iscript[.]dll | Triage

Sharing

Copy URL Twitter E-mail

General

Target

iscript.dll
Size

232KB
MD5

742679327ee56723096eb5aa5928be26
SHA1

20c6d65b0ae8e5e98198cf6dc993c60ada1d6553
SHA256

9fae0665d7b6d21a93a73708249bd44337910cf4f32210c584eda24733cacf7f
SHA512

05fa9e09fa3fd114eb1dbb96f27c680d78a82e318731a81174e68fe559e1d9f1b3565f2e7eff6b838ed41a429fd00577f2bb5885015bc68bb04d0f97c3150bf1
SSDEEP

3072:tn+NO80l7dwCkl9n4G2hxIDXTDooqcQNiplc8uX4jBSa6YTOzDx/iTEJuJIcQVxo:1Ovfb0NiplcYlob1gOHxDQt

Score

1^/10

Malware Config

Signatures

Files

iscript.dll
.dll regsvr32 windows x86

01079e578402fb3b7165570d3ad44913

Headers

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE
IMAGE_FILE_LINE_NUMS_STRIPPED
IMAGE_FILE_LOCAL_SYMS_STRIPPED
IMAGE_FILE_32BIT_MACHINE

Imports

kernel32

DisableThreadLibraryCalls
InitializeCriticalSection
DeleteCriticalSection
GetShortPathNameA
GetModuleHandleA
lstrlenW
lstrlenA
GetModuleFileNameA
lstrcmpiA
HeapDestroy
FindClose
FindFirstFileA
GetFileAttributesA
CreateFileA
MultiByteToWideChar
EnterCriticalSection
CloseHandle
UnmapViewOfFile
ReadFile
WaitForSingleObject
SetEvent
FreeLibrary
LoadLibraryA
GetProcAddress
GetOEMCP
LeaveCriticalSection
InterlockedIncrement
InterlockedDecrement
LocalFree
GetLastError
FormatMessageA
WideCharToMultiByte
QueryPerformanceFrequency
CreateEventA
IsBadCodePtr
ResetEvent
GetACP
GetStringTypeW
GetStringTypeA
SystemTimeToFileTime
VirtualAlloc
WriteFile
IsBadWritePtr
HeapCreate
GetVersionExA
VirtualFree
GetEnvironmentStringsW
GetEnvironmentStrings
GetEnvironmentVariableA
FreeEnvironmentStringsA
GetStartupInfoA
FreeEnvironmentStringsW
IsBadReadPtr
GetCPInfo
Sleep
InterlockedExchange
GetStdHandle
SetHandleCount
GetFileType
LCMapStringW
UnhandledExceptionFilter
LCMapStringA
SetLastError
lstrcatA
MapViewOfFile
CreateFileMappingA
GetFileSize
VirtualQuery
VirtualProtect
SearchPathA
lstrcpyA
GetWindowsDirectoryA
lstrcpynA
GetCommandLineA
GetTickCount
QueryPerformanceCounter
GetVersion
HeapFree
HeapReAlloc
HeapSize
RaiseException
RtlUnwind
CreateThread
GetCurrentThreadId
TlsSetValue
ExitThread
SetUnhandledExceptionFilter
TlsAlloc
HeapAlloc
ExitProcess
TerminateProcess
GetCurrentProcess
TlsFree
TlsGetValue

user32

MsgWaitForMultipleObjects
PeekMessageA
LoadStringA
wsprintfA
CharLowerBuffA
TranslateMessage
GetDesktopWindow
GetMessageA
DispatchMessageA
PostThreadMessageA

advapi32

RegQueryValueA
RegQueryValueExA
RegOpenKeyA
RegEnumKeyExA
RegDeleteKeyA
RegCreateKeyExA
RegCloseKey
RegOpenKeyExA
RegSetValueExA

ole32

CLSIDFromProgID
CoInitialize
CoMarshalInterThreadInterfaceInStream
CoUninitialize
CoGetInterfaceAndReleaseStream
CoCreateInstance
StringFromCLSID
ProgIDFromCLSID
CoTaskMemFree

oleaut32

GetErrorInfo
SafeArrayRedim
SafeArrayGetUBound
SysStringByteLen
SafeArrayCreate
DispGetParam
VariantCopyInd
LoadRegTypeLi
SafeArrayGetElement
SafeArrayPutElement
SysAllocStringLen
SafeArrayGetLBound
SafeArrayGetDim
SysStringLen
SafeArrayDestroy
SysFreeString
SysAllocString
SysReAllocStringLen
VariantChangeType
VariantClear
VariantCopy
VariantInit
SetErrorInfo
CreateErrorInfo
SysAllocStringByteLen

version

VerQueryValueA
GetFileVersionInfoA
GetFileVersionInfoSizeA

Exports

Exports

DllCanUnloadNow
DllGetClassObject
DllRegisterServer
DllUnregisterServer

Sections

.text
Size: 156KB - Virtual size: 152KB

IMAGE_SCN_CNT_CODE
IMAGE_SCN_MEM_EXECUTE
IMAGE_SCN_MEM_READ

.rdata
Size: 36KB - Virtual size: 33KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.data
Size: 16KB - Virtual size: 16KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ
IMAGE_SCN_MEM_WRITE

.rsrc
Size: 4KB - Virtual size: 1KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_READ

.reloc
Size: 16KB - Virtual size: 15KB

IMAGE_SCN_CNT_INITIALIZED_DATA
IMAGE_SCN_MEM_DISCARDABLE
IMAGE_SCN_MEM_READ

Sharing

General

Malware Config

Signatures

Files

01079e578402fb3b7165570d3ad44913

Headers

File Characteristics

Imports

kernel32

user32

advapi32

ole32

oleaut32

version

Exports

Exports

Sections

.text Size: 156KB - Virtual size: 152KB

.rdata Size: 36KB - Virtual size: 33KB

.data Size: 16KB - Virtual size: 16KB

.rsrc Size: 4KB - Virtual size: 1KB

.reloc Size: 16KB - Virtual size: 15KB

.text
Size: 156KB - Virtual size: 152KB

.rdata
Size: 36KB - Virtual size: 33KB

.data
Size: 16KB - Virtual size: 16KB

.rsrc
Size: 4KB - Virtual size: 1KB

.reloc
Size: 16KB - Virtual size: 15KB