context
tag_match_uses_in_file
tag_nearest_context
tag_next_class
tag_next_context
tag_next_equal
tag_next_extension
tag_next_file
tag_next_global
tag_next_in_class
tag_next_in_file
tag_next_include_file
tag_next_included_by
tag_next_local
tag_next_occurrence
tag_next_prefix
tag_next_refer_by
tag_next_refer_to
tag_next_regex
tag_next_tag
tag_next_type
tag_normalize_classes
tag_occurrences_end
tag_occurrences_start
tag_open_db
tag_pop_context
tag_pop_matches
tag_push_context
tag_push_matches
tag_pushtag_match
tag_qualify_symbol_name
tag_read_db
tag_register_type
tag_remove_from_class
tag_remove_from_file
tag_remove_tag
tag_rename_file
tag_set_context_parents
tag_set_date
tag_set_db_comment
tag_set_db_flags
tag_set_extension
tag_set_inheritance
tag_set_local_parents
tag_sort_context
tag_sort_locals
tag_split_class_name
tag_transfer_context
tag_tree_add_members_in_category
tag_tree_add_members_in_section
tag_tree_add_members_of
tag_tree_compare_args
tag_tree_compose_tag
tag_tree_decompose_caption
tag_tree_decompose_tag
tag_tree_filter_member
tag_tree_filter_member2
tag_tree_format_args
tag_tree_get_bitmap
tag_tree_insert_context
tag_tree_insert_fast
tag_tree_insert_tag
tag_tree_make_caption
tag_tree_make_caption_fast
tag_tree_prepare_expand
tag_tree_register_cb_type
tag_tree_select_bitmap
tag_tree_set_user_info
tag_tree_type_is_class
tag_tree_type_is_data
tag_tree_type_is_func
tag_tree_type_is_package
tag_tree_type_is_statement
tag_tree_unregister_cb_type
tag_type_get_filter
tag_type_set_filter
tag_unregister_type
tag_update_context
tagdoc_list_locals
tagsdb_version
vsDllRegisterExports
vsTagCloseDB
vsTagComposeTag
vsTagContextMatchTags
vsTagCreateDB
vsTagDecomposeTag
vsTagEmbeddedEnd
vsTagEmbeddedStart
vsTagFindClass
vsTagFindClosest
vsTagFindEqual
vsTagFindExtCallback
vsTagFindFile
vsTagFindGlobal
vsTagFindInFile
vsTagFindIncludeFile
vsTagFindIncludedBy
vsTagFindMember
vsTagFindOccurrence
vsTagFindRegex
vsTagFindTag
vsTagGetBitmap
vsTagGetClassParents
vsTagGetContextInfo
vsTagGetCurrentContext
vsTagGetDate
vsTagGetDetailI
vsTagGetDetailZ
vsTagGetLocalInfo
vsTagGetOccurrence
vsTagGetTagInfo
vsTagGetType
vsTagInsertFileEnd
vsTagInsertFileStart
vsTagInsertOccurrence
vsTagIsContainer
vsTagIsRegisteredTagID
vsTagListFileOccurrences
vsTagListSymbolsInClass
vsTagMakeCaption
vsTagMatchOccurrencesInFile
vsTagMatchSymbolInContext
vsTagMatchUsesInFile
vsTagNormalizeClasses
vsTagOccurrencesEnd
vsTagOccurrencesStart
vsTagOpenDB
vsTagQualifySymbolName
vsTagRemoveFromFile
vsTagRenameFile
vsTagRetagFile
vsTagSetDate
vsTagTreeGetFilterByTypes
vsTagUpdateContext
vsTagUpdateLocals
vstagdoc_list_tags

Sections

.text
Size: 480KB - Virtual size: 477KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 24KB - Virtual size: 22KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 76KB - Virtual size: 366KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 840B

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 28KB - Virtual size: 25KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

fd7ba04186eb16df8a86ad788c059d52

Headers

File Characteristics

Imports

vsapi

kernel32

user32

advapi32

Exports

Exports

Sections

.text Size: 480KB - Virtual size: 477KB

.rdata Size: 24KB - Virtual size: 22KB

.data Size: 76KB - Virtual size: 366KB

.rsrc Size: 4KB - Virtual size: 840B

.reloc Size: 28KB - Virtual size: 25KB

.text
Size: 480KB - Virtual size: 477KB

.rdata
Size: 24KB - Virtual size: 22KB

.data
Size: 76KB - Virtual size: 366KB

.rsrc
Size: 4KB - Virtual size: 840B

.reloc
Size: 28KB - Virtual size: 25KB