u2dpost[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

u2dpost.dll
Size

100KB
MD5

da626e98b128047c30eed7c0a6e3103d
SHA1

527f69c9623157edd1067702a0cc8d5589c8afa3
SHA256

9f2840bb63546fc22ce5cb30711d8575b4aa119b8f323fa9423e2083c54a8e63
SHA512

c8587b139c4c05b02627407edd3bf45dafb7fe680bd44f3eb57f91a78274c335f026273b0534f0d270ba274f035e94bbdeb0818acc3b3b272ca2406a76f36be2
SSDEEP

1536:frKnUevheUuLzGUT842VxV40ZiJooiWC:etZ6LzLgxoooiW

Score

N/A

Malware Config

Signatures

Files

u2dpost.dll
.dll windows x86

5e216d19f69920b8ad76935b2eaee0f1

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

comctl32

ImageList_GetImageCount
ImageList_Add
ImageList_Create

kernel32

LoadLibraryA
FreeLibrary
EnterCriticalSection
InitializeCriticalSection
lstrcpyA
lstrcpynA
lstrcatA
LeaveCriticalSection
GetProcAddress
lstrlenA
CreateFileA
OpenFile
CloseHandle
_lread
DeleteCriticalSection
SetFilePointer
FlushFileBuffers
SetErrorMode
GetLastError
lstrcmpiA
lstrcmpA
GetModuleFileNameA
GetProfileStringA
GlobalFindAtomA
ReadFile
SystemTimeToFileTime
GetSystemTime
WaitForSingleObject
_lwrite
HeapSize
GetCurrentProcess
SetStdHandle
GetStringTypeW
GetStringTypeA
LCMapStringW
LCMapStringA
GetCPInfo
SetUnhandledExceptionFilter
WriteFile
IsBadReadPtr
RtlUnwind
HeapAlloc
HeapReAlloc
HeapFree
InterlockedDecrement
InterlockedIncrement
MultiByteToWideChar
WideCharToMultiByte
GetCommandLineA
GetVersion
GetCurrentThreadId
TlsSetValue
TlsAlloc
TlsFree
SetLastError
TlsGetValue
ExitProcess
TerminateProcess
IsBadCodePtr
IsBadWritePtr
GetACP
GetOEMCP
GetModuleHandleA
GetEnvironmentVariableA
GetVersionExA
HeapDestroy
HeapCreate
VirtualFree
VirtualAlloc
GetEnvironmentStrings
GetEnvironmentStringsW
SetHandleCount
GetStdHandle
GetFileType
GetStartupInfoA
FreeEnvironmentStringsA
FreeEnvironmentStringsW

user32

SendMessageA
DialogBoxParamA
CreateWindowExA
CharUpperA
GetActiveWindow
SetWindowTextA
MessageBeep
MessageBoxA
GetWindowTextLengthA
GetWindowTextA
SetDlgItemTextA
LoadBitmapA
OemToCharA
LoadCursorA
SetCursor
wsprintfA
EndDialog
GetDlgItem
MapDialogRect
LoadStringA

gdi32

DeleteObject

Exports

Exports

InitPerThread
IsThreadSafe
UXDDecodeDestinationOptions
UXDEncodeDestinationOptions
UXDExportToDestination
UXDFreeDestinationOptions
UXDGetErrorText
UXDGetExportDestinations
UXDGetVersion
UXDInitExportDestination
UXDInitialize
UXDTermExportDestination
UXDTerminate
UninitPerThread

Sections

.text
Size: 56KB - Virtual size: 55KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 19KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 8KB - Virtual size: 5KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 8KB - Virtual size: 6KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

5e216d19f69920b8ad76935b2eaee0f1

Headers

File Characteristics

Imports

comctl32

kernel32

user32

gdi32

Exports

Exports

Sections

.text Size: 56KB - Virtual size: 55KB

.rdata Size: 8KB - Virtual size: 6KB

.data Size: 16KB - Virtual size: 19KB

.rsrc Size: 8KB - Virtual size: 5KB

.reloc Size: 8KB - Virtual size: 6KB

.text
Size: 56KB - Virtual size: 55KB

.rdata
Size: 8KB - Virtual size: 6KB

.data
Size: 16KB - Virtual size: 19KB

.rsrc
Size: 8KB - Virtual size: 5KB

.reloc
Size: 8KB - Virtual size: 6KB